Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: 3JAlfHuS0NOb0OAv0lTtG9n1kA9lenSPqtEAw4tD0sE=
Subject key identifier: A7:31:14:97:55:9D:60:75:91:EF:1C:E8:E6:57:32:50:66:DF:67:A2
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019CE6A4A788F82214BD2440EC1607A2685D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0993
Signing time: Fri 13 Mar 2026 10:01:16 +0000
Manifest this update: Fri 13 Mar 2026 10:01:16 +0000
Manifest next update: Sat 14 Mar 2026 10:01:16 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: m7EtPSIQu0Yy4rqAn9hrMYm3i7u0oP/gol98QD4gS2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:a7:88:f8:22:14:bd:24:40:ec:16:07:a2:68:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Mar 13 10:01:16 2026 GMT
Not After : Mar 14 10:01:16 2026 GMT
Subject: CN=a7311497559d607591ef1ce8e657325066df67a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:04:11:88:7e:39:bb:ec:d8:c8:a8:04:f2:
cb:35:11:64:d1:4f:3a:70:75:b7:a2:40:85:ad:f7:
81:7e:a0:b6:f5:a1:61:d4:fd:8c:a8:73:ab:d0:14:
2d:d4:84:fc:09:a0:8b:73:30:78:02:7e:9f:c2:ee:
35:63:d6:84:0c:38:b2:df:da:48:de:2a:b5:db:e8:
1a:e0:4e:c9:ed:09:48:9b:ea:36:d4:3b:44:c7:dc:
c1:e1:2d:f9:b2:63:82:10:99:97:37:ea:e5:f8:7a:
de:d9:be:af:25:b3:b3:28:f6:c1:14:3e:68:74:66:
a8:21:2d:c9:01:1f:45:4d:07:9d:ef:2f:1b:c3:9f:
76:50:89:1f:e3:53:7e:a3:46:b0:7d:44:c0:ea:77:
dd:4b:75:95:22:7f:08:e6:f5:f5:be:10:76:3f:9f:
50:77:51:51:80:e7:f2:8e:42:3c:f4:56:9f:69:90:
a4:6c:ce:94:9b:7f:2c:c1:77:c6:11:3e:8f:3a:53:
86:ef:c5:0d:e9:72:8e:25:35:73:19:64:c9:91:ef:
e1:f6:b2:77:dc:f8:e8:b5:b5:b4:9a:5c:8f:f9:ab:
cf:4a:6d:51:5d:18:83:da:e0:bd:3c:fe:f4:d5:de:
53:b7:0a:94:54:2e:c1:55:ae:c8:b5:e0:bd:09:cf:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:14:97:55:9D:60:75:91:EF:1C:E8:E6:57:32:50:66:DF:67:A2
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:dc:d6:7d:e4:aa:29:93:0f:ce:8a:f7:24:56:08:82:3c:
3e:3c:55:b8:6d:5c:de:79:6c:0f:11:6a:c7:30:83:61:1e:7d:
42:97:91:ea:ba:6c:41:5d:aa:a8:66:34:12:0d:07:ac:b9:be:
c2:73:72:01:02:70:32:cd:ac:e7:22:a8:da:3a:b1:df:6e:e2:
a4:b2:76:15:86:49:69:b4:e9:0a:c8:96:e7:85:06:f8:b5:2a:
d7:ac:90:d4:93:2f:65:35:09:ad:16:e5:4d:3c:9e:ca:87:d9:
47:9e:f4:4e:4f:91:17:1c:f4:91:5e:1e:25:c5:0b:5f:a5:0d:
54:3b:8b:6b:e1:19:f0:79:33:29:99:94:9b:c7:f9:2e:a0:f5:
f8:35:f2:bb:3e:33:5a:82:56:fb:7f:31:96:d4:2b:ba:b7:21:
18:90:79:ed:b5:aa:49:30:9b:d8:5e:5e:a0:cb:83:fa:f8:29:
af:cd:19:f0:d3:69:14:1a:df:41:c6:42:2d:9a:eb:3e:99:d6:
76:40:11:b4:b9:c5:98:95:87:6f:b8:2e:8f:21:69:7e:43:7a:
31:d9:76:63:fe:12:06:f6:bd:94:ca:4b:60:40:0b:db:e3:97:
d0:61:36:f1:6b:98:e0:95:0b:a0:bd:09:57:53:f1:19:1f:05:
b6:5e:7d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpKeI+CIUvSRA7BYHomhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1
NWY2MmQwHhcNMjYwMzEzMTAwMTE2WhcNMjYwMzE0MTAwMTE2WjAzMTEwLwYDVQQD
EyhhNzMxMTQ5NzU1OWQ2MDc1OTFlZjFjZThlNjU3MzI1MDY2ZGY2N2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J8EEYh+Obvs2MioBPLLNRFk0U86
cHW3okCFrfeBfqC29aFh1P2MqHOr0BQt1IT8CaCLczB4An6fwu41Y9aEDDiy39pI
3iq12+ga4E7J7QlIm+o21DtEx9zB4S35smOCEJmXN+rl+Hre2b6vJbOzKPbBFD5o
dGaoIS3JAR9FTQed7y8bw592UIkf41N+o0awfUTA6nfdS3WVIn8I5vX1vhB2P59Q
d1FRgOfyjkI89FafaZCkbM6Um38swXfGET6POlOG78UN6XKOJTVzGWTJke/h9rJ3
3PjotbW0mlyP+avPSm1RXRiD2uC9PP701d5TtwqUVC7BVa7IteC9Cc/yEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcxFJdVnWB1ke8c6OZXMlBm32eiMB8GA1UdIwQY
MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt
MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw
LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJLc1n3k
qimTD86K9yRWCII8PjxVuG1c3nlsDxFqxzCDYR59QpeR6rpsQV2qqGY0Eg0HrLm+
wnNyAQJwMs2s5yKo2jqx327ipLJ2FYZJabTpCsiW54UG+LUq16yQ1JMvZTUJrRbl
TTyeyofZR570Tk+RFxz0kV4eJcULX6UNVDuLa+EZ8HkzKZmUm8f5LqD1+DXyuz4z
WoJW+38xltQrurchGJB57bWqSTCb2F5eoMuD+vgpr80Z8NNpFBrfQcZCLZrrPpnW
dkARtLnFmJWHb7gujyFpfkN6Mdl2Y/4SBva9lMpLYEAL2+OX0GE28WuY4JULoL0J
V1PxGR8Ftl59iw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:16 2026 by rpki-client