Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: eQyfW0XVvZdhXC87RuSZZ72Ml5WZTl9SR7Zct2Fk9/c=
Subject key identifier: B2:43:85:A5:27:2D:F9:37:1B:AE:E2:AC:75:05:EA:E6:8B:01:C6:49
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019E2ADDDAD9C171F0A5B56D2EA64AD0222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0A45
Signing time: Fri 15 May 2026 09:00:42 +0000
Manifest this update: Fri 15 May 2026 09:00:42 +0000
Manifest next update: Sat 16 May 2026 09:00:42 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: RPQmj7jE2xrJ/aopRVZ48RGqp8RttTv9xOGU64gIBzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:dd:da:d9:c1:71:f0:a5:b5:6d:2e:a6:4a:d0:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: May 15 09:00:42 2026 GMT
Not After : May 16 09:00:42 2026 GMT
Subject: CN=b24385a5272df9371baee2ac7505eae68b01c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:6c:5c:5a:0d:fa:5b:6b:02:70:17:6c:6c:
27:38:6a:5f:34:d6:49:76:03:ed:20:24:15:c6:a0:
52:b4:f7:6f:bb:a8:83:3a:3e:c5:2d:65:93:84:aa:
21:a0:90:ab:4b:57:bd:fa:b4:eb:da:16:ea:74:fb:
03:2a:28:b4:6f:fb:92:04:63:0b:94:75:1c:9a:75:
5d:fc:61:0c:5a:c6:06:50:29:74:f7:ae:e3:c9:00:
aa:25:ff:ca:57:6c:b8:19:3e:d2:73:e9:41:3e:89:
e1:ac:b3:62:25:31:e0:5e:0b:e6:d2:c8:1f:0d:c9:
b2:d1:17:3d:77:b8:fe:ba:38:86:be:7b:8e:89:88:
af:00:13:a6:d8:ba:4e:6a:64:ad:30:8a:0c:fa:14:
7d:63:0e:bb:4f:7f:7f:58:9e:e7:82:c9:64:ff:1f:
71:b7:dd:b0:22:de:b0:12:4e:e9:76:cc:bf:4e:1f:
3c:3c:9b:e6:a0:b8:ed:07:b7:53:ec:4a:1a:e7:74:
0c:1a:d4:aa:04:87:30:e4:18:4f:7b:c9:61:23:a3:
ee:0a:3f:fc:7b:a8:48:b2:ea:7c:57:7f:94:3e:ac:
50:56:5a:2d:f2:4d:5e:e9:80:18:02:c1:c7:95:7c:
d3:ed:e6:18:08:4b:b0:5c:87:d4:b7:07:68:38:47:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:85:A5:27:2D:F9:37:1B:AE:E2:AC:75:05:EA:E6:8B:01:C6:49
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:43:5d:c6:fe:fa:1c:8d:c0:c6:26:72:1b:e7:79:19:97:
31:db:9e:fd:87:2d:2f:64:43:ac:96:2d:54:4c:ce:68:b5:9d:
d3:38:01:82:18:59:32:bf:d4:bc:49:94:c8:56:9a:7c:6e:9c:
74:0e:ff:7a:16:e3:58:33:6a:e2:ac:1d:d8:f8:19:c2:97:96:
de:8d:23:d0:90:e1:30:26:6f:5f:45:10:b9:40:51:c1:c9:19:
1c:44:e7:88:8f:40:06:5e:d6:b7:df:83:d0:ca:7c:57:ce:b7:
2a:59:ca:ea:36:77:22:18:a3:65:15:af:86:9b:93:11:30:ae:
f2:a4:02:4f:2c:de:cb:d2:4d:07:69:a6:bd:31:15:2f:9d:de:
05:60:c2:3b:0c:0f:e5:59:01:94:9a:6d:48:c1:c1:8b:71:ac:
ea:4e:bb:21:ff:1b:ec:b1:24:70:52:53:86:0f:56:3e:d8:75:
b9:63:24:57:c1:ab:5b:9c:19:dc:6e:9f:1a:73:a3:f1:26:58:
35:c9:cc:aa:1a:54:b3:91:9d:6c:60:8f:4f:37:be:f5:ad:b9:
ef:9f:ae:52:20:37:07:2a:5b:44:50:62:de:3a:56:99:8c:bc:
0a:cc:54:45:86:77:b1:89:76:25:30:81:e9:7d:a6:40:0b:57:
85:9d:bf:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4q3drZwXHwpbVtLqZK0CIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx
NmFmM2UwHhcNMjYwNTE1MDkwMDQyWhcNMjYwNTE2MDkwMDQyWjAzMTEwLwYDVQQD
EyhiMjQzODVhNTI3MmRmOTM3MWJhZWUyYWM3NTA1ZWFlNjhiMDFjNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IVsXFoN+ltrAnAXbGwnOGpfNNZJ
dgPtICQVxqBStPdvu6iDOj7FLWWThKohoJCrS1e9+rTr2hbqdPsDKii0b/uSBGML
lHUcmnVd/GEMWsYGUCl0967jyQCqJf/KV2y4GT7Sc+lBPonhrLNiJTHgXgvm0sgf
Dcmy0Rc9d7j+ujiGvnuOiYivABOm2LpOamStMIoM+hR9Yw67T39/WJ7ngslk/x9x
t92wIt6wEk7pdsy/Th88PJvmoLjtB7dT7Eoa53QMGtSqBIcw5BhPe8lhI6PuCj/8
e6hIsup8V3+UPqxQVlot8k1e6YAYAsHHlXzT7eYYCEuwXIfUtwdoOEfhOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJDhaUnLfk3G67irHUF6uaLAcZJMB8GA1UdIwQY
MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt
M2E1ZmVjYWNkNDlhLzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh
LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1dDXcb+
+hyNwMYmchvneRmXMdue/YctL2RDrJYtVEzOaLWd0zgBghhZMr/UvEmUyFaafG6c
dA7/ehbjWDNq4qwd2PgZwpeW3o0j0JDhMCZvX0UQuUBRwckZHETniI9ABl7Wt9+D
0Mp8V863KlnK6jZ3IhijZRWvhpuTETCu8qQCTyzey9JNB2mmvTEVL53eBWDCOwwP
5VkBlJptSMHBi3Gs6k67If8b7LEkcFJThg9WPth1uWMkV8GrW5wZ3G6fGnOj8SZY
NcnMqhpUs5GdbGCPTze+9a2575+uUiA3BypbRFBi3jpWmYy8CsxURYZ3sYl2JTCB
6X2mQAtXhZ2/fQ==
-----END CERTIFICATE-----
Generated at Fri May 15 17:46:46 2026 by rpki-client