Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: gX7El55LWz/JkTofMUCgGecDI5cHKcqKo/YnSSOxAw0=
Subject key identifier: 0E:3C:2F:62:9B:78:65:61:1D:D6:41:94:A5:10:0F:81:39:44:08:4C
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019D996319C119CF4456F6BD3D992E7924F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 17ED
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: PFTrBYdU/AFBRQ+Q1ozPkqfIdkZ8f6yenxVfXJFpsVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:19:c1:19:cf:44:56:f6:bd:3d:99:2e:79:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=0e3c2f629b7865611dd64194a5100f813944084c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:10:c5:8a:96:a3:f2:a3:54:77:da:aa:0a:
22:bf:e6:90:6d:a9:a1:7e:b1:1d:92:0c:78:71:dd:
c3:1b:80:33:e4:13:43:45:78:85:1a:61:f1:d1:cb:
77:90:7f:ad:47:bc:2d:6c:af:b0:dc:55:28:31:e8:
76:dc:01:ba:1a:3d:f9:49:f3:27:e4:11:f8:44:fa:
b6:75:8c:ec:87:af:eb:35:9e:a5:65:25:71:34:fa:
63:ff:88:e3:cf:ca:9c:8e:da:4a:5c:8e:67:ad:89:
90:9f:fe:94:69:2e:d0:c0:97:7e:83:58:f4:40:d0:
93:0f:72:6f:32:63:c7:fb:0a:99:ea:d9:82:9b:3a:
c0:49:e0:91:8b:f7:b7:d2:0f:43:d2:96:78:6e:25:
9b:c1:aa:5a:29:bf:2f:a4:e0:da:87:32:5f:82:fc:
ac:29:42:56:9a:2b:03:44:eb:8b:93:d5:84:1a:b7:
f7:34:65:5f:7d:0e:6c:32:a6:f8:40:e3:d4:fb:f8:
59:cd:3b:90:b6:4c:ee:51:bb:60:9a:38:f6:22:39:
cc:a9:63:be:2b:b7:4b:e5:18:6c:c1:1b:82:4b:98:
b2:83:cf:df:a6:ff:5a:d0:b6:dc:ad:e0:e7:e0:f3:
ef:a7:60:a1:6b:78:c6:ee:ee:9d:57:e2:d3:6b:b0:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:2F:62:9B:78:65:61:1D:D6:41:94:A5:10:0F:81:39:44:08:4C
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5d:38:b3:0c:a1:f4:12:95:60:b6:b7:af:49:11:7d:f9:d8:
12:d5:bc:93:ca:48:82:9f:62:8e:51:36:e0:98:0f:da:81:4b:
59:d1:a2:4e:f4:78:43:98:c4:6f:e0:83:a7:3f:78:11:93:ab:
f9:79:65:1c:a0:f3:dc:b7:97:ca:73:8e:22:03:18:dc:e7:7a:
94:5f:a4:ba:74:c3:75:7c:dd:06:8b:8e:fb:ad:7b:30:6c:f9:
09:12:0e:d5:3d:2b:46:13:01:b5:12:bd:74:2d:7b:35:a5:1b:
0e:75:0b:a7:23:e2:c9:09:44:b5:17:dd:ce:8f:8c:18:7c:3f:
88:56:64:3c:4e:29:89:6e:75:11:bf:13:51:65:c8:6f:f5:2a:
2f:76:81:cb:96:4b:b0:51:9c:f0:81:f5:37:7f:fc:c6:7e:42:
fb:9b:ec:9f:62:56:5a:3d:5b:8b:0c:a0:44:9c:0d:14:29:a4:
82:ba:80:06:00:ae:ce:bd:8a:79:64:a8:85:58:13:46:22:cb:
30:98:d8:6e:8f:1d:62:ca:1f:74:ce:f0:a3:a7:e6:52:a8:a8:
bd:6d:2f:0d:20:52:b7:e2:94:d8:2e:1f:0a:a4:0e:9d:40:fc:
e0:87:36:02:f1:fb:c5:aa:77:c1:a6:d4:94:0a:f5:e1:8e:b9:
4a:68:65:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxnBGc9EVva9PZkueST5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjYwNDE3MDMwMTQxWhcNMjYwNDE4MDMwMTQxWjAzMTEwLwYDVQQD
EygwZTNjMmY2MjliNzg2NTYxMWRkNjQxOTRhNTEwMGY4MTM5NDQwODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweAQxYqWo/KjVHfaqgoiv+aQbamh
frEdkgx4cd3DG4Az5BNDRXiFGmHx0ct3kH+tR7wtbK+w3FUoMeh23AG6Gj35SfMn
5BH4RPq2dYzsh6/rNZ6lZSVxNPpj/4jjz8qcjtpKXI5nrYmQn/6UaS7QwJd+g1j0
QNCTD3JvMmPH+wqZ6tmCmzrASeCRi/e30g9D0pZ4biWbwapaKb8vpODahzJfgvys
KUJWmisDROuLk9WEGrf3NGVffQ5sMqb4QOPU+/hZzTuQtkzuUbtgmjj2IjnMqWO+
K7dL5RhswRuCS5iyg8/fpv9a0LbcreDn4PPvp2Cha3jG7u6dV+LTa7B/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA48L2KbeGVhHdZBlKUQD4E5RAhMMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh104swyh
9BKVYLa3r0kRffnYEtW8k8pIgp9ijlE24JgP2oFLWdGiTvR4Q5jEb+CDpz94EZOr
+XllHKDz3LeXynOOIgMY3Od6lF+kunTDdXzdBouO+617MGz5CRIO1T0rRhMBtRK9
dC17NaUbDnULpyPiyQlEtRfdzo+MGHw/iFZkPE4piW51Eb8TUWXIb/UqL3aBy5ZL
sFGc8IH1N3/8xn5C+5vsn2JWWj1biwygRJwNFCmkgrqABgCuzr2KeWSohVgTRiLL
MJjYbo8dYsofdM7wo6fmUqiovW0vDSBSt+KU2C4fCqQOnUD84Ic2AvH7xap3wabU
lAr14Y65Smhljg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:30 2026 by rpki-client