Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: wsOT5Kc0CMVPL7s8gMMRV3zEul1MhP2r7QfLJF7cL90=
Subject key identifier: BD:90:4D:72:A0:A5:11:50:F9:DB:10:C1:53:BF:DA:CD:2C:70:93:0C
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019FA1BB1A5B7ACAA45800D1DE8012C5D736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0AFD
Signing time: Mon 27 Jul 2026 04:00:21 +0000
Manifest this update: Mon 27 Jul 2026 04:00:21 +0000
Manifest next update: Tue 28 Jul 2026 04:00:21 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: tc3s7KtHEivnsSI5dBxPEmNC0g+/hKwBTmlOXhS0XEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:1a:5b:7a:ca:a4:58:00:d1:de:80:12:c5:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jul 27 04:00:21 2026 GMT
Not After : Jul 28 04:00:21 2026 GMT
Subject: CN=bd904d72a0a51150f9db10c153bfdacd2c70930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:d0:f1:ab:37:00:a0:43:ea:42:bf:62:d8:
df:cb:25:e8:ce:79:9b:a8:45:eb:e5:56:74:34:2f:
4c:d5:3e:86:92:1b:84:4a:5f:65:4e:64:c3:43:06:
8b:bd:08:42:8b:2e:06:00:0d:76:5d:61:19:55:0e:
8d:6f:4e:b5:52:c7:33:14:ab:39:40:eb:5b:6a:cc:
d4:3c:6a:59:9c:87:54:2b:da:fd:3d:e5:27:12:2d:
96:cc:13:5f:b9:16:9b:d9:6a:7f:f6:55:5f:eb:fb:
3a:53:32:7b:bb:c6:a1:eb:1d:e2:d3:40:be:10:c3:
22:8e:2c:ff:b4:8f:f8:7c:fd:5c:82:98:5e:ad:d4:
01:5b:51:3d:84:7d:0b:92:40:31:1e:14:34:20:3e:
13:9f:e6:fd:01:d0:66:18:4b:19:09:b7:ae:26:f1:
0d:50:bd:01:5b:6d:2f:02:08:e8:94:98:82:e6:15:
4c:49:b2:9b:e2:cc:37:2b:62:52:e1:ca:6c:64:63:
25:09:88:eb:d7:e5:75:fe:b4:55:ca:d4:39:b3:08:
a8:52:48:bc:db:7c:fd:e1:ac:3e:9a:dc:9b:ec:9c:
8e:0d:7c:60:f5:c8:5b:bb:69:fa:b6:10:2b:de:08:
65:70:ae:13:4b:17:9d:6a:85:4d:df:fc:dc:4d:c7:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:4D:72:A0:A5:11:50:F9:DB:10:C1:53:BF:DA:CD:2C:70:93:0C
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5f:36:90:90:6f:f7:a7:21:0d:8d:22:b3:cc:03:89:f5:e9:
86:d2:32:4c:8a:21:1a:ee:fc:23:8b:2b:09:24:7a:cc:a8:a7:
0b:e1:76:8b:60:6d:c8:53:12:42:16:d1:7f:94:8d:16:6b:d3:
da:3f:8a:88:0a:79:37:57:9b:94:eb:ad:29:22:6b:bd:69:98:
85:a4:58:d0:31:4a:44:5a:cc:ac:bc:17:77:59:0a:cf:ca:38:
cd:06:bf:62:cd:89:61:a9:c8:e1:b6:bf:19:d2:52:fe:df:98:
00:cc:5f:b4:c1:b4:fc:79:54:08:3a:33:f1:5c:d8:ff:72:ba:
97:6a:a1:6f:58:3d:7b:28:20:80:f0:dc:59:29:8a:61:67:c1:
df:1a:dc:1c:0b:81:a7:ab:c7:f7:98:84:bd:63:4e:95:21:f1:
50:dd:5f:81:b4:a3:57:78:24:05:b5:e7:d2:0c:8e:97:2c:60:
ef:ba:4c:1d:0b:48:a8:7f:79:86:61:a9:dd:41:03:19:f5:c5:
f1:a9:06:be:b1:f6:f9:21:2d:8d:99:fc:25:a8:34:2f:0d:e0:
d5:39:ef:a3:ab:31:40:2e:de:1a:a8:67:03:ea:ae:b2:7e:7e:
9e:cf:bb:5d:68:2c:18:57:bd:78:74:91:8e:25:bc:10:c9:dc:
65:54:59:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+huxpbesqkWADR3oASxdc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1
NWY2MmQwHhcNMjYwNzI3MDQwMDIxWhcNMjYwNzI4MDQwMDIxWjAzMTEwLwYDVQQD
EyhiZDkwNGQ3MmEwYTUxMTUwZjlkYjEwYzE1M2JmZGFjZDJjNzA5MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzjQ8as3AKBD6kK/YtjfyyXoznmb
qEXr5VZ0NC9M1T6GkhuESl9lTmTDQwaLvQhCiy4GAA12XWEZVQ6Nb061UsczFKs5
QOtbaszUPGpZnIdUK9r9PeUnEi2WzBNfuRab2Wp/9lVf6/s6UzJ7u8ah6x3i00C+
EMMijiz/tI/4fP1cgpherdQBW1E9hH0LkkAxHhQ0ID4Tn+b9AdBmGEsZCbeuJvEN
UL0BW20vAgjolJiC5hVMSbKb4sw3K2JS4cpsZGMlCYjr1+V1/rRVytQ5swioUki8
23z94aw+mtyb7JyODXxg9chbu2n6thAr3ghlcK4TSxedaoVN3/zcTce/2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2QTXKgpRFQ+dsQwVO/2s0scJMMMB8GA1UdIwQY
MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt
MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw
LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV82kJBv
96chDY0is8wDifXphtIyTIohGu78I4srCSR6zKinC+F2i2BtyFMSQhbRf5SNFmvT
2j+KiAp5N1eblOutKSJrvWmYhaRY0DFKRFrMrLwXd1kKz8o4zQa/Ys2JYanI4ba/
GdJS/t+YAMxftMG0/HlUCDoz8VzY/3K6l2qhb1g9eygggPDcWSmKYWfB3xrcHAuB
p6vH95iEvWNOlSHxUN1fgbSjV3gkBbXn0gyOlyxg77pMHQtIqH95hmGp3UEDGfXF
8akGvrH2+SEtjZn8Jag0Lw3g1Tnvo6sxQC7eGqhnA+qusn5+ns+7XWgsGFe9eHSR
jiW8EMncZVRZVw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:34 2026 by rpki-client