Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier: TsQ5kHEcmKWXxNedqpOyqGeFSVzYb5s/3mTQJINRWzM=
Subject key identifier: 83:28:BC:04:1E:EC:C0:B4:63:88:C8:4F:FB:92:8E:99:D4:4D:1D:EE
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial: 019D98BDEFA4CC25A9EC3C8D33206DB217DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number: 17B8
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: xjvuc/GC0sUSRUSL5MuV7H9qaqa+CU/Xy+mFaA/QBT8=)
2: q972d8O9k3VoveNJLj2g4alNC1w.roa (hash: 1+lleoHY4U9gA6ACD7pWpnuGVnGOKN+s9CCNPvKBX+o=)
3: z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (hash: lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ef:a4:cc:25:a9:ec:3c:8d:33:20:6d:b2:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=8328bc041eecc0b46388c84ffb928e99d44d1dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:a7:37:6d:da:47:88:50:02:42:66:4b:fb:
70:ca:00:2d:18:bb:f3:14:e9:c4:b9:5f:2d:e0:cc:
4d:7b:cc:df:ba:d6:10:ba:24:70:6c:c1:bb:ed:00:
2f:ce:99:1b:0f:f6:4d:7a:7e:01:d5:23:a7:42:d8:
4b:cd:3e:be:3e:ca:0e:ee:7b:50:a2:41:48:94:61:
1d:18:8c:96:1d:0e:41:ce:4b:df:48:b2:0b:fe:5f:
d5:52:f7:b9:28:26:e1:7a:d8:44:5d:28:34:19:f8:
e1:03:b5:67:fa:07:ae:ec:bf:a2:a2:10:35:ef:56:
5c:72:7b:ff:a1:46:38:18:53:80:ef:d9:36:96:9b:
95:b8:30:05:4c:09:0d:6b:9d:c3:19:a4:26:a2:25:
e5:c4:14:db:ef:17:bb:03:2c:38:9f:14:50:55:8a:
1a:bf:ad:89:11:d0:3a:ec:e3:e5:c4:3d:c6:ea:15:
f2:ac:2e:e2:2d:b5:fe:0f:53:16:18:0e:08:a5:e7:
7f:fc:51:23:c8:ba:b8:9b:43:78:6a:8d:da:11:6b:
c3:17:a7:05:16:93:92:70:60:e8:c8:7f:3e:6d:5e:
12:13:f2:ba:02:27:f8:d2:01:ee:70:f1:e3:bf:1e:
97:f1:4a:4a:66:2c:96:f7:06:9b:f8:55:77:d9:96:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:BC:04:1E:EC:C0:B4:63:88:C8:4F:FB:92:8E:99:D4:4D:1D:EE
X509v3 Authority Key Identifier:
keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9b:d8:97:6d:11:54:7e:35:3c:7c:99:d2:82:54:f9:8f:de:
49:d4:30:81:d6:a1:49:b6:95:3e:2e:ef:39:f0:b8:e0:55:bd:
d7:8e:36:e2:9c:f2:cb:f1:e3:4b:40:29:f7:ce:55:9c:1e:16:
64:24:09:16:ed:2c:83:9e:8c:81:10:42:68:14:84:6b:76:1e:
16:62:57:b9:8a:0f:29:07:6b:fa:25:6f:b5:1c:dc:3b:b6:31:
df:0e:de:e4:85:a9:5d:8d:82:78:b9:d8:97:67:de:6b:b8:2c:
7a:db:75:73:64:3d:33:b6:7b:a8:53:c4:63:3e:2c:c3:c8:c3:
86:5b:02:da:c1:8c:93:37:ce:9e:b3:fc:ae:f4:58:e8:c5:7d:
f7:6a:b2:f4:78:48:de:f8:3f:6e:fc:96:d3:16:d8:e7:6a:30:
13:d8:ea:70:a0:d2:f4:63:3d:16:00:92:29:a6:f3:f7:73:49:
26:76:15:06:40:02:bd:aa:f5:3a:5b:de:c5:01:17:81:46:af:
0b:5a:bd:1a:32:75:d7:29:85:2e:c7:4c:fa:1a:7e:98:da:17:
41:8e:9e:78:98:7c:cd:55:6b:2d:9d:90:f1:f5:81:6f:44:99:
48:bd:dd:4d:14:9e:29:78:e4:84:6c:f3:d5:47:10:a9:27:4e:
6a:e8:2b:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yve+kzCWp7DyNMyBtshfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3
ODlhZmMwHhcNMjYwNDE3MDAwMTE3WhcNMjYwNDE4MDAwMTE3WjAzMTEwLwYDVQQD
Eyg4MzI4YmMwNDFlZWNjMGI0NjM4OGM4NGZmYjkyOGU5OWQ0NGQxZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT+nN23aR4hQAkJmS/twygAtGLvz
FOnEuV8t4MxNe8zfutYQuiRwbMG77QAvzpkbD/ZNen4B1SOnQthLzT6+PsoO7ntQ
okFIlGEdGIyWHQ5BzkvfSLIL/l/VUve5KCbhethEXSg0GfjhA7Vn+geu7L+iohA1
71Zccnv/oUY4GFOA79k2lpuVuDAFTAkNa53DGaQmoiXlxBTb7xe7Ayw4nxRQVYoa
v62JEdA67OPlxD3G6hXyrC7iLbX+D1MWGA4Iped//FEjyLq4m0N4ao3aEWvDF6cF
FpOScGDoyH8+bV4SE/K6Aif40gHucPHjvx6X8UpKZiyW9wab+FV32ZbNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMovAQe7MC0Y4jIT/uSjpnUTR3uMB8GA1UdIwQY
MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt
MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1
LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5vYl20R
VH41PHyZ0oJU+Y/eSdQwgdahSbaVPi7vOfC44FW914424pzyy/HjS0Ap985VnB4W
ZCQJFu0sg56MgRBCaBSEa3YeFmJXuYoPKQdr+iVvtRzcO7Yx3w7e5IWpXY2CeLnY
l2fea7gsett1c2Q9M7Z7qFPEYz4sw8jDhlsC2sGMkzfOnrP8rvRY6MV992qy9HhI
3vg/bvyW0xbY52owE9jqcKDS9GM9FgCSKabz93NJJnYVBkACvar1OlvexQEXgUav
C1q9GjJ11ymFLsdM+hp+mNoXQY6eeJh8zVVrLZ2Q8fWBb0SZSL3dTRSeKXjkhGzz
1UcQqSdOaugrbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:59 2026 by rpki-client