Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: bUu/T5YDllITjMIkRFoTF+eUgAN/Sepi9KHaRBWQYGk=
Subject key identifier: 68:60:CE:34:D7:28:E3:EC:8B:E3:37:B6:59:16:0E:83:72:91:8A:23
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019D97AAC332CC1EA360D26120AD9AC88956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0FAE
Signing time: Thu 16 Apr 2026 19:00:43 +0000
Manifest this update: Thu 16 Apr 2026 19:00:43 +0000
Manifest next update: Fri 17 Apr 2026 19:00:43 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: tC4x6MwxB9v8RuaI1naJjVIvK55g3322OaF5RXD0b74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:c3:32:cc:1e:a3:60:d2:61:20:ad:9a:c8:89:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Apr 16 19:00:43 2026 GMT
Not After : Apr 17 19:00:43 2026 GMT
Subject: CN=6860ce34d728e3ec8be337b659160e8372918a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:23:96:af:48:8c:18:f3:09:cc:7a:ae:01:
17:09:d6:7d:72:e6:19:7c:0f:69:44:6c:34:ec:e8:
98:55:eb:3c:37:f2:4f:ce:68:ba:08:d6:2e:53:00:
84:55:68:ba:ea:6c:84:62:24:89:4e:63:43:cc:9b:
53:43:05:81:f1:65:e6:d0:b9:67:54:57:71:13:e8:
a0:67:4d:04:54:e8:d7:c2:4d:f2:54:a7:de:7e:ff:
e4:a0:e8:e2:34:e4:7c:9b:39:30:4e:bc:be:b3:a5:
fa:08:61:11:17:a5:51:21:52:37:3a:10:7a:03:94:
13:f1:f3:52:17:e3:e5:46:dd:09:ec:28:8e:3a:21:
1a:14:3a:84:6c:5d:98:2a:ff:77:9f:eb:a4:bf:1c:
6b:3f:e1:4b:6e:56:5b:fd:90:ba:25:96:0b:55:44:
f5:75:3b:09:f0:87:6c:67:82:e9:31:1b:1d:c3:57:
cb:b6:ef:7a:b1:05:78:96:a9:46:4b:be:9e:9e:15:
22:d3:1b:d9:62:b8:eb:32:dc:dd:7a:cf:14:35:a2:
49:76:60:0f:7f:99:25:15:e7:f8:8a:1c:62:7d:2b:
8e:05:1e:f8:f1:ce:85:88:8c:97:66:a4:68:21:d8:
24:f8:eb:98:ad:be:2c:5f:6e:94:48:21:bc:cb:7d:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:CE:34:D7:28:E3:EC:8B:E3:37:B6:59:16:0E:83:72:91:8A:23
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a8:90:c4:d3:8d:d8:0b:b0:a3:64:eb:33:10:97:fe:b9:98:
6c:ec:4a:7a:12:c6:4c:4a:66:b9:94:6b:8c:52:aa:5a:68:c6:
b4:97:1a:8c:b6:19:15:7f:c4:13:3a:66:79:aa:8a:17:0b:02:
7e:cd:c5:29:5d:88:47:d5:09:41:cc:27:f0:7f:d6:cb:7b:77:
ed:ac:52:33:d9:41:3c:37:9d:11:af:cd:b9:ba:93:a6:2b:c1:
51:6e:f7:b3:75:26:0f:78:cd:3e:b2:82:7e:c9:18:a6:29:1d:
2d:02:94:a1:21:7d:df:d2:5f:8f:79:32:4a:0d:ac:84:2d:47:
83:48:c4:8e:86:2d:7d:bf:47:15:ea:2c:a0:0b:95:7c:ed:cb:
3c:6f:4c:aa:cf:d4:f4:22:7e:57:ce:69:af:59:d0:10:cf:b2:
64:45:9c:a1:60:fe:6c:97:21:7a:c4:99:ed:9d:1b:74:f5:a3:
8f:a1:c6:80:be:ed:ef:22:6c:50:2b:5a:28:be:56:d6:ec:cb:
4d:90:b4:5e:7c:d3:91:c9:44:02:a1:f5:a0:d3:84:71:d7:da:
f5:e7:9f:17:62:12:c3:93:3e:33:e5:cd:b8:5d:92:2c:a2:d4:
c4:e6:27:0d:e9:1c:50:91:73:5b:7c:d1:fb:6c:23:78:fa:01:
0c:20:ae:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqsMyzB6jYNJhIK2ayIlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTFjNDJkZmE2YWZiYzExZTc4ZWU5ZGUyZTc4NWY4YTIw
YjUwNDMwHhcNMjYwNDE2MTkwMDQzWhcNMjYwNDE3MTkwMDQzWjAzMTEwLwYDVQQD
Eyg2ODYwY2UzNGQ3MjhlM2VjOGJlMzM3YjY1OTE2MGU4MzcyOTE4YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiukjlq9IjBjzCcx6rgEXCdZ9cuYZ
fA9pRGw07OiYVes8N/JPzmi6CNYuUwCEVWi66myEYiSJTmNDzJtTQwWB8WXm0Lln
VFdxE+igZ00EVOjXwk3yVKfefv/koOjiNOR8mzkwTry+s6X6CGERF6VRIVI3OhB6
A5QT8fNSF+PlRt0J7CiOOiEaFDqEbF2YKv93n+ukvxxrP+FLblZb/ZC6JZYLVUT1
dTsJ8IdsZ4LpMRsdw1fLtu96sQV4lqlGS76enhUi0xvZYrjrMtzdes8UNaJJdmAP
f5klFef4ihxifSuOBR748c6FiIyXZqRoIdgk+OuYrb4sX26USCG8y30pdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhgzjTXKOPsi+M3tlkWDoNykYojMB8GA1UdIwQY
MBaAFMqRxC36avvBHnjuneLnhfiiC1BDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjIt
ZDU4NjUwNDFhMTRmLzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NTFlODQtMmYxYS00Yzc3LWIxZjItZDU4NjUwNDFhMTRm
LzEveXBIRUxmcHEtOEVlZU82ZDR1ZUYtS0lMVUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKiQxNON
2Auwo2TrMxCX/rmYbOxKehLGTEpmuZRrjFKqWmjGtJcajLYZFX/EEzpmeaqKFwsC
fs3FKV2IR9UJQcwn8H/Wy3t37axSM9lBPDedEa/NubqTpivBUW73s3UmD3jNPrKC
fskYpikdLQKUoSF939Jfj3kySg2shC1Hg0jEjoYtfb9HFeosoAuVfO3LPG9Mqs/U
9CJ+V85pr1nQEM+yZEWcoWD+bJchesSZ7Z0bdPWjj6HGgL7t7yJsUCtaKL5W1uzL
TZC0XnzTkclEAqH1oNOEcdfa9eefF2ISw5M+M+XNuF2SLKLUxOYnDekcUJFzW3zR
+2wjePoBDCCuNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:20 2026 by rpki-client