Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: W5JSwK0sgkOHOD3XtcAWwdzuK3AvmVrHJXq+UkKydQA=
Subject key identifier: 65:3C:FB:79:F4:D9:C9:BC:EE:68:15:ED:EF:43:EE:58:66:E3:56:4D
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 019D9A3E1C32ED62EDA9F9947D0838BFDE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0EBF
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: 5zYN2Qr3/N4Tmi4yG4AIopMNZuLeifl3ZG2HZVKz9IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1c:32:ed:62:ed:a9:f9:94:7d:08:38:bf:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=653cfb79f4d9c9bcee6815edef43ee5866e3564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:b6:a3:4a:ae:1f:07:6d:87:63:d5:f2:68:
99:cb:c6:c9:ba:c6:9c:50:72:ed:cb:c4:6c:b7:51:
81:ed:42:99:2a:0b:a5:a9:3e:29:24:4c:47:68:e1:
b4:c8:aa:50:98:e7:1d:c6:70:d9:81:6d:74:23:27:
47:79:8e:e6:f5:42:ff:d8:d9:fe:57:1c:8f:23:8f:
58:ed:e4:cc:37:b7:59:0e:f3:f6:52:4b:3c:1b:50:
7c:16:6c:8c:c2:b1:b0:52:b5:4c:76:a6:2d:75:22:
67:46:28:e9:a4:2d:71:0e:8b:fc:bb:df:36:7f:a6:
ea:cf:f8:22:51:80:82:01:74:a2:64:4a:3f:2d:f0:
e9:a8:81:60:1b:eb:3e:0a:cc:c1:dd:65:25:c8:5f:
9d:01:7b:aa:73:2d:aa:2e:e3:d4:0b:29:2e:29:f0:
bd:20:d0:84:47:be:fa:27:99:d5:b9:57:e4:14:e0:
23:2b:3a:35:14:28:54:c4:db:45:08:59:c4:e8:f5:
a5:a0:95:1e:12:8f:fb:c5:36:41:e5:59:89:8c:4a:
49:74:84:71:0b:65:b0:f5:23:26:b9:30:81:2e:ff:
6d:e0:7e:aa:ef:03:8d:60:c9:fa:17:bf:d7:cf:96:
ef:1c:fc:c2:a1:f1:02:70:22:f3:63:c8:87:1f:4d:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3C:FB:79:F4:D9:C9:BC:EE:68:15:ED:EF:43:EE:58:66:E3:56:4D
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:f1:77:bf:9b:a4:ea:83:84:0c:d8:82:e2:42:de:97:bf:
61:77:fa:ac:c9:fa:05:a1:c3:82:9b:cf:db:dd:de:98:f7:9e:
9a:f0:28:0c:e5:c0:03:31:f8:0d:8b:07:88:ab:4e:4b:b9:7a:
e4:73:80:c5:60:b0:99:79:68:8d:e5:86:ba:d1:19:8d:20:79:
a1:09:81:53:b2:c8:61:8e:a1:15:43:f1:7d:77:6c:ec:ea:f8:
b0:73:db:3d:66:c4:be:45:30:f1:bb:91:79:4d:27:85:12:b0:
94:9b:af:00:56:ff:18:49:13:42:85:ea:03:03:fc:fc:72:12:
67:26:e0:fb:35:07:48:6a:d4:f8:45:c1:25:44:5c:ed:70:13:
49:4f:ea:7c:ba:8b:14:2c:aa:a3:46:79:48:c5:f3:31:8a:89:
89:72:af:2a:81:ea:ce:3f:6a:3f:07:8c:69:74:70:4f:75:9e:
44:87:1a:f4:a2:b9:24:00:40:15:81:62:5a:1f:09:c1:2d:58:
fb:ae:cf:cb:cb:97:1d:cb:46:5f:e3:4b:99:88:6a:50:31:9e:
5c:25:61:99:50:ec:34:5c:46:9f:1a:2c:38:a1:7d:38:56:0a:
dc:3f:ea:12:ce:1a:a1:7a:2a:3f:5f:9e:b8:df:ba:ee:b2:7f:
fb:f1:14:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhwy7WLtqfmUfQg4v95HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmViNTM3ZTM2MzVlYzgwMDE1MTBjMzE5MmI3N2ViMTc5
N2MwYWEwHhcNMjYwNDE3MDcwMDU0WhcNMjYwNDE4MDcwMDU0WjAzMTEwLwYDVQQD
Eyg2NTNjZmI3OWY0ZDljOWJjZWU2ODE1ZWRlZjQzZWU1ODY2ZTM1NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy562o0quHwdth2PV8miZy8bJusac
UHLty8Rst1GB7UKZKgulqT4pJExHaOG0yKpQmOcdxnDZgW10IydHeY7m9UL/2Nn+
VxyPI49Y7eTMN7dZDvP2Uks8G1B8FmyMwrGwUrVMdqYtdSJnRijppC1xDov8u982
f6bqz/giUYCCAXSiZEo/LfDpqIFgG+s+CszB3WUlyF+dAXuqcy2qLuPUCykuKfC9
INCER776J5nVuVfkFOAjKzo1FChUxNtFCFnE6PWloJUeEo/7xTZB5VmJjEpJdIRx
C2Ww9SMmuTCBLv9t4H6q7wONYMn6F7/Xz5bvHPzCofECcCLzY8iHH02HKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU8+3n02cm87mgV7e9D7lhm41ZNMB8GA1UdIwQY
MBaAFGH+tTfjY17IABUQwxkrd+sXl8CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQt
Nzg1Njc4N2EyZTYzLzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xODIwNDQtOWNiZi00NTc5LWIzYjQtNzg1Njc4N2EyZTYz
LzEvWWY2MU4tTmpYc2dBRlJEREdTdDM2eGVYd0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJPxd7+b
pOqDhAzYguJC3pe/YXf6rMn6BaHDgpvP293emPeemvAoDOXAAzH4DYsHiKtOS7l6
5HOAxWCwmXlojeWGutEZjSB5oQmBU7LIYY6hFUPxfXds7Or4sHPbPWbEvkUw8buR
eU0nhRKwlJuvAFb/GEkTQoXqAwP8/HISZybg+zUHSGrU+EXBJURc7XATSU/qfLqL
FCyqo0Z5SMXzMYqJiXKvKoHqzj9qPweMaXRwT3WeRIca9KK5JABAFYFiWh8JwS1Y
+67Py8uXHctGX+NLmYhqUDGeXCVhmVDsNFxGnxosOKF9OFYK3D/qEs4aoXoqP1+e
uN+67rJ/+/EUcw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:23 2026 by rpki-client