Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: T9LYQbUK+ybkBRhw32u4wbRwkIrfQV1sXZxnYCqdVSQ=
Subject key identifier: 24:6C:65:F5:5B:8D:46:61:0D:D1:96:66:66:C5:50:42:F8:D8:34:CB
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019D9B1A09FC62B2090DB108B8AD66F382D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: B2
Signing time: Fri 17 Apr 2026 11:01:08 +0000
Manifest this update: Fri 17 Apr 2026 11:01:08 +0000
Manifest next update: Sat 18 Apr 2026 11:01:08 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: CyU40fOYJLO5TWNPlicCa3GxmvVhnelwny4byEc8BrM=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:09:fc:62:b2:09:0d:b1:08:b8:ad:66:f3:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Apr 17 11:01:08 2026 GMT
Not After : Apr 18 11:01:08 2026 GMT
Subject: CN=246c65f55b8d46610dd1966666c55042f8d834cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:40:be:3f:c8:97:ee:a6:d7:a4:77:0d:df:
d7:25:fd:ce:e7:0f:46:8b:84:cf:1b:f1:69:5f:35:
5d:83:10:b7:7d:f0:81:bc:fe:dd:04:d5:a2:ff:34:
b3:c5:b3:9b:c9:13:42:9f:2e:b4:91:a4:e1:40:a8:
26:c4:75:10:d9:d8:39:7d:64:1a:4f:75:a1:10:92:
b8:0b:4f:52:35:70:69:c7:23:dc:c9:aa:d6:17:4b:
1e:81:e1:65:e2:3c:f0:ea:26:bb:10:c2:a5:31:ef:
e0:98:3d:89:9f:96:e5:00:7e:a0:de:21:16:fc:63:
df:a6:aa:10:52:18:97:46:85:71:94:a5:95:ee:62:
c1:2d:25:d6:32:27:f0:37:bf:5b:6b:63:0c:b0:59:
a2:2f:24:c8:b9:a7:87:dd:46:2e:2e:7d:e4:c3:fc:
5d:4a:02:af:f6:c1:dc:d8:20:d0:87:43:bf:69:63:
ef:c3:ba:be:a1:a0:69:bd:1d:cb:63:06:4c:fc:cb:
28:b7:0f:79:d4:ca:e4:a2:31:a6:a1:23:5b:89:35:
6d:bd:6b:b6:a6:d6:ad:49:d3:c8:1e:b0:f8:59:31:
3f:4e:1c:92:d5:13:99:73:2e:82:39:1b:75:52:47:
c5:a8:6d:f3:5a:87:f6:36:85:02:0a:d0:53:f1:73:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6C:65:F5:5B:8D:46:61:0D:D1:96:66:66:C5:50:42:F8:D8:34:CB
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:35:f2:14:c2:67:04:3f:a4:29:de:bc:11:60:f8:08:0a:ec:
87:1d:02:8c:91:9e:47:11:53:0d:cb:40:47:32:03:9c:4e:9f:
3c:2a:fc:93:df:11:e5:ae:37:7f:37:b4:e4:c3:0f:6f:b4:19:
e4:93:39:53:61:e9:a4:ba:9f:0f:31:0b:52:5f:ee:69:05:ad:
dc:08:e1:4a:f5:6d:a6:4b:37:08:10:2f:5c:0c:c2:3e:22:ea:
ba:96:50:69:f8:04:30:1a:e1:41:8c:87:9b:a5:c5:64:de:05:
f7:2d:1d:64:f0:32:8d:10:48:50:8c:e6:7d:f0:69:56:3d:b0:
4f:5b:a8:d3:5b:1f:0f:0c:f3:a3:b7:ef:2e:3f:04:4a:40:1a:
af:4a:2b:a3:5e:f2:c8:d6:6c:17:b8:c1:9b:17:ca:c1:b4:87:
fa:dc:c7:3b:fa:f4:18:16:b9:8a:80:41:09:24:90:c4:9b:78:
80:78:09:7d:ea:65:ec:53:ec:33:17:e8:2d:ce:9b:a6:a5:da:
34:2c:a3:10:b1:3d:a5:82:d8:fa:5f:ca:f9:2c:7f:d5:57:6b:
19:e1:47:81:7f:54:c7:48:60:80:3c:c3:bc:1f:1d:88:ef:89:
98:07:49:cd:29:0b:47:5a:47:be:69:c6:b5:59:57:10:56:3b:
02:ab:a9:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGgn8YrIJDbEIuK1m84LUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDliNWRhODQ2MTBlZDIyMGY2ZDBmZDFhODg4ZDFmOTQ2
M2Y1OTUwHhcNMjYwNDE3MTEwMTA4WhcNMjYwNDE4MTEwMTA4WjAzMTEwLwYDVQQD
EygyNDZjNjVmNTViOGQ0NjYxMGRkMTk2NjY2NmM1NTA0MmY4ZDgzNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhRAvj/Il+6m16R3Dd/XJf3O5w9G
i4TPG/FpXzVdgxC3ffCBvP7dBNWi/zSzxbObyRNCny60kaThQKgmxHUQ2dg5fWQa
T3WhEJK4C09SNXBpxyPcyarWF0segeFl4jzw6ia7EMKlMe/gmD2Jn5blAH6g3iEW
/GPfpqoQUhiXRoVxlKWV7mLBLSXWMifwN79ba2MMsFmiLyTIuaeH3UYuLn3kw/xd
SgKv9sHc2CDQh0O/aWPvw7q+oaBpvR3LYwZM/Msotw951MrkojGmoSNbiTVtvWu2
ptatSdPIHrD4WTE/ThyS1ROZcy6CORt1UkfFqG3zWof2NoUCCtBT8XPhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRsZfVbjUZhDdGWZmbFUEL42DTLMB8GA1UdIwQY
MBaAFGLZtdqEYQ7SIPbQ/RqIjR+UY/WVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NTVkN2YtODdhZi00YTI5LTk3NDQt
OGVkMzY4YTlkNjAwLzEvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NTVkN2YtODdhZi00YTI5LTk3NDQtOGVkMzY4YTlkNjAw
LzEvWXRtMTJvUmhEdElnOXREOUdvaU5INVJqOVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTXyFMJn
BD+kKd68EWD4CArshx0CjJGeRxFTDctARzIDnE6fPCr8k98R5a43fze05MMPb7QZ
5JM5U2HppLqfDzELUl/uaQWt3AjhSvVtpks3CBAvXAzCPiLqupZQafgEMBrhQYyH
m6XFZN4F9y0dZPAyjRBIUIzmffBpVj2wT1uo01sfDwzzo7fvLj8ESkAar0oro17y
yNZsF7jBmxfKwbSH+tzHO/r0GBa5ioBBCSSQxJt4gHgJfepl7FPsMxfoLc6bpqXa
NCyjELE9pYLY+l/K+Sx/1VdrGeFHgX9Ux0hggDzDvB8diO+JmAdJzSkLR1pHvmnG
tVlXEFY7AqupIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:54 2026 by rpki-client