Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: fz0Ei3ieYMLlSAqEuUWfFZ5AoF/IleSuR3r58C+i4E8=
Subject key identifier: CC:27:31:3F:DC:EB:37:86:12:F6:5A:0A:2F:F9:85:91:AE:F7:0C:2D
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019DD0518567D7CD8AD4090C81B3DAD155E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0A0C
Signing time: Mon 27 Apr 2026 19:01:36 +0000
Manifest this update: Mon 27 Apr 2026 19:01:36 +0000
Manifest next update: Tue 28 Apr 2026 19:01:36 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: LHHgH/U4X4buDwlHxTpxCK4cLMi4NyOfMM5vO/7BCz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:85:67:d7:cd:8a:d4:09:0c:81:b3:da:d1:55:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Apr 27 19:01:36 2026 GMT
Not After : Apr 28 19:01:36 2026 GMT
Subject: CN=cc27313fdceb378612f65a0a2ff98591aef70c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:3d:12:9a:19:9c:18:46:13:82:35:86:78:
d4:23:fb:82:77:6b:d3:92:c1:e0:08:0f:cf:aa:02:
0f:8b:f0:fd:4f:3f:7f:02:64:e7:c2:85:49:c7:aa:
1b:55:6a:ed:d3:54:b7:86:83:f1:be:23:cf:90:c5:
87:20:a6:e0:22:5b:7b:03:d7:cf:78:9e:db:b3:a8:
46:94:fb:66:3a:a8:cd:09:45:be:bf:a7:a7:75:65:
34:be:51:16:07:88:3d:ff:65:a2:7b:5a:10:39:5b:
e9:e0:0e:29:ab:ee:4f:78:1f:d2:5f:7b:2f:88:8a:
6b:d1:34:2e:fd:61:33:fa:b1:12:f5:50:2f:5a:24:
1e:18:f9:44:45:8c:98:1a:9c:7b:b6:15:75:5c:e6:
6a:e9:23:29:49:cd:2a:64:09:9e:5e:7a:90:14:6f:
2b:29:f0:d7:59:e3:c4:7f:ef:16:44:1d:97:7c:aa:
79:e3:d3:63:a2:d8:9e:54:b9:da:b9:bd:97:22:58:
22:d8:91:aa:b3:01:b3:f4:4b:e8:d8:fa:0e:5a:7d:
d4:d1:79:a2:c7:31:e3:88:cd:c5:4b:ea:c2:42:88:
59:fa:2d:86:2f:b0:aa:14:ae:92:d0:71:2c:0c:50:
90:4d:bb:1a:6e:95:5f:77:b2:9e:61:b5:38:4b:e6:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:31:3F:DC:EB:37:86:12:F6:5A:0A:2F:F9:85:91:AE:F7:0C:2D
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b2:44:f6:63:2e:77:31:9d:d1:85:33:29:17:d4:af:66:5d:
e6:6b:f2:30:a7:b3:f8:16:87:6e:0d:82:51:6f:c6:79:61:d7:
5d:20:18:b4:ad:ca:c4:8c:46:46:d1:dd:57:ed:fe:db:55:0f:
8c:dd:e0:38:56:af:77:fd:ac:cb:cf:21:71:cf:1b:69:cc:47:
60:f1:2e:c8:e0:f3:68:20:b0:5a:ec:35:fe:99:8a:7e:80:7e:
ba:d3:2b:3f:9d:d1:41:08:c4:5d:a8:ca:7d:34:d3:26:6d:0e:
5f:a4:df:f0:b8:c8:00:c2:4f:dd:f9:3b:09:54:4a:89:0c:65:
d5:15:80:bc:e0:6b:58:58:45:98:d0:a0:4d:71:71:a4:61:eb:
e1:5b:f0:37:85:8c:9e:51:c6:1e:54:98:34:3c:33:4a:a0:05:
aa:4c:3f:36:2e:f8:27:0e:ce:a9:cf:94:ef:6e:ff:e9:a8:5a:
28:1d:d1:fe:7c:a9:e4:24:0b:7f:0c:35:0f:12:11:02:8c:bd:
87:ca:a7:56:54:62:19:ae:e9:39:83:65:6b:2e:93:ea:25:65:
77:f7:33:3e:a0:b8:38:92:77:08:83:f0:4b:56:b3:f7:6b:cf:
2f:20:7e:3e:32:2f:77:cf:0b:b7:67:86:35:64:20:1c:46:3d:
70:36:b6:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUYVn182K1AkMgbPa0VXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1
NWY2MmQwHhcNMjYwNDI3MTkwMTM2WhcNMjYwNDI4MTkwMTM2WjAzMTEwLwYDVQQD
EyhjYzI3MzEzZmRjZWIzNzg2MTJmNjVhMGEyZmY5ODU5MWFlZjcwYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rk9EpoZnBhGE4I1hnjUI/uCd2vT
ksHgCA/PqgIPi/D9Tz9/AmTnwoVJx6obVWrt01S3hoPxviPPkMWHIKbgIlt7A9fP
eJ7bs6hGlPtmOqjNCUW+v6endWU0vlEWB4g9/2Wie1oQOVvp4A4pq+5PeB/SX3sv
iIpr0TQu/WEz+rES9VAvWiQeGPlERYyYGpx7thV1XOZq6SMpSc0qZAmeXnqQFG8r
KfDXWePEf+8WRB2XfKp549NjotieVLnaub2XIlgi2JGqswGz9Evo2PoOWn3U0Xmi
xzHjiM3FS+rCQohZ+i2GL7CqFK6S0HEsDFCQTbsabpVfd7KeYbU4S+ac8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwnMT/c6zeGEvZaCi/5hZGu9wwtMB8GA1UdIwQY
MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt
MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw
LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrJE9mMu
dzGd0YUzKRfUr2Zd5mvyMKez+BaHbg2CUW/GeWHXXSAYtK3KxIxGRtHdV+3+21UP
jN3gOFavd/2sy88hcc8bacxHYPEuyODzaCCwWuw1/pmKfoB+utMrP53RQQjEXajK
fTTTJm0OX6Tf8LjIAMJP3fk7CVRKiQxl1RWAvOBrWFhFmNCgTXFxpGHr4VvwN4WM
nlHGHlSYNDwzSqAFqkw/Ni74Jw7Oqc+U727/6ahaKB3R/nyp5CQLfww1DxIRAoy9
h8qnVlRiGa7pOYNlay6T6iVld/czPqC4OJJ3CIPwS1az92vPLyB+PjIvd88Lt2eG
NWQgHEY9cDa28A==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:48:45 2026 by rpki-client