Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier: FddrTvhU1q3aLr7B+YNvm9VoPU8xOrl+4mvo9Zr+kZI=
Subject key identifier: 7D:32:B0:D8:16:23:8D:CC:E2:E6:5D:8D:42:ED:FA:02:F7:AD:36:11
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial: 019D98F48307A6BCA62954B968C8778C80E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:54 +0000
Manifest this update: Fri 17 Apr 2026 01:00:54 +0000
Manifest next update: Sat 18 Apr 2026 01:00:54 +0000
Files and hashes: 1: NITgwZ0BoycrXSGPU8iX7ZnWyHc.roa (hash: 5tWOFXf/UnsBI5wfRpAA1+yDyuJUDNX32cEt3vj5vdk=)
2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: x5hCjAStKjDugM3+DZIsGWYehfgr2HP8sFIyv1G0RUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:83:07:a6:bc:a6:29:54:b9:68:c8:77:8c:80:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
Validity
Not Before: Apr 17 01:00:54 2026 GMT
Not After : Apr 18 01:00:54 2026 GMT
Subject: CN=7d32b0d816238dcce2e65d8d42edfa02f7ad3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:cd:15:c9:4e:46:48:82:cf:c9:11:a9:3b:
fe:08:10:4c:18:35:c8:bf:19:fe:1c:20:23:6d:80:
4e:c6:cf:2b:d3:61:47:d0:4c:1b:6c:21:36:ce:78:
2e:a7:71:f4:45:df:2e:57:ef:3d:f3:bd:ae:f6:dd:
59:22:a9:eb:d3:09:88:2e:59:64:b5:82:a0:13:d9:
b9:80:83:da:62:6d:b7:08:1f:b3:ae:02:e7:4c:33:
d9:89:6c:df:01:c0:6f:3e:ba:c8:9c:19:bb:a5:cb:
05:61:b7:c3:47:7e:f2:54:a1:89:44:1b:d8:49:78:
a5:a4:43:9e:c0:9d:25:56:3b:52:49:d0:22:53:3e:
66:b3:a8:cc:47:b2:d1:df:e2:71:13:2f:1b:7a:6c:
2f:36:78:36:7b:7b:63:5d:6b:7e:66:e1:82:fd:87:
6c:06:85:80:01:fc:50:4a:54:18:76:43:2a:11:d1:
12:cd:da:a8:ed:0c:7f:d2:25:76:cb:1e:70:0b:84:
5b:89:75:13:ee:d2:32:23:38:a2:c1:63:31:f9:8e:
d0:67:15:0d:93:22:0b:f1:9a:c0:e6:13:a4:37:88:
7d:fd:a5:9d:46:95:38:f9:46:a6:1c:27:d8:c6:51:
ba:be:da:88:ba:02:92:2e:b9:1a:7a:7a:11:c5:8f:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:B0:D8:16:23:8D:CC:E2:E6:5D:8D:42:ED:FA:02:F7:AD:36:11
X509v3 Authority Key Identifier:
keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:83:b5:21:e3:94:01:23:a5:c5:5e:23:7a:4c:41:62:ec:c9:
1d:a1:9d:bb:83:99:31:2e:fa:1e:db:30:74:b4:1b:65:ca:81:
39:f7:9c:03:f0:bd:be:1f:ec:dc:c5:8b:41:e3:80:56:a6:bc:
76:53:2f:79:eb:2f:62:64:a2:5e:5e:2e:56:e1:4f:94:03:f1:
6f:ef:ef:4c:2b:1f:66:27:bd:04:f2:5b:53:5a:19:d2:26:96:
28:65:96:9a:5b:e8:f3:63:7b:26:67:3d:f8:2d:72:59:a0:94:
19:dd:c5:07:23:54:10:03:87:6c:59:e7:27:bf:0b:4c:5e:51:
0c:1e:b5:ee:2c:d4:58:c8:ab:0e:a9:80:6d:cd:5a:01:81:0a:
23:d4:70:fa:85:79:dc:46:23:be:b9:a9:2a:ce:8e:98:1e:df:
c6:73:75:04:75:15:96:6b:6f:68:96:54:32:89:06:ad:32:7c:
13:a0:10:7f:96:23:f9:7c:12:35:ed:e6:91:d6:21:14:b6:db:
4b:5f:09:94:c4:ff:21:12:84:76:b0:4d:a2:2e:a1:f1:22:f8:
8a:12:96:b3:8b:6a:b1:97:0c:b9:4d:6d:08:cb:9c:1e:96:9f:
12:b9:a4:98:4f:33:93:30:66:b4:91:f3:e1:58:d0:a2:f1:3b:
58:b1:c7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9IMHprymKVS5aMh3jIDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi
ODg4MWEwHhcNMjYwNDE3MDEwMDU0WhcNMjYwNDE4MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3ZDMyYjBkODE2MjM4ZGNjZTJlNjVkOGQ0MmVkZmEwMmY3YWQzNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwLNFclORkiCz8kRqTv+CBBMGDXI
vxn+HCAjbYBOxs8r02FH0EwbbCE2zngup3H0Rd8uV+89872u9t1ZIqnr0wmILllk
tYKgE9m5gIPaYm23CB+zrgLnTDPZiWzfAcBvPrrInBm7pcsFYbfDR37yVKGJRBvY
SXilpEOewJ0lVjtSSdAiUz5ms6jMR7LR3+JxEy8bemwvNng2e3tjXWt+ZuGC/Yds
BoWAAfxQSlQYdkMqEdESzdqo7Qx/0iV2yx5wC4RbiXUT7tIyIziiwWMx+Y7QZxUN
kyIL8ZrA5hOkN4h9/aWdRpU4+UamHCfYxlG6vtqIugKSLrkaenoRxY9AkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0ysNgWI43M4uZdjULt+gL3rTYRMB8GA1UdIwQY
MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt
ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj
LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoO1IeOU
ASOlxV4jekxBYuzJHaGdu4OZMS76HtswdLQbZcqBOfecA/C9vh/s3MWLQeOAVqa8
dlMveesvYmSiXl4uVuFPlAPxb+/vTCsfZie9BPJbU1oZ0iaWKGWWmlvo82N7Jmc9
+C1yWaCUGd3FByNUEAOHbFnnJ78LTF5RDB617izUWMirDqmAbc1aAYEKI9Rw+oV5
3EYjvrmpKs6OmB7fxnN1BHUVlmtvaJZUMokGrTJ8E6AQf5Yj+XwSNe3mkdYhFLbb
S18JlMT/IRKEdrBNoi6h8SL4ihKWs4tqsZcMuU1tCMucHpafErmkmE8zkzBmtJHz
4VjQovE7WLHHoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:10 2026 by rpki-client