Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: j4NgyQA8H6SFMwFM3+P0VSXIyv6wVkNrm0RjtUSYemY=
Subject key identifier: 3C:C1:2F:21:4C:1C:D0:0C:F3:8C:EF:4F:A0:95:56:9A:54:F4:76:12
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019D9773C55126E7A679CE91F61B233F158E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 15E9
Signing time: Thu 16 Apr 2026 18:00:39 +0000
Manifest this update: Thu 16 Apr 2026 18:00:39 +0000
Manifest next update: Fri 17 Apr 2026 18:00:39 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: CbLDtsa6Bq+wy7c0AdNCiwPw5P4w5QPQ8v9XnSFxYmQ=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:c5:51:26:e7:a6:79:ce:91:f6:1b:23:3f:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Apr 16 18:00:39 2026 GMT
Not After : Apr 17 18:00:39 2026 GMT
Subject: CN=3cc12f214c1cd00cf38cef4fa095569a54f47612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:71:b2:b2:89:3f:26:1c:8e:8d:96:b0:87:
da:f3:56:91:62:49:17:76:b2:89:fe:50:e7:ea:0e:
f4:39:98:21:7d:5b:b6:db:7a:3d:81:6a:cd:b2:32:
fd:2b:c2:9e:47:9f:fa:ec:ac:a3:39:d3:90:03:2d:
60:6c:84:62:e8:51:12:e6:dc:1a:9d:73:0f:6a:1c:
8d:1a:a6:8a:95:5a:9b:e7:cd:f2:6d:e5:a8:74:97:
00:c4:99:34:6e:af:ba:9a:a5:d9:6d:e2:9d:bf:69:
07:6f:82:04:d7:85:8c:26:4a:68:7c:ec:f3:5b:9b:
66:2e:34:ca:3e:82:f3:8d:d6:47:42:8c:6d:f3:ee:
23:8e:04:1e:6a:62:1d:43:90:60:15:ff:79:33:91:
58:f5:a5:07:07:9c:a3:9f:96:f4:7f:53:c1:f6:07:
e7:d9:81:58:7b:08:c2:7d:be:da:ba:bd:4d:59:90:
9f:20:eb:ea:2c:c8:71:a1:a4:5d:76:a8:c2:ff:db:
2c:33:93:c4:5b:8e:34:c9:e7:e1:07:1c:05:bb:ef:
0f:d0:f7:ff:73:aa:78:79:40:a8:b1:d6:e2:2f:8b:
03:4e:19:9c:b7:91:10:48:85:ea:da:87:c7:ae:86:
70:45:4c:82:26:48:3a:cf:f9:b7:eb:c8:91:c1:8c:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:2F:21:4C:1C:D0:0C:F3:8C:EF:4F:A0:95:56:9A:54:F4:76:12
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0d:8c:b4:76:28:fc:ce:24:14:d0:b6:19:a2:f3:92:a5:7f:
a6:3c:e7:5e:2d:0e:b4:48:10:49:50:57:6b:d2:8e:19:32:2e:
35:74:e9:9f:03:bf:87:e8:ec:30:f5:55:ea:5c:09:7a:6e:f5:
53:cc:46:8f:0c:58:ec:01:64:45:9a:a8:f1:b8:b9:09:36:20:
7d:92:6c:f7:90:28:3e:1f:72:a2:02:c3:28:81:ad:f9:5e:fe:
0d:d5:80:9f:95:03:ff:0d:02:e4:86:28:9e:6a:95:b7:60:de:
03:aa:9f:c0:60:1e:17:b8:c4:6f:d5:b8:f5:ad:58:a0:da:0d:
01:1e:e3:ef:00:a8:fd:cd:5c:f9:88:e4:aa:2f:5b:a6:a8:2b:
d5:50:7b:df:1b:1b:40:49:3a:2b:bd:0c:c8:cc:33:cd:b7:a5:
48:4f:b8:58:d8:f8:18:e1:bb:f3:ab:b3:98:9c:92:6e:63:5d:
27:9a:81:b0:81:ae:a0:2c:75:ca:74:62:84:c1:af:0b:25:c2:
48:8e:14:85:60:88:04:75:61:17:ca:ed:77:cb:77:a8:1b:f3:
7d:a5:ba:2d:b6:b4:ca:3a:d6:d2:9f:75:f2:20:23:fe:74:c6:
64:d9:af:3c:b3:be:8c:a4:c1:9d:06:77:d2:dd:a4:ec:cf:9f:
a4:4b:6a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc8VRJuemec6R9hsjPxWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3
NDQ4OTgwHhcNMjYwNDE2MTgwMDM5WhcNMjYwNDE3MTgwMDM5WjAzMTEwLwYDVQQD
EygzY2MxMmYyMTRjMWNkMDBjZjM4Y2VmNGZhMDk1NTY5YTU0ZjQ3NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4dxsrKJPyYcjo2WsIfa81aRYkkX
drKJ/lDn6g70OZghfVu223o9gWrNsjL9K8KeR5/67KyjOdOQAy1gbIRi6FES5twa
nXMPahyNGqaKlVqb583ybeWodJcAxJk0bq+6mqXZbeKdv2kHb4IE14WMJkpofOzz
W5tmLjTKPoLzjdZHQoxt8+4jjgQeamIdQ5BgFf95M5FY9aUHB5yjn5b0f1PB9gfn
2YFYewjCfb7aur1NWZCfIOvqLMhxoaRddqjC/9ssM5PEW440yefhBxwFu+8P0Pf/
c6p4eUCosdbiL4sDThmct5EQSIXq2ofHroZwRUyCJkg6z/m368iRwYxBAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzBLyFMHNAM84zvT6CVVppU9HYSMB8GA1UdIwQY
MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It
NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx
LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoA2MtHYo
/M4kFNC2GaLzkqV/pjznXi0OtEgQSVBXa9KOGTIuNXTpnwO/h+jsMPVV6lwJem71
U8xGjwxY7AFkRZqo8bi5CTYgfZJs95AoPh9yogLDKIGt+V7+DdWAn5UD/w0C5IYo
nmqVt2DeA6qfwGAeF7jEb9W49a1YoNoNAR7j7wCo/c1c+Yjkqi9bpqgr1VB73xsb
QEk6K70MyMwzzbelSE+4WNj4GOG786uzmJySbmNdJ5qBsIGuoCx1ynRihMGvCyXC
SI4UhWCIBHVhF8rtd8t3qBvzfaW6Lba0yjrW0p918iAj/nTGZNmvPLO+jKTBnQZ3
0t2k7M+fpEtqOg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:33 2026 by rpki-client