Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: eZIAqp7EJW2il2jWzfmzVipGivyYKPAbZrcOfToxAEo=
Subject key identifier: 70:7D:12:E5:30:21:EE:13:72:8F:5A:9B:2E:E8:E3:DC:C3:1F:52:C3
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019D9AE27B67E1E2725D678D42D337514AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:00:27 +0000
Manifest this update: Fri 17 Apr 2026 10:00:27 +0000
Manifest next update: Sat 18 Apr 2026 10:00:27 +0000
Files and hashes: 1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: bB/a8hlUMUGPIsFqJMiohf6rCnzDaT4O0ldo1xNztsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7b:67:e1:e2:72:5d:67:8d:42:d3:37:51:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Apr 17 10:00:27 2026 GMT
Not After : Apr 18 10:00:27 2026 GMT
Subject: CN=707d12e53021ee13728f5a9b2ee8e3dcc31f52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:2b:33:6e:71:79:02:ca:ef:c5:87:80:fe:
2c:f5:1f:e1:fb:c8:ee:b8:a9:4f:86:2d:6d:0d:df:
37:98:6d:04:2b:cb:ae:5f:19:f8:0a:bd:85:e9:e0:
e8:af:b9:bc:f3:05:fc:cb:7c:ef:09:e9:c2:72:01:
89:47:24:d2:f8:c5:2c:9a:b0:15:00:5e:64:5f:85:
db:0a:cb:a8:8a:32:fd:ec:68:b4:43:a3:ad:a7:e2:
63:fa:06:22:b2:30:4d:cd:9a:2c:9b:0e:6d:76:95:
f5:88:21:40:68:66:1f:bf:4f:7c:5f:f4:60:91:60:
f6:1c:96:0e:55:3c:2b:16:8e:47:57:2e:75:59:b1:
f9:8e:90:d0:43:4e:7c:14:07:dd:4c:34:8a:89:5d:
c4:3c:f8:c1:05:db:63:87:c8:d9:91:49:3c:e5:c9:
1d:57:3c:57:8f:38:74:1c:33:19:9f:56:93:7c:d8:
47:22:2c:e3:05:2e:ba:af:5c:43:93:31:5a:fe:2b:
b6:60:44:99:9e:f3:6a:3a:82:96:0b:75:03:a2:cd:
fa:f8:f6:ab:38:d7:f3:e9:d1:a0:e2:f6:b2:a9:0e:
0d:68:cf:35:65:59:af:89:10:71:69:bc:e4:0f:61:
4d:9b:96:e1:80:7b:44:39:0e:5d:f9:4d:0d:de:7b:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:12:E5:30:21:EE:13:72:8F:5A:9B:2E:E8:E3:DC:C3:1F:52:C3
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b3:f5:aa:2b:70:d2:31:51:7a:eb:8c:18:66:e2:65:3b:6a:
38:2f:79:54:b4:de:02:f1:2a:98:69:94:be:ca:19:66:66:aa:
c9:f6:9a:51:51:31:3c:7e:dd:7f:77:f4:ad:bd:8d:2d:55:35:
d1:39:6f:f5:73:8e:5f:d1:d1:d9:ec:0c:e5:d2:f4:04:cb:f2:
e7:8b:bf:0b:78:17:b5:fd:c1:42:08:25:72:4b:54:32:15:4b:
6e:2c:2c:df:00:8f:c2:17:94:1d:68:73:17:01:57:cd:a4:2d:
11:5c:c6:39:96:88:0e:3e:ea:86:c5:ee:96:8f:b7:34:63:04:
c3:82:d0:4f:1c:70:c2:ee:25:eb:7c:f9:75:b5:65:72:10:68:
58:fa:e9:4d:a5:35:85:44:17:7a:c6:36:5e:d6:80:35:d2:53:
76:5a:8b:01:ee:07:64:1a:02:06:8d:7f:5e:cc:7f:92:52:39:
50:0f:eb:a4:bc:8d:6e:75:93:49:3e:1a:24:66:db:b4:40:91:
78:d9:b1:ca:6f:fb:45:ab:7d:dc:67:8d:58:2c:23:68:1a:3a:
42:85:59:32:23:3f:36:7e:e9:33:ec:ef:28:77:75:31:67:ee:
fd:40:72:94:7c:1a:ff:57:56:1e:a3:56:b4:62:b8:cc:ae:7d:
4b:81:42:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4ntn4eJyXWeNQtM3UUqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5M2IwNjNmYzYzZThhMWFiYTFmNDMwYjJkMDc0ZGJlMjcw
YmUzOTUwHhcNMjYwNDE3MTAwMDI3WhcNMjYwNDE4MTAwMDI3WjAzMTEwLwYDVQQD
Eyg3MDdkMTJlNTMwMjFlZTEzNzI4ZjVhOWIyZWU4ZTNkY2MzMWY1MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VYrM25xeQLK78WHgP4s9R/h+8ju
uKlPhi1tDd83mG0EK8uuXxn4Cr2F6eDor7m88wX8y3zvCenCcgGJRyTS+MUsmrAV
AF5kX4XbCsuoijL97Gi0Q6Otp+Jj+gYisjBNzZosmw5tdpX1iCFAaGYfv098X/Rg
kWD2HJYOVTwrFo5HVy51WbH5jpDQQ058FAfdTDSKiV3EPPjBBdtjh8jZkUk85ckd
VzxXjzh0HDMZn1aTfNhHIizjBS66r1xDkzFa/iu2YESZnvNqOoKWC3UDos36+Par
ONfz6dGg4vayqQ4NaM81ZVmviRBxabzkD2FNm5bhgHtEOQ5d+U0N3nv4CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB9EuUwIe4Tco9amy7o49zDH1LDMB8GA1UdIwQY
MBaAFMk7Bj/GPooauh9DCy0HTb4nC+OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMt
OTQwYmM4MTkxNjU5LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjMyYjAtMDhmNi00MjE3LTk0YmMtOTQwYmM4MTkxNjU5
LzEveVRzR1A4WS1paHE2SDBNTExRZE52aWNMNDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbP1qitw
0jFReuuMGGbiZTtqOC95VLTeAvEqmGmUvsoZZmaqyfaaUVExPH7df3f0rb2NLVU1
0Tlv9XOOX9HR2ewM5dL0BMvy54u/C3gXtf3BQgglcktUMhVLbiws3wCPwheUHWhz
FwFXzaQtEVzGOZaIDj7qhsXulo+3NGMEw4LQTxxwwu4l63z5dbVlchBoWPrpTaU1
hUQXesY2XtaANdJTdlqLAe4HZBoCBo1/Xsx/klI5UA/rpLyNbnWTST4aJGbbtECR
eNmxym/7Rat93GeNWCwjaBo6QoVZMiM/Nn7pM+zvKHd1MWfu/UBylHwa/1dWHqNW
tGK4zK59S4FCTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:33 2026 by rpki-client