
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: cGEMX7RuzxzzxhqZz+PXmwmZbxNOAul6p84XVomg8uY=
Subject key identifier: 62:A6:C5:A0:F0:9F:19:D7:F4:A2:FB:7B:9A:64:02:A4:D2:06:DC:3A
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 019D9AAB8A49693386B84B4E30831EC78AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 18E4
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: avy3KE/LcU/Ex19OD7jK6Alfn/U5YPfy0ddNBDHdN8k=)
2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8a:49:69:33:86:b8:4b:4e:30:83:1e:c7:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=62a6c5a0f09f19d7f4a2fb7b9a6402a4d206dc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:a5:53:c1:9e:74:f4:2f:83:6d:7a:92:70:
3f:fa:40:6e:c5:06:af:c3:d8:d8:74:7c:17:32:19:
90:29:1d:c5:0c:9d:2f:e4:35:16:b2:58:3a:d1:40:
45:91:d5:c9:cb:19:4e:ef:84:06:fe:14:cb:cd:5c:
85:60:3c:2d:96:ae:0e:13:69:2f:d6:b1:18:43:35:
89:17:92:69:06:e9:e6:4c:a1:96:16:54:43:3f:fc:
0e:93:75:8a:a9:bb:89:85:ae:74:b1:1c:04:5a:d4:
70:70:c6:ce:68:0f:93:28:40:d6:a4:7c:16:bf:e2:
71:5f:c7:cb:49:bd:c1:27:1c:a1:9c:dd:44:a5:a5:
b4:e5:1f:c5:ec:de:cc:8b:13:0f:b0:fa:98:4e:b8:
b7:17:d1:99:8f:08:b5:57:a6:12:bb:91:7c:f5:12:
ec:e6:e1:a8:84:65:21:a4:ab:59:67:2e:28:fe:b2:
97:3d:62:91:58:47:eb:21:2b:51:ee:10:6d:35:a3:
31:28:65:69:12:4c:d2:ef:20:37:88:01:66:28:ba:
06:6c:51:fc:ad:b3:f1:b5:c3:3b:75:48:38:d4:64:
91:94:8b:b3:77:fa:68:0e:bd:6d:d7:72:93:fc:9c:
44:df:91:a3:41:14:ce:82:00:98:89:1f:a0:f1:a2:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A6:C5:A0:F0:9F:19:D7:F4:A2:FB:7B:9A:64:02:A4:D2:06:DC:3A
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:c7:b0:3a:f5:60:f4:30:96:7c:e3:6b:71:ee:f7:31:57:
d7:f7:0e:19:28:32:98:23:21:c4:33:b5:6c:94:cd:61:fa:8a:
dc:31:7f:61:c2:67:fa:d0:de:2d:7d:2a:0f:a3:7f:04:4c:11:
54:12:a0:f0:a2:d0:31:bd:10:9a:a9:65:e7:6a:6f:34:2f:d3:
36:21:b0:33:e7:75:6a:a2:d7:e9:6e:1f:fc:ac:34:46:3e:58:
51:1c:b6:ea:03:a4:1d:64:11:3d:06:ec:62:7f:a3:f5:ce:38:
8a:23:f7:84:6b:98:e5:e9:3b:c3:41:df:85:61:91:0d:79:3e:
df:6a:bc:93:ef:78:0c:b4:36:1c:b7:03:ae:ba:0a:6e:0b:50:
75:7c:29:15:83:07:6f:f1:5d:b1:21:ec:2c:64:31:3f:76:5f:
43:70:79:11:12:21:bb:c3:7f:3d:9b:e8:dd:f4:77:9c:b7:37:
f6:18:2d:9f:db:44:f4:00:8f:11:07:01:92:1d:3c:da:0c:47:
59:51:5e:99:28:9c:3b:b6:01:6d:07:55:2b:32:44:d8:27:12:
1a:22:82:09:06:12:85:7d:46:d3:29:c8:53:1c:98:c1:13:13:
74:8c:63:d2:72:18:53:bb:e1:4e:fc:3a:61:7f:c7:3b:5b:fa:
30:32:2f:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2aq4pJaTOGuEtOMIMex4q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjYyZjc2MDYyNzNmNDFhNmNjYzhlMjk1NjA3NmYzYzBh
MWViNTQwHhcNMjYwNDE3MDkwMDI2WhcNMjYwNDE4MDkwMDI2WjAzMTEwLwYDVQQD
Eyg2MmE2YzVhMGYwOWYxOWQ3ZjRhMmZiN2I5YTY0MDJhNGQyMDZkYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP+lU8GedPQvg216knA/+kBuxQav
w9jYdHwXMhmQKR3FDJ0v5DUWslg60UBFkdXJyxlO74QG/hTLzVyFYDwtlq4OE2kv
1rEYQzWJF5JpBunmTKGWFlRDP/wOk3WKqbuJha50sRwEWtRwcMbOaA+TKEDWpHwW
v+JxX8fLSb3BJxyhnN1EpaW05R/F7N7MixMPsPqYTri3F9GZjwi1V6YSu5F89RLs
5uGohGUhpKtZZy4o/rKXPWKRWEfrIStR7hBtNaMxKGVpEkzS7yA3iAFmKLoGbFH8
rbPxtcM7dUg41GSRlIuzd/poDr1t13KT/JxE35GjQRTOggCYiR+g8aLbpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGKmxaDwnxnX9KL7e5pkAqTSBtw6MB8GA1UdIwQY
MBaAFPv2L3YGJz9BpszI4pVgdvPAoetUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fWXZkZ1luUDBHbXpNamlsV0IyODhDaDYxUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvOTVlZWJiLTBhOWQtNGY3MS1iM2Y5
LTU2NDllMWIxOTJiYi8xLzEtX1l2ZGdZblAwR216TWppbFdCMjg4Q2g2MVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIzLzk1ZWViYi0wYTlkLTRmNzEtYjNmOS01NjQ5ZTFiMTky
YmIvMS8xLV9ZdmRnWW5QMEdtek1qaWxXQjI4OENoNjFRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVPH
sDr1YPQwlnzja3Hu9zFX1/cOGSgymCMhxDO1bJTNYfqK3DF/YcJn+tDeLX0qD6N/
BEwRVBKg8KLQMb0Qmqll52pvNC/TNiGwM+d1aqLX6W4f/Kw0Rj5YURy26gOkHWQR
PQbsYn+j9c44iiP3hGuY5ek7w0HfhWGRDXk+32q8k+94DLQ2HLcDrroKbgtQdXwp
FYMHb/FdsSHsLGQxP3ZfQ3B5ERIhu8N/PZvo3fR3nLc39hgtn9tE9ACPEQcBkh08
2gxHWVFemSicO7YBbQdVKzJE2CcSGiKCCQYShX1G0ynIUxyYwRMTdIxj0nIYU7vh
Tvw6YX/HO1v6MDIvxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:44 2026 by rpki-client