Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json)
Hash identifier: 7STVgMMvU8Cwltltp+2xhUoXXXJWZ/pVjHdOuNjSzPk=
Subject key identifier: D4:F8:F2:42:11:AF:6C:FA:F5:8E:FD:A4:43:7F:FC:89:15:52:6C:06
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 019DA378A6D49B56A12458D2D133318EB86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 02:01:26 +0000
Manifest this update: Sun 19 Apr 2026 02:01:26 +0000
Manifest next update: Mon 20 Apr 2026 02:01:26 +0000
Files and hashes: 1: XXnrfTeMWz5PhgtiK8a4AxaSgho.roa (hash: yESjb+epkWscywuwChkZG1nAsFck4dw/7G4mvFgiS10=)
2: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: /ekK6tRCjzu7GqV0NoJXtqd7dJCS+RUjR+HlF6ESZf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a6:d4:9b:56:a1:24:58:d2:d1:33:31:8e:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Apr 19 02:01:26 2026 GMT
Not After : Apr 20 02:01:26 2026 GMT
Subject: CN=d4f8f24211af6cfaf58efda4437ffc8915526c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:cf:12:b1:96:0f:7d:9c:99:72:82:0a:ac:
e0:0e:36:8f:b9:92:50:70:0c:44:d4:d9:69:02:80:
1a:f3:f3:6c:6b:99:36:17:7d:2b:6d:f8:c5:46:ce:
64:06:5f:75:df:88:88:d3:24:78:e9:a3:dc:51:f7:
9a:c9:57:cf:45:5b:d7:63:ad:26:7b:3a:5a:10:0f:
b1:99:a1:0e:fd:e2:c6:0e:c3:fc:52:b9:87:6e:ec:
fd:8d:c0:2a:1a:2f:71:ee:08:34:7b:e6:58:85:9a:
0c:f5:32:7e:40:d7:2f:eb:38:5c:90:fb:22:28:4f:
9d:97:c7:bf:ee:08:6c:f5:c9:6f:24:9c:d5:41:dd:
4c:e7:3a:92:d6:53:7c:49:dc:fa:09:07:5c:7d:23:
3b:ca:e6:3e:8c:56:4d:86:6d:8c:3b:29:6e:70:04:
d7:65:37:f8:be:8b:50:44:e2:f5:73:9a:de:4e:aa:
4c:52:96:96:03:de:59:16:12:19:14:67:ae:3b:8d:
97:27:ba:b3:24:22:9a:c8:a8:eb:04:a5:34:05:85:
6e:fb:5e:30:05:98:0b:ad:9e:74:5c:f4:17:72:0a:
57:c0:22:47:bb:55:df:3b:4f:a7:ce:75:9f:48:4f:
58:4d:02:75:f8:ac:d0:01:77:3e:5a:e3:df:7b:23:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:F2:42:11:AF:6C:FA:F5:8E:FD:A4:43:7F:FC:89:15:52:6C:06
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:63:dc:31:23:b0:dc:40:43:bf:f4:ab:cd:dc:0f:55:fb:89:
46:c8:7e:89:b0:c7:88:df:60:31:78:0a:fa:72:65:92:50:c6:
eb:03:c7:ee:f8:45:3f:48:33:30:b0:72:07:ca:c3:eb:5f:27:
00:42:b1:c6:55:d2:13:02:3d:b3:8e:d1:8f:b2:ca:df:75:d3:
d9:f1:30:5c:75:63:16:a5:b0:b0:11:7b:25:df:88:1e:80:d9:
69:43:84:b2:b2:29:95:8b:39:97:c3:f0:ee:d8:d5:3c:30:de:
6a:29:0e:7d:3c:e0:8e:84:d9:58:6e:61:97:24:6a:86:4e:ea:
00:07:53:07:e3:cb:c8:1f:42:37:1b:dd:62:e6:9b:31:ed:8f:
a8:8b:83:28:58:4d:fc:6a:ef:60:b9:51:62:d1:19:76:0d:e1:
fc:66:75:18:03:9f:b3:54:d0:0e:22:eb:cf:b7:52:d1:b7:5a:
35:54:45:ae:62:a4:3f:15:a2:3b:52:11:10:5f:42:79:85:05:
b1:d1:c5:22:0a:f2:b0:42:76:13:b0:82:5c:b3:f4:d2:8a:a4:
f4:f0:ce:26:f4:3a:cc:a3:5d:51:1b:a4:cc:55:d1:83:21:eb:
2b:0f:43:63:de:9d:b7:f6:a8:da:99:8e:cb:d0:d1:57:70:8f:
c2:b8:34:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeKbUm1ahJFjS0TMxjrhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODYzMTRmODc2MzVlNzkzYmMyZTNkYmJlZDY2NDA1Yjhh
YzY3NzEwHhcNMjYwNDE5MDIwMTI2WhcNMjYwNDIwMDIwMTI2WjAzMTEwLwYDVQQD
EyhkNGY4ZjI0MjExYWY2Y2ZhZjU4ZWZkYTQ0MzdmZmM4OTE1NTI2YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPPErGWD32cmXKCCqzgDjaPuZJQ
cAxE1NlpAoAa8/Nsa5k2F30rbfjFRs5kBl9134iI0yR46aPcUfeayVfPRVvXY60m
ezpaEA+xmaEO/eLGDsP8UrmHbuz9jcAqGi9x7gg0e+ZYhZoM9TJ+QNcv6zhckPsi
KE+dl8e/7ghs9clvJJzVQd1M5zqS1lN8Sdz6CQdcfSM7yuY+jFZNhm2MOylucATX
ZTf4votQROL1c5reTqpMUpaWA95ZFhIZFGeuO42XJ7qzJCKayKjrBKU0BYVu+14w
BZgLrZ50XPQXcgpXwCJHu1XfO0+nznWfSE9YTQJ1+KzQAXc+WuPfeyMDiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT48kIRr2z69Y79pEN//IkVUmwGMB8GA1UdIwQY
MBaAFGCGMU+HY155O8Lj277WZAW4rGdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEt
MDI4MDU5OGYxOWUzLzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEtMDI4MDU5OGYxOWUz
LzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGPcMSOw
3EBDv/SrzdwPVfuJRsh+ibDHiN9gMXgK+nJlklDG6wPH7vhFP0gzMLByB8rD618n
AEKxxlXSEwI9s47Rj7LK33XT2fEwXHVjFqWwsBF7Jd+IHoDZaUOEsrIplYs5l8Pw
7tjVPDDeaikOfTzgjoTZWG5hlyRqhk7qAAdTB+PLyB9CNxvdYuabMe2PqIuDKFhN
/GrvYLlRYtEZdg3h/GZ1GAOfs1TQDiLrz7dS0bdaNVRFrmKkPxWiO1IREF9CeYUF
sdHFIgrysEJ2E7CCXLP00oqk9PDOJvQ6zKNdURukzFXRgyHrKw9DY96dt/ao2pmO
y9DRV3CPwrg0bQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:37 2026 by rpki-client