Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: 3+/LjjeOvzEhkED87ocsEqkl+5QEmDM5O/0SypjLJ0g=
Subject key identifier: CE:1E:DE:9A:16:13:3F:71:F7:D6:29:39:E1:C7:18:B9:44:CC:CE:E9
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019D9B51340DFDA9E934D04B13DF4C7A3ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 1282
Signing time: Fri 17 Apr 2026 12:01:23 +0000
Manifest this update: Fri 17 Apr 2026 12:01:23 +0000
Manifest next update: Sat 18 Apr 2026 12:01:23 +0000
Files and hashes: 1: hhB0IeJBwNyXofg4mPvSau-d9JU.roa (hash: rSR4VGaBwGTXWCnhcTMFNg3NGbcBK7CKNCSrlO5fp2g=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: qXVOc6QTcFZvgAsUy2KzzZZJFYPngpbkKzKD+J4CwMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:34:0d:fd:a9:e9:34:d0:4b:13:df:4c:7a:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Apr 17 12:01:23 2026 GMT
Not After : Apr 18 12:01:23 2026 GMT
Subject: CN=ce1ede9a16133f71f7d62939e1c718b944cccee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:09:81:29:b3:30:a6:01:96:87:0d:73:ee:
3e:47:55:71:ed:08:22:c5:13:77:eb:1c:b5:e1:bd:
10:65:0f:4e:46:5c:60:1b:fa:30:e8:96:db:96:1e:
cb:1c:f4:38:db:63:e2:e7:2e:4b:25:6e:54:9a:45:
23:0b:d5:87:14:e9:eb:d2:f9:fa:5a:9d:59:9a:f4:
74:58:ca:9c:10:c7:fa:2f:3a:11:97:e2:f7:7f:8e:
72:55:2e:29:80:dd:d8:a6:74:c1:b1:72:20:27:25:
c9:49:4f:20:2a:0b:c9:8b:57:61:3d:23:96:ef:78:
b6:1a:e2:af:9d:12:ad:3a:bd:e9:81:3f:aa:be:ee:
51:9f:50:e7:83:50:9f:5d:33:2e:af:10:d3:73:c3:
a8:9e:67:a7:c2:f8:fa:9b:66:2b:f1:1d:ea:dd:3b:
7d:53:43:ad:72:01:ce:ef:3f:09:a3:30:83:a9:22:
9b:02:72:a6:94:e9:69:a3:2f:7d:4c:16:c2:7d:7a:
71:37:08:fd:66:84:35:57:ec:64:92:bf:cf:c8:4c:
2b:b3:71:cd:af:44:75:f0:ef:05:ee:ff:5c:01:f7:
81:fb:46:8d:03:0a:0c:fe:96:9f:5b:af:db:43:a0:
08:b0:4f:93:25:a9:82:83:8b:9b:7e:d5:86:54:2c:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1E:DE:9A:16:13:3F:71:F7:D6:29:39:E1:C7:18:B9:44:CC:CE:E9
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:2a:40:77:ee:b3:7b:29:18:e9:fa:d0:c7:6c:1e:0d:f3:
f9:6c:5a:9e:8f:3c:2a:ca:e0:66:1f:ef:76:7a:6e:2e:7f:1b:
a4:a4:5c:5d:5b:46:5c:79:cb:ff:1a:58:a0:87:e2:62:10:57:
e0:44:1e:fb:f3:3b:f0:16:87:3f:c6:13:91:d3:f9:c7:34:36:
87:73:d1:81:78:ce:14:7d:0a:f6:05:b6:a9:65:fe:d6:7a:a5:
da:60:a7:6b:28:ab:b7:90:28:c9:c3:a3:44:7f:b1:78:64:d4:
77:18:df:f3:1d:14:a4:75:76:90:ad:b8:6d:6b:c1:aa:cc:6e:
14:af:d1:ad:b4:ce:a6:4b:b5:6d:9d:99:fe:ca:a2:ac:07:21:
e0:3f:a8:77:4b:a4:1b:93:99:ea:d5:4e:34:3b:eb:3f:dc:89:
46:be:fe:7e:0b:44:9f:44:5f:01:cc:6b:98:99:cc:99:b4:3b:
51:a7:7a:e5:2b:b9:8c:07:e0:82:95:20:be:b7:50:97:65:54:
4b:12:7a:e8:c0:ce:14:65:cb:b5:39:3e:c2:a8:3b:90:32:96:
91:54:f1:c5:8f:d7:04:07:1e:18:14:8d:9d:8d:a1:44:79:65:
e0:cd:e6:79:8e:08:c2:3f:d1:7d:96:f3:85:6f:d7:05:37:5a:
cb:c6:2d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUTQN/anpNNBLE99Mejq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh
OTRkNzgwHhcNMjYwNDE3MTIwMTIzWhcNMjYwNDE4MTIwMTIzWjAzMTEwLwYDVQQD
EyhjZTFlZGU5YTE2MTMzZjcxZjdkNjI5MzllMWM3MThiOTQ0Y2NjZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLoJgSmzMKYBlocNc+4+R1Vx7Qgi
xRN36xy14b0QZQ9ORlxgG/ow6Jbblh7LHPQ422Pi5y5LJW5UmkUjC9WHFOnr0vn6
Wp1ZmvR0WMqcEMf6LzoRl+L3f45yVS4pgN3YpnTBsXIgJyXJSU8gKgvJi1dhPSOW
73i2GuKvnRKtOr3pgT+qvu5Rn1Dng1CfXTMurxDTc8Oonmenwvj6m2Yr8R3q3Tt9
U0OtcgHO7z8JozCDqSKbAnKmlOlpoy99TBbCfXpxNwj9ZoQ1V+xkkr/PyEwrs3HN
r0R18O8F7v9cAfeB+0aNAwoM/pafW6/bQ6AIsE+TJamCg4ubftWGVCy7/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4e3poWEz9x99YpOeHHGLlEzM7pMB8GA1UdIwQY
MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt
ZDMzNWMyMDQyNDAzLzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz
LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR40qQHfu
s3spGOn60MdsHg3z+Wxano88KsrgZh/vdnpuLn8bpKRcXVtGXHnL/xpYoIfiYhBX
4EQe+/M78BaHP8YTkdP5xzQ2h3PRgXjOFH0K9gW2qWX+1nql2mCnayirt5AoycOj
RH+xeGTUdxjf8x0UpHV2kK24bWvBqsxuFK/RrbTOpku1bZ2Z/sqirAch4D+od0uk
G5OZ6tVONDvrP9yJRr7+fgtEn0RfAcxrmJnMmbQ7Uad65Su5jAfggpUgvrdQl2VU
SxJ66MDOFGXLtTk+wqg7kDKWkVTxxY/XBAceGBSNnY2hRHll4M3meY4Iwj/RfZbz
hW/XBTday8Ytzw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:15 2026 by rpki-client