Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier: AAbHD4+bVkHo5xiscC9pGU+OkHRzXxcKOqf8ty+SALY=
Subject key identifier: 04:01:8B:BE:1D:5F:21:B6:44:FB:22:BE:04:A8:37:BB:57:A5:6F:1A
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 019D98867081FCD251098E3E2C01970B37C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number: 1556
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: YjABWXq1K-e_wEund0ue5nxCxOU.roa (hash: PI1L0CXgsAmafCm4unnTqfAaCBg3v/MEpLRsMdPwg9s=)
2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: XsickNgNjOJNcBprAjRAoOUggWWFCp1vfD5lP4rOMRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:70:81:fc:d2:51:09:8e:3e:2c:01:97:0b:37:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=04018bbe1d5f21b644fb22be04a837bb57a56f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:94:f6:44:2c:2b:97:be:ba:8a:45:ff:43:
75:2d:68:d8:7e:44:6c:d3:94:89:7b:24:74:b9:94:
3c:84:80:e6:ba:58:16:a9:18:6f:71:a0:f4:bd:d8:
5c:8f:0f:a2:30:40:c7:26:9c:df:fb:a6:d1:70:b7:
19:15:93:32:77:a4:ac:e8:e9:a8:8e:e7:77:e9:23:
91:89:84:2c:aa:7a:26:b3:e3:2c:f0:34:4a:7e:52:
5a:1c:ca:a4:7b:85:2f:db:5b:d9:d1:ee:f3:3b:bc:
2b:df:71:d4:51:fd:1d:db:c6:d9:a1:00:53:b4:f7:
f4:92:0d:da:c0:1d:dd:12:d1:59:d6:dd:ae:a1:ab:
5e:90:48:81:47:1c:6b:fd:02:f6:1a:00:d4:7d:15:
78:f9:e4:97:dc:79:ee:db:13:23:57:c1:ff:6c:1f:
d9:a4:f6:c2:08:28:33:19:a1:f5:bf:a7:0f:d5:23:
6b:ef:8f:31:be:bf:99:54:42:8b:7a:36:79:1b:c1:
05:c8:4d:b8:b2:f5:94:d7:74:a9:8e:42:0c:f5:6c:
6c:0c:62:88:2b:6c:71:fe:88:8c:61:09:4a:6a:89:
cb:b3:dd:33:15:86:00:24:9e:41:10:59:dd:56:13:
ae:fa:b5:07:c2:41:cd:5a:0e:06:12:a0:53:40:ae:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:8B:BE:1D:5F:21:B6:44:FB:22:BE:04:A8:37:BB:57:A5:6F:1A
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:bf:c5:07:57:fe:2f:27:75:89:50:55:1d:fc:4b:ba:54:
27:1f:77:7a:52:0e:f0:96:c5:55:0f:34:56:4c:65:38:14:9c:
41:53:74:e4:88:8c:8c:76:70:11:1d:9b:db:f0:22:4d:fa:21:
cf:f8:c6:f4:58:1f:bb:ef:d0:43:ba:af:37:8a:dd:49:a4:ad:
f3:ed:2f:a1:de:3f:68:ae:77:39:c5:7b:6e:d8:c2:60:13:bb:
fe:8e:2d:52:73:0b:7e:3e:22:95:9d:7b:a0:c2:d0:7c:33:75:
ff:0f:12:b9:ee:6b:00:de:55:d9:d9:18:e3:26:1f:20:86:b5:
f5:2c:5a:15:23:14:44:88:79:10:ff:b0:10:12:94:f2:9d:22:
54:6f:70:59:6a:d9:d5:88:99:c7:1f:71:6a:4b:2c:30:55:e9:
ce:14:7d:95:6d:48:18:a5:f5:ba:f1:0c:98:cb:22:ea:1d:f9:
6d:5b:63:07:58:cb:9b:4e:f5:0b:28:cc:8f:37:c8:1d:eb:f0:
58:f2:4c:96:08:45:ae:6c:2c:7d:c1:a3:94:61:20:d5:d6:9d:
7c:4f:e0:1e:cc:6e:ef:98:aa:c9:a2:b5:44:b2:73:d0:3f:29:
18:f0:8e:8e:4a:1d:8b:0f:95:d0:b0:f0:42:0a:14:01:5b:03:
b0:20:32:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhnCB/NJRCY4+LAGXCzfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWIzYzViNjlhZjVjMjE4ZGQ0YWY3NjRjOTQzNjZjNjQ2
ZjgzYTUwHhcNMjYwNDE2MjMwMDQwWhcNMjYwNDE3MjMwMDQwWjAzMTEwLwYDVQQD
EygwNDAxOGJiZTFkNWYyMWI2NDRmYjIyYmUwNGE4MzdiYjU3YTU2ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySGU9kQsK5e+uopF/0N1LWjYfkRs
05SJeyR0uZQ8hIDmulgWqRhvcaD0vdhcjw+iMEDHJpzf+6bRcLcZFZMyd6Ss6Omo
jud36SORiYQsqnoms+Ms8DRKflJaHMqke4Uv21vZ0e7zO7wr33HUUf0d28bZoQBT
tPf0kg3awB3dEtFZ1t2uoatekEiBRxxr/QL2GgDUfRV4+eSX3Hnu2xMjV8H/bB/Z
pPbCCCgzGaH1v6cP1SNr748xvr+ZVEKLejZ5G8EFyE24svWU13SpjkIM9WxsDGKI
K2xx/oiMYQlKaonLs90zFYYAJJ5BEFndVhOu+rUHwkHNWg4GEqBTQK5kSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQBi74dXyG2RPsivgSoN7tXpW8aMB8GA1UdIwQY
MBaAFMirPFtpr1whjdSvdkyUNmxkb4OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAt
MTE4NDU0Y2NkNDEyLzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAtMTE4NDU0Y2NkNDEy
LzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUi/xQdX
/i8ndYlQVR38S7pUJx93elIO8JbFVQ80VkxlOBScQVN05IiMjHZwER2b2/AiTfoh
z/jG9Fgfu+/QQ7qvN4rdSaSt8+0vod4/aK53OcV7btjCYBO7/o4tUnMLfj4ilZ17
oMLQfDN1/w8Sue5rAN5V2dkY4yYfIIa19SxaFSMURIh5EP+wEBKU8p0iVG9wWWrZ
1YiZxx9xakssMFXpzhR9lW1IGKX1uvEMmMsi6h35bVtjB1jLm071CyjMjzfIHevw
WPJMlghFrmwsfcGjlGEg1dadfE/gHsxu75iqyaK1RLJz0D8pGPCOjkodiw+V0LDw
QgoUAVsDsCAyxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:22 2026 by rpki-client