Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: M9oLX2i8CgCZz9BeZ0UFshD4/iXlyGiGJlebGN6J6r8=
Subject key identifier: FA:06:7E:7E:6C:1C:C3:3E:B8:04:97:CF:7B:C7:8B:C7:08:24:98:C6
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019DB16B6B0460B3036DB499E1F7D20E8B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0933
Signing time: Tue 21 Apr 2026 19:01:40 +0000
Manifest this update: Tue 21 Apr 2026 19:01:40 +0000
Manifest next update: Wed 22 Apr 2026 19:01:40 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: n8jIF0Svz0ocFuCMlIBpz1Vr2T/uK+KM2GSUdzhzrhg=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:6b:04:60:b3:03:6d:b4:99:e1:f7:d2:0e:8b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Apr 21 19:01:40 2026 GMT
Not After : Apr 22 19:01:40 2026 GMT
Subject: CN=fa067e7e6c1cc33eb80497cf7bc78bc7082498c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:0d:d4:a0:e7:15:6f:30:09:54:f3:c5:a2:
59:00:d2:3a:af:a6:47:7f:13:a8:52:ee:4c:e0:08:
51:44:ce:9e:4b:be:74:a7:3e:7c:d0:7e:78:28:28:
ce:ba:d5:c5:27:28:2c:e3:a1:9d:19:50:35:da:16:
2f:ac:a5:df:18:c6:70:8b:fe:1a:19:81:37:41:ea:
04:d5:dd:e6:ea:fa:44:88:8d:91:f6:9e:02:68:f6:
06:f0:c8:6a:92:88:ee:46:e6:d1:a3:23:f6:f9:84:
db:b8:fa:1b:f1:6b:dd:98:6d:3e:6b:89:41:68:b6:
6e:d8:2a:01:d2:b4:46:9c:d0:54:67:79:9e:a0:b2:
59:91:34:81:48:a6:35:bd:10:03:5a:49:78:2b:c9:
4a:db:06:f7:02:9a:bf:0e:a8:d3:b3:0d:ac:07:ab:
02:8d:84:6e:a4:f6:de:1a:e3:fd:45:ec:92:c2:b6:
c5:40:75:00:92:6e:2e:29:e5:24:9d:b2:89:08:6d:
97:2e:b2:29:4a:01:68:1c:0b:83:02:ec:21:46:9f:
5a:28:64:83:23:65:f7:80:2e:9d:c0:f5:91:18:be:
f1:b5:2e:e5:bc:6e:f3:ec:de:63:18:ad:df:90:90:
14:d7:2c:b2:95:56:52:fd:73:6d:39:0c:ee:32:24:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:7E:7E:6C:1C:C3:3E:B8:04:97:CF:7B:C7:8B:C7:08:24:98:C6
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cc:3b:51:d9:77:2e:a0:64:f5:7d:dc:e0:6e:8e:d8:6b:95:
0d:34:d8:7f:db:01:30:ab:74:cb:a7:6a:5e:d0:c1:3e:68:d0:
d2:1a:21:08:9c:b1:fd:09:59:08:ab:68:ae:e7:13:3c:42:e3:
7c:af:4a:c3:03:8a:fc:73:ed:96:3a:44:33:03:8a:84:be:58:
87:81:6b:81:c0:13:d6:ce:72:31:21:53:d6:ec:c2:ed:86:ff:
b3:bf:b9:15:d0:a2:fe:a6:d5:3b:9a:16:d7:9b:ff:45:17:49:
11:b5:ec:66:33:83:cc:52:53:9b:92:d2:62:40:d2:b3:0d:12:
b9:29:00:40:69:57:e9:0b:d5:dc:c2:17:ff:e3:2c:69:58:99:
50:26:ae:d4:ed:50:9b:a2:0f:f3:5c:61:9a:e1:f9:e2:eb:38:
17:52:94:cb:9c:b5:03:a9:fa:03:e0:ce:65:cf:db:ea:ff:bf:
7d:48:0a:b7:cd:4f:44:e3:76:5d:c7:3a:e7:74:7b:19:0f:20:
7c:26:b0:79:fb:fb:13:58:e7:21:f0:ee:0f:bc:5c:3d:b7:4e:
d3:76:45:1f:d1:e1:ec:78:e2:2a:a4:01:54:2c:05:c2:48:8d:
9f:ae:1d:8c:92:7f:8c:8c:f2:28:f9:81:7d:26:89:32:39:04:
2f:09:e0:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xa2sEYLMDbbSZ4ffSDouVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjYwNDIxMTkwMTQwWhcNMjYwNDIyMTkwMTQwWjAzMTEwLwYDVQQD
EyhmYTA2N2U3ZTZjMWNjMzNlYjgwNDk3Y2Y3YmM3OGJjNzA4MjQ5OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNIN1KDnFW8wCVTzxaJZANI6r6ZH
fxOoUu5M4AhRRM6eS750pz580H54KCjOutXFJygs46GdGVA12hYvrKXfGMZwi/4a
GYE3QeoE1d3m6vpEiI2R9p4CaPYG8MhqkojuRubRoyP2+YTbuPob8WvdmG0+a4lB
aLZu2CoB0rRGnNBUZ3meoLJZkTSBSKY1vRADWkl4K8lK2wb3Apq/DqjTsw2sB6sC
jYRupPbeGuP9ReySwrbFQHUAkm4uKeUknbKJCG2XLrIpSgFoHAuDAuwhRp9aKGSD
I2X3gC6dwPWRGL7xtS7lvG7z7N5jGK3fkJAU1yyylVZS/XNtOQzuMiSGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoGfn5sHMM+uASXz3vHi8cIJJjGMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8w7Udl3
LqBk9X3c4G6O2GuVDTTYf9sBMKt0y6dqXtDBPmjQ0hohCJyx/QlZCKtorucTPELj
fK9KwwOK/HPtljpEMwOKhL5Yh4FrgcAT1s5yMSFT1uzC7Yb/s7+5FdCi/qbVO5oW
15v/RRdJEbXsZjODzFJTm5LSYkDSsw0SuSkAQGlX6QvV3MIX/+MsaViZUCau1O1Q
m6IP81xhmuH54us4F1KUy5y1A6n6A+DOZc/b6v+/fUgKt81PRON2Xcc653R7GQ8g
fCawefv7E1jnIfDuD7xcPbdO03ZFH9Hh7HjiKqQBVCwFwkiNn64djJJ/jIzyKPmB
fSaJMjkELwng7w==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:13 2026 by rpki-client