Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: xObeVcJt3Cj+ozASGExCrK6v1OnHKvN8TPVoy5QHpvc=
Subject key identifier: 0B:04:6B:3E:3D:7B:A1:F9:0B:A8:8D:CA:92:1B:41:8D:4E:78:E8:6D
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019D9BBE77B136CDD5F068F30B4C640E9CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 14:00:44 +0000
Manifest this update: Fri 17 Apr 2026 14:00:44 +0000
Manifest next update: Sat 18 Apr 2026 14:00:44 +0000
Files and hashes: 1: 5UKl7JzlrMZFxZccNwb_HEFI_xs.roa (hash: XFtwBlqsUtFdMadWz8en37s8O8O+/h2aqDNRnI5q7sE=)
2: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: 5zfZBip0zdLLg0sRfpKXgpoc2Z9ShjXwS4xqvipxf3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:77:b1:36:cd:d5:f0:68:f3:0b:4c:64:0e:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Apr 17 14:00:44 2026 GMT
Not After : Apr 18 14:00:44 2026 GMT
Subject: CN=0b046b3e3d7ba1f90ba88dca921b418d4e78e86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:02:ca:1d:07:b6:5d:22:08:5a:e1:ff:4d:
78:aa:47:a2:e0:40:a1:39:98:24:37:b7:78:31:14:
cf:aa:c2:83:76:a2:5b:8a:51:8b:bf:8f:87:2e:77:
b3:c3:c0:63:9c:4b:f3:0e:97:59:0b:16:83:ba:e4:
61:42:34:cf:59:e4:7d:13:92:ec:00:b8:67:8a:38:
98:c5:b7:ae:57:c6:c9:a7:ea:af:e3:db:0b:a2:f6:
b1:09:30:ac:28:b7:4b:c5:ed:19:b1:d9:45:30:db:
4f:b4:52:fa:9d:4a:68:ab:37:5e:2b:94:0f:21:c9:
cc:96:40:3d:62:92:6d:38:f8:d7:03:db:8c:51:8a:
e1:6a:29:a2:86:a7:5c:30:8f:8b:8a:76:c6:0e:e4:
5a:c5:1c:19:5e:63:68:7c:aa:b0:58:fe:85:6b:af:
cd:bc:41:b1:13:4a:2b:0c:3d:f2:23:92:74:7a:86:
3c:51:9b:76:2c:d4:4e:66:2e:e3:34:7a:86:a1:eb:
ae:05:fd:81:3b:90:3b:f8:f1:b5:78:fc:f8:fc:36:
16:be:43:ca:28:35:7b:49:ca:07:98:ec:c0:49:6d:
b8:a2:ac:e7:43:d5:0d:18:7f:ed:b3:7a:75:e4:eb:
68:02:e2:66:4e:a7:ff:ed:e1:ec:96:72:7e:d4:19:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:6B:3E:3D:7B:A1:F9:0B:A8:8D:CA:92:1B:41:8D:4E:78:E8:6D
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:05:26:ad:0e:5a:a9:a4:7b:4b:6b:57:2d:8b:23:6f:3a:
dd:9b:56:dc:04:8e:89:d8:a6:9b:70:02:3f:f8:c8:c9:e3:e7:
7c:94:1a:19:73:2f:09:85:13:98:a3:5b:1a:1b:f6:47:16:37:
3f:92:0d:1b:27:c5:f0:66:cf:b5:62:1d:11:bd:dd:63:0d:d5:
db:ce:00:41:26:42:8b:c9:ad:65:9a:df:6d:fc:3a:a4:b3:65:
b1:33:a9:cb:0e:70:bd:92:38:9f:6a:07:b0:f7:a4:7a:16:d1:
f1:8d:ca:c8:23:99:14:20:f2:d0:64:ba:23:69:df:8e:e5:8f:
fa:a5:93:15:0a:89:ad:bd:c0:79:e6:15:c7:ad:cc:64:68:d6:
42:5b:5c:85:e9:b3:1a:c0:e3:97:da:03:f7:82:2a:f9:3f:ec:
a4:4f:9a:3a:60:df:a6:cf:5b:fb:82:67:c7:34:8b:a5:6e:b9:
25:bc:25:70:ad:1f:85:9e:79:76:fe:ea:37:55:a8:7f:77:6b:
ac:8f:69:6c:94:6a:9e:8c:54:25:5e:38:bd:b3:0e:1e:7a:24:
76:b8:ea:1b:e4:b1:cc:ca:ec:9c:1d:62:6d:82:85:ea:dc:28:
09:f4:a2:5f:88:74:fa:c8:3a:62:37:34:98:4f:f1:fd:74:1d:
32:91:f1:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvnexNs3V8GjzC0xkDpzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3
ZTM3NzEwHhcNMjYwNDE3MTQwMDQ0WhcNMjYwNDE4MTQwMDQ0WjAzMTEwLwYDVQQD
EygwYjA0NmIzZTNkN2JhMWY5MGJhODhkY2E5MjFiNDE4ZDRlNzhlODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveECyh0Htl0iCFrh/014qkei4ECh
OZgkN7d4MRTPqsKDdqJbilGLv4+HLnezw8BjnEvzDpdZCxaDuuRhQjTPWeR9E5Ls
ALhnijiYxbeuV8bJp+qv49sLovaxCTCsKLdLxe0ZsdlFMNtPtFL6nUpoqzdeK5QP
IcnMlkA9YpJtOPjXA9uMUYrhaimihqdcMI+LinbGDuRaxRwZXmNofKqwWP6Fa6/N
vEGxE0orDD3yI5J0eoY8UZt2LNROZi7jNHqGoeuuBf2BO5A7+PG1ePz4/DYWvkPK
KDV7ScoHmOzASW24oqznQ9UNGH/ts3p15OtoAuJmTqf/7eHslnJ+1Bn7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsEaz49e6H5C6iNypIbQY1OeOhtMB8GA1UdIwQY
MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt
NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0
LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEcFJq0O
Wqmke0trVy2LI2863ZtW3ASOidimm3ACP/jIyePnfJQaGXMvCYUTmKNbGhv2RxY3
P5INGyfF8GbPtWIdEb3dYw3V284AQSZCi8mtZZrfbfw6pLNlsTOpyw5wvZI4n2oH
sPekehbR8Y3KyCOZFCDy0GS6I2nfjuWP+qWTFQqJrb3AeeYVx63MZGjWQltchemz
GsDjl9oD94Iq+T/spE+aOmDfps9b+4JnxzSLpW65JbwlcK0fhZ55dv7qN1Wof3dr
rI9pbJRqnoxUJV44vbMOHnokdrjqG+SxzMrsnB1ibYKF6twoCfSiX4h0+sg6Yjc0
mE/x/XQdMpHxwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:27 2026 by rpki-client