Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: rPM/WOH6QJ6kFRNXtGgnE8Qvjcr75G6EqzHtVTzTi/w=
Subject key identifier: 18:35:8C:44:50:66:DF:FF:2B:74:5F:54:2C:D2:FB:66:E7:F0:11:64
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019DCD873E8AC913CB7C2D3C496850754022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 06:01:25 +0000
Manifest this update: Mon 27 Apr 2026 06:01:25 +0000
Manifest next update: Tue 28 Apr 2026 06:01:25 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: LhXixYOuwaSlD6loTyEJWDKR34x41TqpbRVtEGxRqcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:3e:8a:c9:13:cb:7c:2d:3c:49:68:50:75:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Apr 27 06:01:25 2026 GMT
Not After : Apr 28 06:01:25 2026 GMT
Subject: CN=18358c445066dfff2b745f542cd2fb66e7f01164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:1d:d9:80:70:1f:bd:9e:33:5b:00:81:3f:
5b:6b:79:06:ed:d7:2e:aa:b7:cb:b2:07:9f:47:6f:
d6:c1:25:e7:b6:58:ae:85:87:7d:53:1d:d1:79:56:
a2:ce:c3:4a:20:2a:af:61:60:16:4d:2e:b8:bf:86:
aa:30:b0:f5:ce:a9:df:92:52:0c:56:bb:57:d7:95:
4d:28:f5:b8:e8:0b:0a:79:76:49:4a:bd:14:53:df:
17:0f:15:a7:3f:eb:56:cc:d5:8b:e0:34:e1:44:11:
d4:f5:21:21:dd:7b:d8:f2:a7:d3:3f:25:5a:6d:d2:
d3:f8:f5:6f:af:53:a6:9f:bb:dc:f1:32:d4:0d:1d:
60:97:96:e5:42:fe:db:29:71:5a:a0:70:07:8d:29:
c5:e4:e5:b1:fb:0c:6c:e9:50:0d:27:4b:ce:f8:54:
11:7c:39:06:f1:ba:0e:02:3d:cb:9a:60:62:25:28:
89:be:fa:3c:e7:56:d7:b7:f4:a6:6f:52:a7:95:be:
9f:83:b5:c3:5c:0d:24:87:8d:84:29:57:58:d2:ba:
0e:e0:ac:0b:c6:77:a6:7f:5c:53:ca:df:f1:ce:c4:
11:12:df:0b:60:4d:b1:a5:80:ea:5c:ae:8b:0f:64:
c7:d8:05:46:db:3d:a3:aa:22:6a:2d:7a:3f:b9:ef:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:35:8C:44:50:66:DF:FF:2B:74:5F:54:2C:D2:FB:66:E7:F0:11:64
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c2:62:e7:d9:6d:f9:dc:a4:a4:64:a5:ae:48:1f:08:ee:31:
91:7f:ef:4e:e2:82:f5:89:53:45:32:93:34:fd:20:56:ab:98:
d2:be:aa:e3:98:b1:92:02:f2:38:04:7c:e3:fb:73:7c:56:02:
34:33:da:10:cf:06:fd:fc:81:a5:bf:be:db:16:48:53:93:89:
4b:b5:4f:67:8d:84:38:62:64:75:b1:55:e8:67:9a:27:0e:eb:
0c:05:46:c7:19:48:76:9a:90:00:29:dc:08:8f:b3:8a:7f:be:
f5:5a:a5:4a:b9:8b:52:ad:85:c0:0d:fa:c7:d3:af:07:27:32:
58:1c:c2:54:dd:5e:fe:78:3c:7c:d9:ed:73:1c:4a:7c:28:66:
c4:fa:37:b1:54:b0:ce:1d:ce:76:a7:e0:c3:da:68:94:e9:6d:
87:73:12:55:8c:60:98:63:20:29:4a:b3:d9:16:46:f4:81:38:
81:10:c6:25:05:73:d4:4d:1e:6c:40:50:88:16:8f:f4:2e:4c:
d1:b3:a0:7a:48:fc:7c:5c:1b:71:03:53:e4:e2:8b:91:27:2c:
38:05:95:4e:b0:d1:38:ee:51:aa:33:8e:40:a9:3c:e2:e3:45:
3a:56:f7:4a:d2:49:71:29:05:76:60:4a:3a:b7:32:80:d4:87:
9a:f7:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:00 2026 by rpki-client