Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
File: Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft (raw, json)
Hash identifier: n9kvIIZLicXNncuEiRg8WLoRJv/vmjNreH5fWS5fHrc=
Subject key identifier: D0:F0:1F:8B:37:26:98:74:FE:70:BB:61:F1:2E:8E:DF:3B:92:D0:02
Authority key identifier: 63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
Certificate issuer: /CN=632e3d037bf0507571b2a068cb90308374ce53ed
Certificate serial: 019D9AABCB98F281308B2CF9F89D628B5CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
Manifest number: 0AF0
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: NL-GZ6A5efHdGaOTzp86clCa2uc.roa (hash: ncgag6cx1L4BB9efkwTYVUbJ2MuFxWCJXY1VLSVWtpU=)
2: UADZ4YVn7TSGISo3JiXNjBmBm_s.roa (hash: N3tP1R0iLr7HsiUesHdYEFoZ03zveLr6qDLnn0E6Gpg=)
3: Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl (hash: jDF57IyD6bTkMTN9dwegXI521Uxf5cea4c2PWXRM468=)
4: mB45dvu5Htfn5d_oFn0R_Y2_KRM.roa (hash: EtvaMfR4fmUPI0A4y3DpkyLZRtcwYo14fBp9kPpZZx8=)
5: utuYkDSjgl6DW6FD4qnbkWDpESc.roa (hash: vNrbl/jL6h1nrgmuIRvfEjHF819EKSekUKjVB/Vl0ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cb:98:f2:81:30:8b:2c:f9:f8:9d:62:8b:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632e3d037bf0507571b2a068cb90308374ce53ed
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=d0f01f8b37269874fe70bb61f12e8edf3b92d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:04:f6:ae:f1:92:3c:50:34:59:f2:4a:07:
f0:d5:6d:f4:61:70:e6:b5:40:ae:7d:e5:8b:16:48:
09:c0:49:ea:81:d0:bf:af:92:f6:e6:01:8f:f7:f2:
33:f4:98:9e:ca:bc:e0:d3:1b:01:8a:08:c4:53:64:
6f:39:bd:7d:35:23:ba:6f:a0:87:2a:eb:03:fc:8c:
4e:de:33:02:4f:88:dc:2c:ff:71:3a:21:fc:68:34:
15:1d:9f:00:47:54:5a:e0:b2:85:2b:b4:dd:cf:26:
9d:a7:d6:5c:a4:99:99:a4:c8:27:a6:ba:33:65:8b:
73:17:c5:2c:7e:0d:38:37:e1:9c:2d:e9:a7:94:e0:
45:24:ce:37:ca:a1:a9:83:cb:a5:1e:8f:21:3d:d1:
e0:4a:a3:5c:2b:3e:76:36:62:52:57:10:aa:ab:f7:
e5:a1:3f:ee:3d:3f:93:1f:88:c4:af:ff:30:95:5e:
62:a3:6b:c0:72:20:e5:51:aa:95:67:c7:83:82:4c:
f2:45:dc:bd:be:a2:0b:38:ac:07:c0:c2:9f:67:5c:
3c:cf:60:bd:fb:dd:f4:b3:4e:ac:25:83:a8:e9:68:
f5:f0:78:cc:6b:e8:7f:22:59:27:7e:95:c6:79:be:
e6:93:c2:f7:bf:99:9b:87:f0:e4:76:72:47:7f:49:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:1F:8B:37:26:98:74:FE:70:BB:61:F1:2E:8E:DF:3B:92:D0:02
X509v3 Authority Key Identifier:
