Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: CVpuzC/tiXWPC+O/Ky330yeU3bCpKLFZJicmXr/G+fg=
Subject key identifier: F9:9F:48:69:F9:63:D8:9B:3C:14:80:41:F2:F1:ED:7D:B1:26:5E:DE
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019D6129EEE449ACA5C640473A70CEA5E1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 1342
Signing time: Mon 06 Apr 2026 05:00:31 +0000
Manifest this update: Mon 06 Apr 2026 05:00:31 +0000
Manifest next update: Tue 07 Apr 2026 05:00:31 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: w0J4qooWFb5HYsLIXAf+8u9wNSF8cAnG9iXxqVXHA7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:29:ee:e4:49:ac:a5:c6:40:47:3a:70:ce:a5:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Apr 6 05:00:31 2026 GMT
Not After : Apr 7 05:00:31 2026 GMT
Subject: CN=f99f4869f963d89b3c148041f2f1ed7db1265ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:71:4e:93:0e:03:74:01:96:26:75:b9:99:9d:
f4:a3:df:6c:d6:6b:17:45:83:a6:42:eb:72:2e:02:
48:0d:04:c2:be:9e:c2:0d:16:11:b5:45:56:14:dd:
cc:77:91:de:88:d8:3a:4d:87:bc:b6:9d:94:ba:7e:
ab:4e:df:93:c3:4e:dd:8f:6f:50:9c:28:d2:fb:81:
e3:8a:f8:53:5b:9a:f4:90:5e:61:53:e1:ad:f3:49:
76:ad:4a:3d:08:03:ad:67:61:7a:69:22:d1:86:1f:
af:8c:64:5a:20:4b:16:b3:c2:8d:31:0a:19:bb:38:
2c:3c:90:7f:28:e0:4c:b8:cc:2d:ad:cd:12:8f:ae:
a6:b1:ea:a8:4b:f5:7b:3e:68:f4:fa:20:4a:f0:ea:
20:1a:cf:01:49:01:a5:cb:a2:9e:8f:3e:b3:89:a9:
d1:ec:ef:be:ee:09:59:74:17:46:16:4b:3a:b4:32:
e3:c9:de:47:01:57:93:38:65:91:e4:db:43:7d:b4:
6d:08:3b:a6:dc:aa:9e:c6:d4:8e:59:bd:39:3a:0b:
40:a2:a9:a9:be:12:30:d1:9b:29:92:ed:eb:d9:b1:
de:3c:90:23:43:15:2c:f6:9a:98:c0:80:b3:02:95:
1b:62:11:db:5c:3c:7a:ea:63:f3:0a:17:8b:06:62:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:48:69:F9:63:D8:9B:3C:14:80:41:F2:F1:ED:7D:B1:26:5E:DE
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:8a:94:7c:db:af:f3:a2:6b:d9:69:84:f9:2c:68:0a:60:
81:dd:05:f6:38:fc:27:ab:4b:48:48:fd:fb:5f:97:67:38:f2:
d6:e2:32:31:e8:0d:5e:d0:09:4f:ed:79:d1:52:9a:6d:dc:82:
dd:47:8d:a2:62:00:50:f7:c3:0d:a9:7a:94:21:12:c8:38:f0:
f5:f5:18:9b:a7:e0:b1:0b:d1:f4:eb:5d:f9:01:db:c7:05:6c:
48:26:3d:e6:0c:95:b4:06:dd:73:19:63:16:d0:71:72:e6:19:
05:7e:2a:81:1d:20:ec:0d:c5:8d:f7:e4:a3:bd:b3:90:bb:1d:
4d:20:6e:54:68:f1:26:f9:8f:83:8b:45:16:dd:f5:ad:63:0d:
0d:97:a8:e5:bb:34:89:2a:41:bb:1e:d8:c3:81:11:f0:2e:c5:
65:a9:c0:1c:6e:2f:fe:8c:e6:60:91:54:99:d4:06:01:03:f0:
ff:5c:98:d1:30:0f:93:44:06:20:46:79:19:d7:f3:00:ba:3d:
b3:df:41:82:25:06:28:dd:cd:7a:0e:5a:6d:c8:f4:83:2d:9f:
7c:8f:c9:59:98:ab:a0:8d:b8:6f:00:6a:c5:ef:0f:7a:fc:9a:
38:fe:1b:8b:cc:ca:5e:14:dc:fd:c9:2d:91:35:e3:d8:76:47:
50:d6:0b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1hKe7kSaylxkBHOnDOpeH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjYwNDA2MDUwMDMxWhcNMjYwNDA3MDUwMDMxWjAzMTEwLwYDVQQD
EyhmOTlmNDg2OWY5NjNkODliM2MxNDgwNDFmMmYxZWQ3ZGIxMjY1ZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nFOkw4DdAGWJnW5mZ30o99s1msX
RYOmQutyLgJIDQTCvp7CDRYRtUVWFN3Md5HeiNg6TYe8tp2Uun6rTt+Tw07dj29Q
nCjS+4HjivhTW5r0kF5hU+Gt80l2rUo9CAOtZ2F6aSLRhh+vjGRaIEsWs8KNMQoZ
uzgsPJB/KOBMuMwtrc0Sj66mseqoS/V7Pmj0+iBK8OogGs8BSQGly6Kejz6zianR
7O++7glZdBdGFks6tDLjyd5HAVeTOGWR5NtDfbRtCDum3KqextSOWb05OgtAoqmp
vhIw0Zspku3r2bHePJAjQxUs9pqYwICzApUbYhHbXDx66mPzCheLBmJ9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmfSGn5Y9ibPBSAQfLx7X2xJl7eMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARneKlHzb
r/Oia9lphPksaApggd0F9jj8J6tLSEj9+1+XZzjy1uIyMegNXtAJT+150VKabdyC
3UeNomIAUPfDDal6lCESyDjw9fUYm6fgsQvR9Otd+QHbxwVsSCY95gyVtAbdcxlj
FtBxcuYZBX4qgR0g7A3Fjffko72zkLsdTSBuVGjxJvmPg4tFFt31rWMNDZeo5bs0
iSpBux7Yw4ER8C7FZanAHG4v/ozmYJFUmdQGAQPw/1yY0TAPk0QGIEZ5GdfzALo9
s99BgiUGKN3Neg5abcj0gy2ffI/JWZiroI24bwBqxe8PevyaOP4bi8zKXhTc/ckt
kTXj2HZHUNYL0w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:03 2026 by rpki-client