Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json)
Hash identifier: 93bh5QSHfZv8ThK7c9JkVG10yg5uTo9dfYRkkDuGOG0=
Subject key identifier: CD:8E:AD:89:BF:2F:4B:11:5A:3B:9B:D3:1D:64:91:54:7C:B9:E2:9A
Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Certificate serial: 019D98F3FFA5DA900F2F8837A044CFCA0213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
Manifest number: 05D6
Signing time: Fri 17 Apr 2026 01:00:20 +0000
Manifest this update: Fri 17 Apr 2026 01:00:20 +0000
Manifest next update: Sat 18 Apr 2026 01:00:20 +0000
Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: sbQrIRn/sffVIFXp22aTZa8qLYTF+UbLT31sqoHRUhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f3:ff:a5:da:90:0f:2f:88:37:a0:44:cf:ca:02:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711
Validity
Not Before: Apr 17 01:00:20 2026 GMT
Not After : Apr 18 01:00:20 2026 GMT
Subject: CN=cd8ead89bf2f4b115a3b9bd31d6491547cb9e29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:e7:fe:6f:3a:c2:47:ec:c3:4a:99:b3:a9:
30:1a:f9:1f:c0:2d:1e:4f:71:77:64:2e:8d:0e:39:
c9:83:5b:7f:4c:26:8e:9c:15:3c:74:01:24:5a:fc:
20:27:65:96:e1:fa:54:28:a1:b3:5b:b8:f9:3b:88:
ea:28:4f:9d:77:71:31:2d:ab:1e:f8:56:41:cb:2f:
d4:0b:8f:6a:c0:21:2c:19:a8:cb:8c:8e:4b:ac:06:
91:19:10:7a:91:7d:59:f1:ad:76:2d:64:0f:e5:89:
55:86:dc:5f:ee:c6:8d:ca:7f:a2:f0:30:82:da:a0:
f9:1b:f3:54:4e:7c:07:78:94:18:8a:4a:61:57:a7:
c5:29:15:f2:2d:61:f9:ea:ab:da:3c:68:80:ca:05:
6d:12:aa:1e:2b:c1:8a:54:1e:af:f4:31:d8:5d:4e:
c2:bc:56:44:5b:6a:73:28:84:0b:8f:29:97:b6:53:
69:4a:58:fc:42:ac:28:7c:ce:7f:ca:6e:ee:1b:c0:
69:0f:0d:99:f5:67:56:aa:d9:a1:52:03:6b:c8:cf:
6c:92:00:14:f2:9a:09:e2:3a:bf:fc:ce:9e:d0:16:
52:09:79:72:80:e6:09:b8:ac:07:d1:37:4b:d0:67:
f6:e3:59:da:f8:b9:9c:67:98:b1:41:85:89:98:98:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:AD:89:BF:2F:4B:11:5A:3B:9B:D3:1D:64:91:54:7C:B9:E2:9A
X509v3 Authority Key Identifier:
keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2b:4d:27:58:89:8b:4a:d6:5f:b7:0d:9c:e3:e9:58:35:41:
ac:7a:8e:90:84:85:c4:d7:03:d5:e6:3d:37:69:45:5f:e0:36:
2e:03:f2:8a:22:b0:02:d3:56:7e:c6:84:0d:54:c5:e5:2b:86:
97:00:3b:c6:f3:ec:1c:0a:60:61:04:7f:e2:57:52:68:75:35:
87:5a:51:b9:98:38:8c:37:af:d1:1f:fe:52:8f:97:77:a1:6b:
fe:48:93:78:a4:5e:07:45:44:79:77:2b:16:0e:58:a2:1e:b6:
8c:f4:f8:8f:bf:62:fe:0d:26:05:2d:ce:84:f7:99:54:ea:3b:
00:10:60:86:6d:ae:05:13:33:4f:42:90:91:84:8e:ae:41:e4:
15:07:c4:fc:57:28:3f:09:65:32:f6:04:50:8f:12:f4:8a:6d:
c3:b5:78:4c:f1:75:6d:b7:aa:4c:4d:45:3c:5c:d9:06:d5:b7:
ae:a3:30:73:57:22:98:3e:b4:db:d4:6d:97:9a:d1:24:cc:39:
07:23:8d:9c:b6:86:a3:ec:de:d0:f1:33:bc:b6:c7:bb:d4:f0:
ab:02:24:b0:29:2f:31:99:30:fe:68:b1:ae:e1:1c:ab:7b:f7:
9d:d2:8a:a8:ae:5a:73:12:e0:f2:88:bc:01:fd:e1:4c:f2:77:
45:67:f1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y8/+l2pAPL4g3oETPygITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTdlMDk0NGM3N2IyNmIzMDI5N2MyZDQ5YzNiZTZhZWIy
NzM3MTEwHhcNMjYwNDE3MDEwMDIwWhcNMjYwNDE4MDEwMDIwWjAzMTEwLwYDVQQD
EyhjZDhlYWQ4OWJmMmY0YjExNWEzYjliZDMxZDY0OTE1NDdjYjllMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv03n/m86wkfsw0qZs6kwGvkfwC0e
T3F3ZC6NDjnJg1t/TCaOnBU8dAEkWvwgJ2WW4fpUKKGzW7j5O4jqKE+dd3ExLase
+FZByy/UC49qwCEsGajLjI5LrAaRGRB6kX1Z8a12LWQP5YlVhtxf7saNyn+i8DCC
2qD5G/NUTnwHeJQYikphV6fFKRXyLWH56qvaPGiAygVtEqoeK8GKVB6v9DHYXU7C
vFZEW2pzKIQLjymXtlNpSlj8QqwofM5/ym7uG8BpDw2Z9WdWqtmhUgNryM9skgAU
8poJ4jq//M6e0BZSCXlygOYJuKwH0TdL0Gf241na+LmcZ5ixQYWJmJgCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2OrYm/L0sRWjub0x1kkVR8ueKaMB8GA1UdIwQY
MBaAFMqX4JRMd7JrMCl8LUnDvmrrJzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQt
ZTY4NzY3YzE4ZjAyLzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQtZTY4NzY3YzE4ZjAy
LzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFStNJ1iJ
i0rWX7cNnOPpWDVBrHqOkISFxNcD1eY9N2lFX+A2LgPyiiKwAtNWfsaEDVTF5SuG
lwA7xvPsHApgYQR/4ldSaHU1h1pRuZg4jDev0R/+Uo+Xd6Fr/kiTeKReB0VEeXcr
Fg5Yoh62jPT4j79i/g0mBS3OhPeZVOo7ABBghm2uBRMzT0KQkYSOrkHkFQfE/Fco
PwllMvYEUI8S9Iptw7V4TPF1bbeqTE1FPFzZBtW3rqMwc1cimD6029Rtl5rRJMw5
ByONnLaGo+ze0PEzvLbHu9TwqwIksCkvMZkw/mixruEcq3v3ndKKqK5acxLg8oi8
Af3hTPJ3RWfxIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:39 2026 by rpki-client