Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: hSEiZH+lE7+ReuD2HIPAgKX5FZcBe14o3QpjlwwQvQM=
Subject key identifier: C2:78:E4:B2:E5:3A:10:3F:35:89:29:CC:0F:EA:5A:94:74:58:9E:33
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019DCC73EA4862A8B0DE78DE6DB3A883417A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 1138
Signing time: Mon 27 Apr 2026 01:00:41 +0000
Manifest this update: Mon 27 Apr 2026 01:00:41 +0000
Manifest next update: Tue 28 Apr 2026 01:00:41 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: iaRgk4feNOMAXqn82A0IzaIdRgmEdQxgz417vbdZ7YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:ea:48:62:a8:b0:de:78:de:6d:b3:a8:83:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Apr 27 01:00:41 2026 GMT
Not After : Apr 28 01:00:41 2026 GMT
Subject: CN=c278e4b2e53a103f358929cc0fea5a9474589e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:1a:ca:61:6d:78:dc:da:92:29:4d:81:65:
9d:ca:b9:10:8a:11:a6:56:50:70:3f:fc:7b:1c:ef:
60:31:cc:2b:14:ef:b1:54:8e:2c:98:1a:38:f3:91:
94:8b:7a:b6:c8:d2:48:16:fc:75:92:f6:de:dd:f0:
a3:37:d9:a1:88:55:19:99:40:43:2a:d6:d2:cb:df:
65:88:f5:a9:7c:77:42:6e:f5:75:7d:95:05:96:86:
06:cd:60:51:ae:dc:a1:47:4b:9b:36:41:9a:34:45:
94:84:37:03:98:89:7a:5e:0e:47:7c:e2:59:81:a7:
ed:35:58:40:64:0a:af:36:20:c4:8c:e8:b8:b6:e5:
71:5b:66:74:66:e1:ae:bc:2a:24:6a:d1:52:87:01:
72:97:20:c1:9a:da:41:18:b0:a0:74:53:e3:23:4c:
1d:0f:08:7d:09:d5:96:20:6a:c8:cc:b7:a6:5d:9a:
7d:26:d4:18:46:84:24:d0:a5:95:35:bf:90:12:b6:
1e:8a:c6:90:ab:1a:d9:b5:b7:ec:14:c4:fd:de:92:
c3:57:9b:ca:8d:0c:ff:7e:29:9d:83:ac:88:aa:1b:
98:e9:8d:6f:a9:9d:fd:14:7c:53:19:83:7c:fc:94:
0c:14:c6:e5:95:ef:dd:ae:c6:68:45:1e:7b:4a:69:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:E4:B2:E5:3A:10:3F:35:89:29:CC:0F:EA:5A:94:74:58:9E:33
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:1e:3d:20:94:bf:d6:09:8e:02:27:f4:d6:11:2b:9b:0f:
2e:27:87:9f:1c:46:3a:0b:6e:78:67:08:86:61:26:4e:df:67:
3b:10:6d:d1:57:44:a4:b1:25:29:c8:f3:8b:a9:87:c4:19:bf:
b6:6a:21:fc:a5:a4:23:4f:6a:b8:f8:af:6e:6a:97:b4:cc:f6:
21:1e:43:ea:32:f6:17:4b:35:a0:5e:8c:c4:d3:9e:79:fa:b8:
2b:15:04:08:2e:78:f2:9c:88:de:83:91:31:8f:81:2a:ca:01:
67:21:57:5e:c4:41:29:3e:c4:79:ce:2d:5b:44:2f:cc:24:e2:
ae:52:e6:64:f0:d5:cb:91:bd:96:fe:86:4e:e2:a9:3d:a2:61:
d0:7e:d6:dd:89:6a:d9:5f:8a:93:9e:76:5f:d7:dc:5b:a7:b3:
e1:d7:00:93:b0:40:15:b3:ce:22:b7:5a:ce:05:08:be:37:d1:
3e:63:38:ea:9d:0e:29:37:97:9f:f3:7d:24:4a:ef:94:42:0b:
91:7f:ad:56:2f:01:fb:9f:56:73:40:b4:b7:37:67:fa:fd:1b:
39:d0:66:5d:01:64:51:cc:89:c5:c2:58:f4:3c:37:a9:be:07:
e5:40:39:f0:9e:31:66:c6:86:17:55:0b:5c:12:40:2a:9d:16:
40:3e:a3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mc+pIYqiw3njebbOog0F6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjYwNDI3MDEwMDQxWhcNMjYwNDI4MDEwMDQxWjAzMTEwLwYDVQQD
EyhjMjc4ZTRiMmU1M2ExMDNmMzU4OTI5Y2MwZmVhNWE5NDc0NTg5ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8swaymFteNzakilNgWWdyrkQihGm
VlBwP/x7HO9gMcwrFO+xVI4smBo485GUi3q2yNJIFvx1kvbe3fCjN9mhiFUZmUBD
KtbSy99liPWpfHdCbvV1fZUFloYGzWBRrtyhR0ubNkGaNEWUhDcDmIl6Xg5HfOJZ
gaftNVhAZAqvNiDEjOi4tuVxW2Z0ZuGuvCokatFShwFylyDBmtpBGLCgdFPjI0wd
Dwh9CdWWIGrIzLemXZp9JtQYRoQk0KWVNb+QErYeisaQqxrZtbfsFMT93pLDV5vK
jQz/fimdg6yIqhuY6Y1vqZ39FHxTGYN8/JQMFMblle/drsZoRR57SmmvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ45LLlOhA/NYkpzA/qWpR0WJ4zMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADykePSCU
v9YJjgIn9NYRK5sPLieHnxxGOgtueGcIhmEmTt9nOxBt0VdEpLElKcjzi6mHxBm/
tmoh/KWkI09quPivbmqXtMz2IR5D6jL2F0s1oF6MxNOeefq4KxUECC548pyI3oOR
MY+BKsoBZyFXXsRBKT7Eec4tW0QvzCTirlLmZPDVy5G9lv6GTuKpPaJh0H7W3Ylq
2V+Kk552X9fcW6ez4dcAk7BAFbPOIrdazgUIvjfRPmM46p0OKTeXn/N9JErvlEIL
kX+tVi8B+59Wc0C0tzdn+v0bOdBmXQFkUcyJxcJY9Dw3qb4H5UA58J4xZsaGF1UL
XBJAKp0WQD6j3w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:20:54 2026 by rpki-client