Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: hgO8bSakms5MxHrHJVPxiG14wW2UdsYfNp2TBKYKyAs=
Subject key identifier: 94:28:43:5E:2D:2A:E6:1D:8E:AB:78:E0:A1:7A:4C:5D:32:41:A9:24
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 019D9A3E0E3F5E69BDC5606379E67E89921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: 2Y0vePsYMdGLC2k19HfRsz12tcc.roa (hash: 9OMDv7NsOhqDHoVNou730t3Tke6hQqKOi0fzyySfDqc=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: qzqxJ0NYRWJApat+Ow6XjABZlboCvnXXYA5A5KBMG9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0e:3f:5e:69:bd:c5:60:63:79:e6:7e:89:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=9428435e2d2ae61d8eab78e0a17a4c5d3241a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:9b:61:3c:f4:30:d2:16:d1:7d:7b:14:e5:
24:1b:9b:3a:ac:ce:ee:c7:8b:b8:fa:bb:6b:ff:9a:
15:74:a0:20:44:d5:a4:93:44:11:df:7f:41:02:b1:
7e:7a:3b:f9:53:fe:69:8f:57:db:ab:57:8c:f1:02:
61:b5:53:8f:73:bf:78:ba:86:4c:99:2f:0f:dc:b7:
a0:63:e9:21:e2:dd:1b:b4:84:05:9d:81:10:9b:7c:
08:2d:3b:27:ca:52:43:8c:0b:88:c3:36:31:6f:43:
c4:32:9a:45:11:1c:77:99:f5:30:52:4c:9b:e8:64:
79:2f:04:d0:93:ba:fc:12:eb:19:7a:b3:68:99:2d:
50:d8:66:d4:d2:4b:29:36:56:ba:a8:16:52:5d:0c:
14:0b:58:64:82:74:40:37:c8:20:92:4c:f4:a7:9f:
e8:10:1d:11:64:96:5b:2d:52:af:44:72:85:cb:5b:
3d:c5:c9:53:e8:54:b0:d1:51:f1:3d:2b:8a:fb:b8:
8d:71:cd:7b:37:52:3f:45:f6:6a:34:35:39:63:88:
71:2d:85:c1:4a:19:4a:fa:e7:62:cc:15:66:60:4f:
6c:ac:cc:d2:11:d5:2c:34:10:67:af:d2:8e:d6:b6:
81:93:c1:5d:d7:e2:24:3c:73:0b:e4:11:66:77:fb:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:43:5E:2D:2A:E6:1D:8E:AB:78:E0:A1:7A:4C:5D:32:41:A9:24
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:91:3c:36:c8:7c:6f:71:92:17:a8:4d:f7:95:20:35:e3:57:
da:8e:54:b7:56:de:69:b1:bf:69:30:cb:07:13:71:22:88:86:
f0:0a:a6:95:53:58:ee:b0:6e:ae:ec:36:cc:d9:a6:95:4d:58:
cd:72:65:47:83:a7:24:de:5b:84:c0:78:ac:cc:13:24:2c:cf:
d2:c0:ec:ea:29:1d:ad:8d:ad:cb:3e:ae:89:76:53:e3:65:92:
92:01:42:49:7f:0c:c8:c0:62:c6:33:c2:69:3e:b8:f7:9b:fa:
18:01:16:dc:46:60:2c:0d:9d:8b:4b:48:e0:02:2d:12:77:ae:
d4:b4:27:f4:5f:c4:13:85:5e:50:15:d5:2f:9a:a2:93:e0:55:
42:74:c9:4e:f9:fb:df:1f:90:e2:90:10:47:01:04:3e:de:4d:
f6:c0:9e:40:1a:a5:65:50:4d:a6:f4:7f:02:8b:94:e3:3c:ff:
cf:bb:2e:bf:d1:1d:c1:7a:f5:4b:bf:19:0d:43:f3:7e:4c:1b:
21:3f:9b:0d:ea:ea:66:b9:5c:8b:60:51:56:16:b0:5d:fa:47:
fb:1c:10:80:48:c0:23:23:8b:95:15:ed:94:07:0f:7d:90:3e:
8a:a3:c9:0a:a2:a1:51:89:a7:12:68:40:e0:9d:bd:4d:1a:f7:
b8:ca:f4:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPg4/Xmm9xWBjeeZ+iZIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjYwNDE3MDcwMDUxWhcNMjYwNDE4MDcwMDUxWjAzMTEwLwYDVQQD
Eyg5NDI4NDM1ZTJkMmFlNjFkOGVhYjc4ZTBhMTdhNGM1ZDMyNDFhOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0KbYTz0MNIW0X17FOUkG5s6rM7u
x4u4+rtr/5oVdKAgRNWkk0QR339BArF+ejv5U/5pj1fbq1eM8QJhtVOPc794uoZM
mS8P3LegY+kh4t0btIQFnYEQm3wILTsnylJDjAuIwzYxb0PEMppFERx3mfUwUkyb
6GR5LwTQk7r8EusZerNomS1Q2GbU0kspNla6qBZSXQwUC1hkgnRAN8ggkkz0p5/o
EB0RZJZbLVKvRHKFy1s9xclT6FSw0VHxPSuK+7iNcc17N1I/RfZqNDU5Y4hxLYXB
ShlK+udizBVmYE9srMzSEdUsNBBnr9KO1raBk8Fd1+IkPHML5BFmd/uMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQoQ14tKuYdjqt44KF6TF0yQakkMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapE8Nsh8
b3GSF6hN95UgNeNX2o5Ut1beabG/aTDLBxNxIoiG8AqmlVNY7rBuruw2zNmmlU1Y
zXJlR4OnJN5bhMB4rMwTJCzP0sDs6ikdrY2tyz6uiXZT42WSkgFCSX8MyMBixjPC
aT6495v6GAEW3EZgLA2di0tI4AItEneu1LQn9F/EE4VeUBXVL5qik+BVQnTJTvn7
3x+Q4pAQRwEEPt5N9sCeQBqlZVBNpvR/AouU4zz/z7suv9EdwXr1S78ZDUPzfkwb
IT+bDerqZrlci2BRVhawXfpH+xwQgEjAIyOLlRXtlAcPfZA+iqPJCqKhUYmnEmhA
4J29TRr3uMr06A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:37 2026 by rpki-client