Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: CaN5YcaVL7JWCWNqJXWQel8fPPd5Ec4MuT2Hrv6UYAc=
Subject key identifier: BE:C8:7D:26:BE:5C:C1:9C:6C:A0:A5:C9:7F:AD:E1:1E:FC:98:65:FF
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019D9A7521D59E7BCD2D5591DE3BA9F4BDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0CE5
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: kr2iTSuzwq4QVN//y7YWLHotNhF4+azCnPWYcjRuTV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:21:d5:9e:7b:cd:2d:55:91:de:3b:a9:f4:bd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=bec87d26be5cc19c6ca0a5c97fade11efc9865ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:69:3d:4e:fa:0e:12:53:17:61:1e:b5:a4:
0b:58:d2:fc:9a:5b:53:60:69:2e:92:ac:9f:db:25:
c9:bd:07:e6:59:58:5d:b3:89:1d:27:ac:5d:6c:34:
13:43:db:fe:ef:47:14:73:0d:46:4d:ce:c6:29:5e:
4e:b8:54:5e:91:04:44:0f:d9:1e:ff:78:b3:c8:6c:
11:b1:f2:ea:6e:d2:cb:a1:2d:f0:e2:4e:75:3a:72:
9f:5a:24:66:51:db:ec:f7:a1:a3:b6:42:56:06:e0:
06:3e:08:1b:13:ac:1b:1c:b2:5a:a4:1d:82:a7:6c:
3d:71:df:85:7b:ea:6b:65:de:10:dc:3f:ad:c8:48:
c2:1e:10:d3:fc:90:70:1e:20:29:7c:89:c2:19:1d:
a0:a0:22:9d:90:52:40:e5:15:9b:cc:01:b6:d6:f6:
71:e5:2a:34:69:41:45:2a:b2:3b:21:68:5b:27:c7:
99:4d:49:2a:9d:7b:8c:b8:38:6b:56:f1:4a:12:32:
1c:c3:c7:6b:82:1e:df:35:26:a8:20:b2:c5:b3:a3:
90:8f:1c:3a:cf:65:07:9b:24:cb:a6:33:21:44:e7:
63:b6:19:86:d4:f7:69:57:8c:af:12:97:30:3e:7e:
d8:cf:bc:fc:95:18:15:82:46:6e:d1:50:a9:20:3d:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:7D:26:BE:5C:C1:9C:6C:A0:A5:C9:7F:AD:E1:1E:FC:98:65:FF
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8b:4f:95:d1:70:68:11:3d:ee:84:7a:1a:91:1c:21:27:c8:
6c:ed:74:92:56:44:a6:62:78:1f:d2:bb:3d:1b:56:81:bf:36:
b7:c9:c6:01:69:4a:38:bd:ad:5d:a8:50:f0:e4:6f:d4:ba:91:
29:58:82:05:c0:d9:48:c6:2d:aa:ee:0d:b6:ae:1e:90:dc:ef:
03:f1:a5:e3:c7:9c:c6:5b:4f:0a:0d:55:79:c0:11:55:7a:89:
d9:80:dd:82:d4:c1:d5:c3:f9:3a:c2:3e:a0:13:5c:73:72:32:
d2:49:bc:50:bd:6d:a9:d2:38:7a:63:45:77:da:7d:0a:3b:7a:
fd:66:40:36:90:9c:c7:c5:4d:aa:b6:e6:51:1e:86:24:e8:09:
88:c1:b0:a3:14:b7:28:d3:15:56:3c:a4:ac:3b:1d:fa:8c:ca:
09:1a:b7:7f:84:5c:28:73:5f:b4:1f:77:48:ac:3c:4c:f4:d5:
d0:94:87:60:9d:65:2e:9e:ae:18:a6:a1:5a:c2:14:8e:01:7d:
71:c1:23:90:a9:6e:3e:59:8f:34:04:de:55:7e:f7:f8:4d:6a:
40:e8:b2:8d:69:b6:a9:0f:26:17:9f:0b:72:30:14:f3:5c:4c:
19:a3:9f:9d:26:72:31:75:c8:aa:0b:d8:08:3a:de:f7:ce:9b:
70:cb:cb:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adSHVnnvNLVWR3jup9L31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj
M2U2ZDUwHhcNMjYwNDE3MDgwMTAwWhcNMjYwNDE4MDgwMTAwWjAzMTEwLwYDVQQD
EyhiZWM4N2QyNmJlNWNjMTljNmNhMGE1Yzk3ZmFkZTExZWZjOTg2NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNpPU76DhJTF2EetaQLWNL8mltT
YGkukqyf2yXJvQfmWVhds4kdJ6xdbDQTQ9v+70cUcw1GTc7GKV5OuFRekQRED9ke
/3izyGwRsfLqbtLLoS3w4k51OnKfWiRmUdvs96GjtkJWBuAGPggbE6wbHLJapB2C
p2w9cd+Fe+prZd4Q3D+tyEjCHhDT/JBwHiApfInCGR2goCKdkFJA5RWbzAG21vZx
5So0aUFFKrI7IWhbJ8eZTUkqnXuMuDhrVvFKEjIcw8drgh7fNSaoILLFs6OQjxw6
z2UHmyTLpjMhROdjthmG1PdpV4yvEpcwPn7Yz7z8lRgVgkZu0VCpID2uaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7IfSa+XMGcbKClyX+t4R78mGX/MB8GA1UdIwQY
MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt
ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz
LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATotPldFw
aBE97oR6GpEcISfIbO10klZEpmJ4H9K7PRtWgb82t8nGAWlKOL2tXahQ8ORv1LqR
KViCBcDZSMYtqu4Ntq4ekNzvA/Gl48ecxltPCg1VecARVXqJ2YDdgtTB1cP5OsI+
oBNcc3Iy0km8UL1tqdI4emNFd9p9Cjt6/WZANpCcx8VNqrbmUR6GJOgJiMGwoxS3
KNMVVjykrDsd+ozKCRq3f4RcKHNftB93SKw8TPTV0JSHYJ1lLp6uGKahWsIUjgF9
ccEjkKluPlmPNATeVX73+E1qQOiyjWm2qQ8mF58LcjAU81xMGaOfnSZyMXXIqgvY
CDre986bcMvLjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:07 2026 by rpki-client