Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: aaCzYYeO6Hr6ZXgPv3JEYqteH9+BwWAKQPciuM5cqOw=
Subject key identifier: E2:E1:DD:AA:DF:A5:FB:53:49:86:71:63:4A:CC:26:EF:63:E0:60:71
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019D9B516DFB343BEE99ED0FBF3731ECAF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0FA9
Signing time: Fri 17 Apr 2026 12:01:38 +0000
Manifest this update: Fri 17 Apr 2026 12:01:38 +0000
Manifest next update: Sat 18 Apr 2026 12:01:38 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: 0438zx2iQoAtzCbMNHBldn223FHmYxRlb7JqGBo4Yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:6d:fb:34:3b:ee:99:ed:0f:bf:37:31:ec:af:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Apr 17 12:01:38 2026 GMT
Not After : Apr 18 12:01:38 2026 GMT
Subject: CN=e2e1ddaadfa5fb53498671634acc26ef63e06071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:09:6e:2c:ae:d9:57:04:94:29:d1:99:72:
db:01:9a:c5:71:50:db:fd:69:86:9b:8a:89:18:4e:
5f:46:4c:71:65:1b:bf:be:85:42:07:1f:35:72:9a:
0a:81:2e:7a:10:e0:71:42:b9:a3:86:13:52:c1:69:
8e:6d:32:3c:e4:03:3e:0b:1d:56:bb:76:c4:63:e4:
6c:80:2d:f6:9b:51:15:6e:0b:01:3d:3f:93:78:0f:
50:ef:02:19:f2:ff:2a:96:39:ed:9d:15:5f:f9:20:
22:50:ff:f8:d7:6c:5e:05:72:11:0d:9f:2c:ca:5b:
c8:13:a0:e0:ed:d8:0e:4b:db:75:ae:10:ed:2a:d9:
67:ee:2b:b3:15:d0:74:69:63:e6:92:19:fa:46:01:
8f:33:36:8a:3c:c8:ea:94:d8:71:b5:64:b9:dc:e8:
44:ac:e8:6f:a9:1a:44:b3:87:66:62:4c:7d:4a:57:
57:eb:ec:4e:d8:34:7e:6d:b9:f7:ac:e8:18:17:1b:
48:d2:ee:5c:e2:76:63:2e:ca:41:a1:25:cf:df:8b:
1d:39:56:bd:c8:f7:99:54:ee:b6:00:a4:bd:bb:76:
01:7d:02:fd:7b:1d:03:8b:7f:fe:96:97:2c:39:ac:
e6:d6:ce:1c:9a:46:20:98:04:b8:a7:7e:8f:66:40:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E1:DD:AA:DF:A5:FB:53:49:86:71:63:4A:CC:26:EF:63:E0:60:71
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:25:0e:cb:d4:38:f2:54:d4:b3:ee:83:6a:e9:47:c9:f9:
15:33:e0:17:dc:91:c9:dd:9f:61:f1:67:36:1a:c9:e3:f1:9b:
6c:7e:54:0c:4c:f5:5c:35:1c:b9:2a:88:bf:f0:d5:a0:d6:0f:
97:5e:28:f1:33:2d:e7:4e:93:28:20:18:c1:bd:3c:57:ee:17:
c6:ea:fa:9b:10:56:58:77:84:8d:9d:db:89:d6:38:13:10:f4:
c7:29:f7:bf:07:c2:67:ee:c0:c6:81:73:0a:14:d3:a9:bf:37:
49:aa:32:f4:0d:81:6e:1e:6a:9f:43:21:68:dc:0a:17:77:f5:
aa:b5:2e:71:6a:14:49:3a:cd:21:8b:e9:5d:82:51:dc:87:9f:
cc:5d:28:25:2c:ce:1c:fe:62:12:03:f4:c3:15:6d:e6:8e:c8:
3a:2f:02:b3:a4:77:3c:ab:01:b3:2e:b2:f3:7a:0c:2b:4b:20:
6c:81:57:c5:4d:2d:95:90:96:ae:ec:ac:14:31:d8:9f:c6:c2:
08:15:0d:7e:a5:13:2a:14:87:bb:44:a6:90:47:ce:61:a5:7c:
ea:de:fb:46:4a:28:74:2e:70:aa:9f:1a:cc:79:ac:29:18:5d:
ba:35:15:f5:a1:ba:a3:6a:66:cd:29:bc:a4:93:b2:69:4a:e0:
86:3b:e5:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUW37NDvume0Pvzcx7K8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIyYjRhZGUwZWQxZDRkNTMyOGVhZTVmMzhhNThiZTk1
M2Y4MzgwHhcNMjYwNDE3MTIwMTM4WhcNMjYwNDE4MTIwMTM4WjAzMTEwLwYDVQQD
EyhlMmUxZGRhYWRmYTVmYjUzNDk4NjcxNjM0YWNjMjZlZjYzZTA2MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX0Jbiyu2VcElCnRmXLbAZrFcVDb
/WmGm4qJGE5fRkxxZRu/voVCBx81cpoKgS56EOBxQrmjhhNSwWmObTI85AM+Cx1W
u3bEY+RsgC32m1EVbgsBPT+TeA9Q7wIZ8v8qljntnRVf+SAiUP/412xeBXIRDZ8s
ylvIE6Dg7dgOS9t1rhDtKtln7iuzFdB0aWPmkhn6RgGPMzaKPMjqlNhxtWS53OhE
rOhvqRpEs4dmYkx9SldX6+xO2DR+bbn3rOgYFxtI0u5c4nZjLspBoSXP34sdOVa9
yPeZVO62AKS9u3YBfQL9ex0Di3/+lpcsOazm1s4cmkYgmAS4p36PZkAM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLh3arfpftTSYZxY0rMJu9j4GBxMB8GA1UdIwQY
MBaAFMvSK0reDtHU1TKOrl84pYvpU/g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQt
MjlmMzM0ZTExYTE5LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NWJhODAtMDc1MS00Y2I5LThjYjQtMjlmMzM0ZTExYTE5
LzEveTlJclN0NE8wZFRWTW82dVh6aWxpLWxULURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXElDsvU
OPJU1LPug2rpR8n5FTPgF9yRyd2fYfFnNhrJ4/GbbH5UDEz1XDUcuSqIv/DVoNYP
l14o8TMt506TKCAYwb08V+4Xxur6mxBWWHeEjZ3bidY4ExD0xyn3vwfCZ+7AxoFz
ChTTqb83Saoy9A2Bbh5qn0MhaNwKF3f1qrUucWoUSTrNIYvpXYJR3IefzF0oJSzO
HP5iEgP0wxVt5o7IOi8Cs6R3PKsBsy6y83oMK0sgbIFXxU0tlZCWruysFDHYn8bC
CBUNfqUTKhSHu0SmkEfOYaV86t77RkoodC5wqp8azHmsKRhdujUV9aG6o2pmzSm8
pJOyaUrghjvlNw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:30 2026 by rpki-client