Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File: Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier: eb/IokzX5Dtvgdra6rjN4K+PJCwd/xgrrrgHbzomC8w=
Subject key identifier: EF:F0:D4:26:B3:14:AF:94:1E:57:52:A7:59:37:35:7D:92:26:F0:45
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 019D9B5103EF9F5FD970EC28EECF0D4427C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:11 +0000
Manifest this update: Fri 17 Apr 2026 12:01:11 +0000
Manifest next update: Sat 18 Apr 2026 12:01:11 +0000
Files and hashes: 1: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: bfiEtWeNLZE02mA6PUIFVPd/FSJh2zQzvU/05bWbMO4=)
2: _gz8x1xGW4-7OCEk-C8VchnNXgo.roa (hash: fFsAwtO9RzQxvli7T//NB0hYVb7zH2oavZtCFJaj1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:03:ef:9f:5f:d9:70:ec:28:ee:cf:0d:44:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Apr 17 12:01:11 2026 GMT
Not After : Apr 18 12:01:11 2026 GMT
Subject: CN=eff0d426b314af941e5752a75937357d9226f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:d0:ee:5d:8e:79:4d:7f:d9:ed:c5:be:7f:
a6:e9:c5:1a:55:e5:77:1c:c9:a6:bc:78:5a:32:ac:
6a:a5:29:82:5b:02:93:1d:b7:07:13:8b:fa:b4:b0:
09:fd:46:32:0e:5f:74:2f:11:af:d4:fa:9a:cd:6d:
a8:85:e7:b7:44:06:8b:1a:cb:dc:f7:06:ef:a9:53:
ce:dc:76:58:89:57:ed:ef:e4:50:09:96:ce:17:c8:
b2:53:f1:b1:13:80:7a:2b:56:a5:b1:86:10:f0:96:
db:d9:0e:41:1a:30:62:49:1a:d7:1f:ee:0a:3c:d0:
fb:7f:6e:fa:6e:fb:86:b7:bb:df:3f:3e:0e:ec:2d:
97:56:3a:ba:22:98:8a:e6:db:4e:72:0c:6f:33:54:
32:d0:47:b5:99:20:f1:5e:6a:12:05:81:88:ab:3c:
00:4f:95:b1:82:a5:e0:5c:b9:a6:c7:2e:b2:f7:45:
ac:5e:a8:a6:1b:34:c3:b6:75:a9:af:b9:97:a9:90:
1b:29:6f:9a:7d:42:f7:cf:41:96:c0:65:71:62:8a:
18:b1:aa:6f:5e:ef:c2:d2:80:75:21:d1:e5:f9:31:
63:7b:35:cf:ad:d0:2b:98:4c:5d:a7:a7:80:ad:1e:
c1:a1:f0:38:06:28:dd:97:f1:01:d1:5c:d6:b0:42:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:D4:26:B3:14:AF:94:1E:57:52:A7:59:37:35:7D:92:26:F0:45
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:3f:6a:23:e1:27:16:66:b3:b7:e0:30:58:46:4f:ed:e1:
d8:84:da:c1:bb:a5:d9:dd:d3:d6:35:30:ff:3d:d3:db:39:4c:
d4:d2:0d:60:1b:30:c6:c1:eb:b5:d9:04:99:3d:0c:f2:2d:c6:
82:6b:48:ef:64:fb:e8:b8:95:1b:a1:94:3b:da:89:2a:f3:ad:
e1:54:38:94:87:1d:33:7a:19:1e:30:eb:e9:fb:ba:60:fa:ea:
bf:d9:72:6b:6f:f1:9f:db:e9:38:04:50:12:49:6b:94:67:38:
f6:e8:d5:24:da:cc:fe:ae:17:e3:12:e0:64:7b:73:2a:fe:3b:
91:69:b4:8b:57:87:44:97:d5:37:bd:85:4b:97:21:70:3c:03:
7c:c2:d0:ae:23:df:33:74:76:0f:23:bb:e7:77:53:3d:c9:4c:
a2:1d:01:2e:ea:fa:c3:01:00:ba:04:42:fb:43:47:44:02:b6:
9b:83:b4:4b:6e:86:01:26:03:81:6a:07:06:c4:e6:56:85:4b:
12:4f:7d:46:d2:94:97:0c:56:75:be:1d:0a:82:4a:d2:b7:99:
64:38:25:cb:33:db:02:80:09:01:81:e2:c2:bd:39:65:b9:47:
9e:2f:d7:bc:87:ce:20:12:90:8b:fd:cf:22:30:25:fb:d6:2a:
5f:7f:f7:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUQPvn1/ZcOwo7s8NRCfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzgxNDBkYmQ0ZTZlZjE3MDIwZDg5YjBkNDI1MGRmZmIw
NDgxMWMwHhcNMjYwNDE3MTIwMTExWhcNMjYwNDE4MTIwMTExWjAzMTEwLwYDVQQD
EyhlZmYwZDQyNmIzMTRhZjk0MWU1NzUyYTc1OTM3MzU3ZDkyMjZmMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlTQ7l2OeU1/2e3Fvn+m6cUaVeV3
HMmmvHhaMqxqpSmCWwKTHbcHE4v6tLAJ/UYyDl90LxGv1PqazW2ohee3RAaLGsvc
9wbvqVPO3HZYiVft7+RQCZbOF8iyU/GxE4B6K1alsYYQ8Jbb2Q5BGjBiSRrXH+4K
PND7f276bvuGt7vfPz4O7C2XVjq6IpiK5ttOcgxvM1Qy0Ee1mSDxXmoSBYGIqzwA
T5WxgqXgXLmmxy6y90WsXqimGzTDtnWpr7mXqZAbKW+afUL3z0GWwGVxYooYsapv
Xu/C0oB1IdHl+TFjezXPrdArmExdp6eArR7BofA4Bijdl/EB0VzWsELMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/w1CazFK+UHldSp1k3NX2SJvBFMB8GA1UdIwQY
MBaAFGN4FA29Tm7xcCDYmw1CUN/7BIEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYt
NTYzYzZiNTJkMDg2LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYtNTYzYzZiNTJkMDg2
LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawY/aiPh
JxZms7fgMFhGT+3h2ITawbul2d3T1jUw/z3T2zlM1NINYBswxsHrtdkEmT0M8i3G
gmtI72T76LiVG6GUO9qJKvOt4VQ4lIcdM3oZHjDr6fu6YPrqv9lya2/xn9vpOARQ
EklrlGc49ujVJNrM/q4X4xLgZHtzKv47kWm0i1eHRJfVN72FS5chcDwDfMLQriPf
M3R2DyO753dTPclMoh0BLur6wwEAugRC+0NHRAK2m4O0S26GASYDgWoHBsTmVoVL
Ek99RtKUlwxWdb4dCoJK0reZZDglyzPbAoAJAYHiwr05ZblHni/XvIfOIBKQi/3P
IjAl+9YqX3/35g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:59 2026 by rpki-client