Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: DP6wzvGZKt+8S4/sBtc9pBH9DAa8+5G3U3da+SbOdkg=
Subject key identifier: C3:90:00:75:E9:2F:6C:E9:16:BB:A8:F4:FE:44:F0:7B:F5:81:89:14
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 019D9AE342466FC7B1E95C1B10875D7FA1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 04C6
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: s7yoUaWs_cdTcfxb23hHNbYxU34.roa (hash: HOPZhoocxgo394BFWR+fVdoYGl8HfSPhqPdNa7STymE=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: Sh5TejB4SwEyk4lwB31vSjS1xr4zTf9nJmuhekS7uo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:42:46:6f:c7:b1:e9:5c:1b:10:87:5d:7f:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=c3900075e92f6ce916bba8f4fe44f07bf5818914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:c3:5f:00:57:2d:ec:75:53:65:ab:75:4b:
31:a9:ab:56:77:06:1c:a0:1b:ad:d3:73:e5:8d:e8:
7c:e9:03:ae:d8:28:99:51:03:c4:8b:73:86:ef:be:
b0:55:f6:78:de:f8:0d:cd:eb:b4:76:39:b3:7a:0c:
c9:9d:d4:9d:22:34:d2:9a:4a:ce:be:18:78:fe:08:
b3:ee:d0:01:86:90:91:a8:1f:c5:43:30:aa:84:6e:
63:3c:10:aa:de:fd:76:3a:b2:6f:46:df:ea:59:bd:
8b:46:13:7f:48:fa:1d:ce:4b:ee:a0:b9:14:34:48:
d2:90:dc:b7:78:44:bf:db:0a:ce:6b:61:52:36:53:
2a:3c:39:1c:29:a4:8a:34:0d:6e:0f:21:7a:f9:07:
b9:15:05:51:2d:29:70:d2:56:05:4e:59:f1:48:e0:
8d:05:58:11:02:d7:52:88:27:9e:b9:78:c7:0f:4a:
db:a9:6c:46:d5:08:c4:f4:1e:18:fa:84:62:4e:75:
f1:b8:64:40:c0:fd:73:d5:38:07:fe:be:79:b7:75:
05:43:fb:0f:b4:22:2a:0d:b7:bb:11:e8:ef:84:fa:
ad:b3:fa:c5:d6:c2:f5:ce:c8:33:e8:c6:cc:92:0a:
ef:e2:a6:35:0b:d0:37:c9:bf:b4:6b:49:9b:fe:49:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:00:75:E9:2F:6C:E9:16:BB:A8:F4:FE:44:F0:7B:F5:81:89:14
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:86:50:2f:d0:c0:38:45:a1:c5:1a:43:e9:9a:ac:c9:c7:bf:
8c:9f:51:dd:fa:62:b6:89:a0:c7:af:a6:88:b9:4a:85:61:b8:
4c:57:09:98:f8:b1:06:7e:1f:bc:db:05:f1:95:55:e1:1d:e6:
32:95:3b:93:47:df:a9:d0:98:70:bf:53:d0:5a:0d:d9:49:e0:
4e:69:6f:de:6d:c6:8f:7d:aa:43:c4:68:09:f2:bf:21:a8:aa:
44:3a:5e:20:9c:dc:68:de:fb:dc:b2:64:09:b7:48:f4:ad:44:
2c:e2:5c:df:3d:5f:b1:1b:74:e9:76:fe:69:d5:8b:4b:33:9d:
90:80:d6:ef:a0:a8:bd:d5:7d:97:c9:a9:c0:d6:24:2f:68:66:
87:b6:8f:0e:60:5a:62:c7:ca:5c:2b:2d:0e:8c:e6:8c:37:40:
00:ab:a6:22:b5:2c:d4:cf:30:72:f9:66:55:ba:e3:41:61:47:
8a:8a:cc:ea:17:d5:81:82:ad:38:41:72:a0:0c:82:25:3a:a4:
4c:a4:58:5b:a9:7e:39:6e:2e:64:e1:9f:8b:ee:d3:1e:ec:25:
90:4d:95:ea:b2:0e:85:07:3d:62:40:d3:df:4e:98:d6:95:4f:
e8:1d:fc:fa:cb:57:ad:aa:5e:cc:7a:e0:16:f6:20:11:17:06:
4b:34:c4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a40JGb8ex6VwbEIddf6HVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzY4OTJhNjhjZTUwYTE4NmMwZDYwY2Q1YzllNGM5ODhj
ZTE2YzUwHhcNMjYwNDE3MTAwMTE3WhcNMjYwNDE4MTAwMTE3WjAzMTEwLwYDVQQD
EyhjMzkwMDA3NWU5MmY2Y2U5MTZiYmE4ZjRmZTQ0ZjA3YmY1ODE4OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGHDXwBXLex1U2WrdUsxqatWdwYc
oBut03Pljeh86QOu2CiZUQPEi3OG776wVfZ43vgNzeu0djmzegzJndSdIjTSmkrO
vhh4/giz7tABhpCRqB/FQzCqhG5jPBCq3v12OrJvRt/qWb2LRhN/SPodzkvuoLkU
NEjSkNy3eES/2wrOa2FSNlMqPDkcKaSKNA1uDyF6+Qe5FQVRLSlw0lYFTlnxSOCN
BVgRAtdSiCeeuXjHD0rbqWxG1QjE9B4Y+oRiTnXxuGRAwP1z1TgH/r55t3UFQ/sP
tCIqDbe7EejvhPqts/rF1sL1zsgz6MbMkgrv4qY1C9A3yb+0a0mb/kkdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOQAHXpL2zpFruo9P5E8Hv1gYkUMB8GA1UdIwQY
MBaAFMjGiSpozlChhsDWDNXJ5MmIzhbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmIt
ZDM0ZDEyMDI4N2QzLzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZjVmZmMtMjJmZi00NmExLThkMmItZDM0ZDEyMDI4N2Qz
LzEveU1hSkttak9VS0dHd05ZTTFjbmt5WWpPRnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIZQL9DA
OEWhxRpD6Zqsyce/jJ9R3fpitomgx6+miLlKhWG4TFcJmPixBn4fvNsF8ZVV4R3m
MpU7k0ffqdCYcL9T0FoN2UngTmlv3m3Gj32qQ8RoCfK/IaiqRDpeIJzcaN773LJk
CbdI9K1ELOJc3z1fsRt06Xb+adWLSzOdkIDW76CovdV9l8mpwNYkL2hmh7aPDmBa
YsfKXCstDozmjDdAAKumIrUs1M8wcvlmVbrjQWFHiorM6hfVgYKtOEFyoAyCJTqk
TKRYW6l+OW4uZOGfi+7THuwlkE2V6rIOhQc9YkDT306Y1pVP6B38+stXrapezHrg
FvYgERcGSzTEtg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:51 2026 by rpki-client