Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: +1ib6RHSR6S+6J/BthSjcpLuAwp3AgJUaPmlPjlVkUE=
Subject key identifier: 6F:70:78:F8:73:BB:60:14:8F:18:2C:B9:1E:B1:E7:38:F4:2F:1D:3B
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019DCFE3BC14C8B45ED3319EE93DA2EFED69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1941
Signing time: Mon 27 Apr 2026 17:01:41 +0000
Manifest this update: Mon 27 Apr 2026 17:01:41 +0000
Manifest next update: Tue 28 Apr 2026 17:01:41 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 7Q+JnfOKT9+Tdr8K1lvnGHN9Ae1hQ2sF9mC/ek+KvaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:bc:14:c8:b4:5e:d3:31:9e:e9:3d:a2:ef:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Apr 27 17:01:41 2026 GMT
Not After : Apr 28 17:01:41 2026 GMT
Subject: CN=6f7078f873bb60148f182cb91eb1e738f42f1d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:79:49:da:2e:19:8b:cf:35:f5:9e:65:ff:
3e:a2:18:67:97:73:7c:e5:cd:2e:1e:cc:26:1c:71:
03:ee:33:88:e2:b1:a3:d6:9c:95:c4:50:44:cd:98:
b7:69:26:be:50:d6:6a:59:f2:f4:3f:52:81:f8:83:
52:d2:57:cc:ea:75:bd:d9:ab:06:6f:5b:de:d1:1d:
29:cb:73:45:93:59:ee:25:86:73:2f:ea:42:f9:87:
e2:ec:db:94:07:55:d0:2c:08:b0:f5:10:7f:89:d5:
10:76:a1:eb:e7:6d:d2:db:03:b3:f6:5e:7c:33:89:
f1:ec:08:69:93:13:78:10:cd:f0:94:da:bb:4d:72:
38:3e:d9:09:88:24:4e:ea:5a:80:2f:d7:20:2c:8f:
2b:55:b2:6d:3c:2e:fe:e5:90:4d:af:93:56:ff:e0:
fa:4f:d9:f9:e3:5d:d1:8d:a9:70:c5:b4:91:df:e8:
79:0f:71:27:4f:a2:2a:ae:96:be:a1:1c:21:b7:2f:
d5:32:47:75:e4:a7:87:88:2f:2c:11:14:a0:6d:4a:
f8:31:41:2f:d1:b7:00:72:e1:3e:e3:43:07:db:83:
64:fa:fb:96:32:09:dc:f3:b4:6a:94:1e:62:01:81:
f8:29:be:ce:3b:b9:d5:8e:4a:17:96:f7:9f:fb:80:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:78:F8:73:BB:60:14:8F:18:2C:B9:1E:B1:E7:38:F4:2F:1D:3B
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:64:b5:f3:a2:94:29:12:13:0c:96:cd:b7:86:12:84:e1:77:
4f:73:f2:b5:2e:45:b9:53:b5:0f:85:c1:80:57:ac:f0:ac:23:
d3:97:4c:67:75:d0:ed:8b:62:4c:6c:3b:b6:d6:e6:82:e9:1f:
7f:9e:b8:8a:ec:37:2a:8f:46:1c:15:5e:38:59:ec:68:ad:e1:
fd:1a:a5:f6:dc:b8:ee:50:69:55:97:b5:ee:e9:cf:0f:15:6a:
19:9a:41:08:72:c3:2d:2c:a4:48:31:70:bb:23:4f:07:47:78:
6c:19:e0:95:93:0a:ad:8b:b0:3e:e4:23:e5:e1:2a:ee:7c:88:
d1:19:63:06:91:bb:01:a8:01:d8:9a:fc:6c:30:1d:01:81:3b:
6a:40:af:a6:a6:1c:5d:d4:53:e3:28:23:c5:d8:e5:57:55:68:
3d:87:ba:98:08:7f:7b:25:f5:d0:57:09:64:58:f9:d5:30:4a:
5e:42:d5:d2:91:b8:fa:c7:74:08:c2:10:17:78:7b:75:52:ff:
54:dd:7a:54:a7:68:72:7a:41:77:77:12:3c:ff:f9:c3:fb:53:
a6:e3:f5:3e:f9:3e:23:df:c3:43:f4:5f:a7:32:70:02:51:d0:
d4:af:e9:fa:b9:04:8f:5a:20:e6:1c:ba:7a:c5:6c:15:0b:8b:
63:db:68:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P47wUyLRe0zGe6T2i7+1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5
NTQzOWMwHhcNMjYwNDI3MTcwMTQxWhcNMjYwNDI4MTcwMTQxWjAzMTEwLwYDVQQD
Eyg2ZjcwNzhmODczYmI2MDE0OGYxODJjYjkxZWIxZTczOGY0MmYxZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+55SdouGYvPNfWeZf8+ohhnl3N8
5c0uHswmHHED7jOI4rGj1pyVxFBEzZi3aSa+UNZqWfL0P1KB+INS0lfM6nW92asG
b1ve0R0py3NFk1nuJYZzL+pC+Yfi7NuUB1XQLAiw9RB/idUQdqHr523S2wOz9l58
M4nx7AhpkxN4EM3wlNq7TXI4PtkJiCRO6lqAL9cgLI8rVbJtPC7+5ZBNr5NW/+D6
T9n5413RjalwxbSR3+h5D3EnT6Iqrpa+oRwhty/VMkd15KeHiC8sERSgbUr4MUEv
0bcAcuE+40MH24Nk+vuWMgnc87RqlB5iAYH4Kb7OO7nVjkoXlvef+4CRWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9wePhzu2AUjxgsuR6x5zj0Lx07MB8GA1UdIwQY
MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt
MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj
LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmS186KU
KRITDJbNt4YShOF3T3PytS5FuVO1D4XBgFes8Kwj05dMZ3XQ7YtiTGw7ttbmgukf
f564iuw3Ko9GHBVeOFnsaK3h/Rql9ty47lBpVZe17unPDxVqGZpBCHLDLSykSDFw
uyNPB0d4bBnglZMKrYuwPuQj5eEq7nyI0RljBpG7AagB2Jr8bDAdAYE7akCvpqYc
XdRT4ygjxdjlV1VoPYe6mAh/eyX10FcJZFj51TBKXkLV0pG4+sd0CMIQF3h7dVL/
VN16VKdocnpBd3cSPP/5w/tTpuP1Pvk+I9/DQ/RfpzJwAlHQ1K/p+rkEj1og5hy6
esVsFQuLY9toRg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:23 2026 by rpki-client