keyid:63:2E:3D:03:7B:F0:50:75:71:B2:A0:68:CB:90:30:83:74:CE:53:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yy49A3vwUHVxsqBoy5Awg3TOU-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f9f4a9-a0cd-4107-aa41-d52a18985999/1/Yy49A3vwUHVxsqBoy5Awg3TOU-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2d:e7:4a:2a:87:b1:90:ed:30:4d:47:3d:6e:7a:3d:fe:57:
8a:f2:f2:78:1b:a7:00:71:b9:83:9c:2f:b2:2d:34:f2:c1:7f:
94:35:97:31:a7:b5:16:8e:36:09:42:3c:3f:40:72:d0:1b:27:
dd:e8:d9:ed:12:86:61:a9:b4:04:b7:24:39:4b:be:c8:2e:2f:
e7:82:d3:51:12:1d:82:73:c8:70:92:8e:2e:52:45:96:1c:9e:
50:e2:e8:03:61:1d:77:8c:d0:7d:c2:bc:c3:96:c9:c9:7d:19:
8a:5f:e9:e8:bb:04:91:66:ff:35:2d:94:11:18:1e:3f:01:44:
96:78:49:b3:a2:57:62:49:4c:6d:20:73:32:41:59:1f:2c:a1:
65:f8:2a:9b:80:6c:d6:b0:70:8b:6b:95:7d:4d:b9:c4:2d:a4:
0f:e7:83:c3:d8:65:66:07:d7:b3:80:7b:ce:a3:08:c4:22:33:
05:72:61:21:46:ee:9f:c4:7b:65:cc:02:b9:02:79:ae:8d:f4:
80:51:62:d8:70:79:87:fd:b9:60:c0:a6:c7:b4:08:3d:c0:b8:
c7:06:0a:88:e3:b9:f0:52:22:9f:ac:51:4e:a2:f1:9d:84:cc:
24:54:57:b7:a1:73:29:02:3e:f6:08:b3:6b:8e:b2:29:39:80:
68:53:de:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8uY8oEwiyz5+J1ii1y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmUzZDAzN2JmMDUwNzU3MWIyYTA2OGNiOTAzMDgzNzRj
ZTUzZWQwHhcNMjYwNDE3MDkwMDQzWhcNMjYwNDE4MDkwMDQzWjAzMTEwLwYDVQQD
EyhkMGYwMWY4YjM3MjY5ODc0ZmU3MGJiNjFmMTJlOGVkZjNiOTJkMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ME9q7xkjxQNFnySgfw1W30YXDm
tUCufeWLFkgJwEnqgdC/r5L25gGP9/Iz9Jieyrzg0xsBigjEU2RvOb19NSO6b6CH
KusD/IxO3jMCT4jcLP9xOiH8aDQVHZ8AR1Ra4LKFK7Tdzyadp9ZcpJmZpMgnproz
ZYtzF8Usfg04N+GcLemnlOBFJM43yqGpg8ulHo8hPdHgSqNcKz52NmJSVxCqq/fl
oT/uPT+TH4jEr/8wlV5io2vAciDlUaqVZ8eDgkzyRdy9vqILOKwHwMKfZ1w8z2C9
+930s06sJYOo6Wj18HjMa+h/IlknfpXGeb7mk8L3v5mbh/DkdnJHf0nA8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDwH4s3Jph0/nC7YfEujt87ktACMB8GA1UdIwQY
MBaAFGMuPQN78FB1cbKgaMuQMIN0zlPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEt
ZDUyYTE4OTg1OTk5LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mOWY0YTktYTBjZC00MTA3LWFhNDEtZDUyYTE4OTg1OTk5
LzEvWXk0OUEzdndVSFZ4c3FCb3k1QXdnM1RPVS0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay3nSiqH
sZDtME1HPW56Pf5XivLyeBunAHG5g5wvsi008sF/lDWXMae1Fo42CUI8P0By0Bsn
3ejZ7RKGYam0BLckOUu+yC4v54LTURIdgnPIcJKOLlJFlhyeUOLoA2Edd4zQfcK8
w5bJyX0Zil/p6LsEkWb/NS2UERgePwFElnhJs6JXYklMbSBzMkFZHyyhZfgqm4Bs
1rBwi2uVfU25xC2kD+eDw9hlZgfXs4B7zqMIxCIzBXJhIUbun8R7ZcwCuQJ5ro30
gFFi2HB5h/25YMCmx7QIPcC4xwYKiOO58FIin6xRTqLxnYTMJFRXt6FzKQI+9giz
a46yKTmAaFPeWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:29 2026 by rpki-client