Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier: iKaZhFkOpJdXfl8TjkZod6H5JjvlbU4JBAnnJ5VEDXU=
Subject key identifier: 12:92:19:2A:6B:4C:A0:CE:B5:72:98:79:AB:27:6C:1A:C6:D7:B7:74
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer: /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial: 019D9A3DE528FC59B1475CB342F70ECBBDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number: 0FE8
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: U9pPpVserKeOyR7cf6mDMG3akbI.roa (hash: hACJJYL/ibjkbFYfmPGmA0g3KxmvcYZIZ/l3HP0kGcc=)
2: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: qohVlMrUB21NMjot1RkYM8fu9kjBJMRiTZJteReB1D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e5:28:fc:59:b1:47:5c:b3:42:f7:0e:cb:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=1292192a6b4ca0ceb5729879ab276c1ac6d7b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:30:88:4c:90:2b:b5:d0:ba:0e:50:f4:31:
af:84:bf:95:7e:d6:1e:d4:90:64:e0:b0:1b:f9:48:
2d:98:e0:ed:14:1e:97:84:e4:05:90:41:73:b5:ec:
a7:b4:43:7c:9d:79:ab:ab:08:bf:72:d4:95:cd:8a:
a1:9b:b7:b3:2b:b7:f7:a6:51:78:03:2e:6e:e7:92:
ad:b8:f3:63:51:9c:b7:f5:d1:f0:b9:7e:f6:73:b1:
23:0d:e8:53:6d:74:dd:7f:88:f0:81:02:c9:12:80:
f7:b8:d0:ea:8a:ea:e8:98:09:38:32:03:06:04:02:
79:de:92:15:74:fe:d1:fe:57:d3:2f:5c:2e:41:4b:
2f:f6:86:67:94:a9:04:af:84:ac:7e:9b:6e:dd:28:
8a:50:fb:00:66:62:e3:ea:12:6a:6f:88:41:32:64:
2a:33:0a:0d:a7:3c:74:7b:05:8e:b3:96:54:3b:1e:
6e:a5:4e:dc:6c:44:97:ac:38:72:0e:b5:2c:86:ec:
97:c1:83:73:f5:40:19:f7:46:d8:91:af:86:54:10:
a0:d9:36:f3:18:71:a6:ef:f3:4b:20:30:e9:aa:31:
e8:71:18:df:08:d3:19:b5:91:24:82:d2:15:89:f7:
1e:67:a9:6b:0c:36:ed:ae:89:ce:4c:fc:6a:4e:44:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:19:2A:6B:4C:A0:CE:B5:72:98:79:AB:27:6C:1A:C6:D7:B7:74
X509v3 Authority Key Identifier:
keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9c:80:56:d5:6f:40:25:97:84:a3:31:c0:f4:46:c7:3c:ff:
58:3c:1b:6a:d1:cd:7c:6a:05:08:e5:f7:65:b4:e0:65:fc:fa:
8d:ab:c6:02:58:51:40:51:fc:da:66:db:61:a5:35:89:05:df:
7a:63:93:57:fb:06:3d:b9:7c:1d:cd:5e:a2:2a:58:fc:7e:50:
c9:0c:27:cb:f0:e8:fc:30:dc:8d:8e:90:79:cd:11:06:d2:61:
0c:dc:e2:fd:bf:30:db:cc:9e:08:e1:8c:c5:db:3b:bb:6f:a0:
bd:c8:77:00:b1:e8:f4:1a:21:d5:eb:0c:0c:55:14:e2:b6:22:
51:f2:86:ed:99:0d:50:2c:83:e5:2e:60:2a:47:24:3c:85:b5:
14:82:58:00:d9:99:05:44:0b:1a:1c:d7:30:37:79:4e:76:d0:
3c:68:c7:df:93:ef:66:a4:2d:f9:74:d7:f7:9c:71:6c:3b:97:
a6:70:06:98:b2:8e:7e:16:64:b6:45:dc:76:d0:15:62:cf:6e:
7a:b4:d8:78:fd:49:b8:bc:9a:0f:41:e0:e2:01:14:4a:11:75:
07:65:2e:7b:0a:88:7e:39:2c:11:96:bc:44:9f:b3:81:68:e7:
00:a0:dd:cd:c2:09:d5:d6:68:b0:45:d3:6c:56:7b:4e:8c:57:
4f:39:32:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeUo/FmxR1yzQvcOy73TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmMxYzUzZjZjMWQ5OTYyMzZjYmIzN2JhMzI0NzY3MDM5
OWE2MmQwHhcNMjYwNDE3MDcwMDQwWhcNMjYwNDE4MDcwMDQwWjAzMTEwLwYDVQQD
EygxMjkyMTkyYTZiNGNhMGNlYjU3Mjk4NzlhYjI3NmMxYWM2ZDdiNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ8wiEyQK7XQug5Q9DGvhL+VftYe
1JBk4LAb+UgtmODtFB6XhOQFkEFzteyntEN8nXmrqwi/ctSVzYqhm7ezK7f3plF4
Ay5u55KtuPNjUZy39dHwuX72c7EjDehTbXTdf4jwgQLJEoD3uNDqiuromAk4MgMG
BAJ53pIVdP7R/lfTL1wuQUsv9oZnlKkEr4Ssfptu3SiKUPsAZmLj6hJqb4hBMmQq
MwoNpzx0ewWOs5ZUOx5upU7cbESXrDhyDrUshuyXwYNz9UAZ90bYka+GVBCg2Tbz
GHGm7/NLIDDpqjHocRjfCNMZtZEkgtIVifceZ6lrDDbtronOTPxqTkThYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKSGSprTKDOtXKYeasnbBrG17d0MB8GA1UdIwQY
MBaAFGEsHFP2wdmWI2y7N7oyR2cDmaYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mMDA3OGUtZDBjNy00MjhlLTk1MjQt
ZWNhZjU3OGEzNGUzLzEvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mMDA3OGUtZDBjNy00MjhlLTk1MjQtZWNhZjU3OGEzNGUz
LzEvWVN3Y1VfYkIyWllqYkxzM3VqSkhad09acGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJyAVtVv
QCWXhKMxwPRGxzz/WDwbatHNfGoFCOX3ZbTgZfz6javGAlhRQFH82mbbYaU1iQXf
emOTV/sGPbl8Hc1eoipY/H5QyQwny/Do/DDcjY6Qec0RBtJhDNzi/b8w28yeCOGM
xds7u2+gvch3ALHo9Boh1esMDFUU4rYiUfKG7ZkNUCyD5S5gKkckPIW1FIJYANmZ
BUQLGhzXMDd5TnbQPGjH35PvZqQt+XTX95xxbDuXpnAGmLKOfhZktkXcdtAVYs9u
erTYeP1JuLyaD0Hg4gEUShF1B2UuewqIfjksEZa8RJ+zgWjnAKDdzcIJ1dZosEXT
bFZ7ToxXTzkyBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:06 2026 by rpki-client