Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json)
Hash identifier: cT3Y8mCZqjvlDG8KA02wzIeZKfKyPw0A7qVUpx963uU=
Subject key identifier: 24:8C:79:9F:A3:A7:B8:D8:79:04:76:1E:E1:7B:4D:01:DD:9D:3C:9D
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 019DA30A22E0F394F7E379BAB9B666473ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
Manifest number: 18AF
Signing time: Sun 19 Apr 2026 00:00:43 +0000
Manifest this update: Sun 19 Apr 2026 00:00:43 +0000
Manifest next update: Mon 20 Apr 2026 00:00:43 +0000
Files and hashes: 1: Bv3dTcxKi6DR1Gu5OdJV37yth8s.roa (hash: DKEmCC9kN5nknxLmAp5xgLUSVdPR+QR7ELMugI9SFVs=)
2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: Clr33aSjZ7odtlDPGksBnB0RFxhOkkwGIb6SUMkvwqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:22:e0:f3:94:f7:e3:79:ba:b9:b6:66:47:3e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Apr 19 00:00:43 2026 GMT
Not After : Apr 20 00:00:43 2026 GMT
Subject: CN=248c799fa3a7b8d87904761ee17b4d01dd9d3c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:33:c1:98:fd:b3:54:04:97:86:00:4c:0e:
d3:bb:fd:af:f9:7f:fe:64:5d:f6:6d:6c:7a:e9:1c:
49:3d:cc:c1:e6:f0:66:aa:c2:46:02:2d:4c:e5:6b:
d9:cc:c0:d0:af:92:31:98:f6:99:eb:fa:e8:f3:9a:
a4:17:0d:34:fc:9b:0f:82:50:12:25:d1:94:a9:19:
f6:5b:a2:26:09:4c:61:c6:a2:d9:89:e1:67:dd:c8:
b0:42:99:45:a5:e7:b8:78:9b:31:d0:48:1d:08:0a:
97:22:ec:38:23:cc:7f:3d:cf:05:ae:7f:e5:d5:3c:
20:80:a1:df:11:38:e4:41:b9:4d:08:37:af:e2:9e:
dd:78:ed:c8:23:76:d6:d9:71:c8:10:bf:17:2e:ac:
b3:99:b3:25:2e:6f:ef:81:ec:03:81:31:54:8d:86:
c2:49:41:a4:da:ce:f3:af:2a:a5:f9:0d:dd:c3:fe:
ba:61:2c:51:c8:73:bd:2c:da:85:e9:da:24:bc:d3:
60:cc:b1:08:04:9c:5d:9d:c9:bb:f5:89:80:3a:91:
4d:5e:72:3b:bc:b1:f4:e8:b3:d6:72:83:f7:e4:b4:
ef:b9:cc:20:26:ae:2a:18:54:1a:54:55:a7:43:52:
c6:ae:b3:b7:74:1b:39:c6:fc:57:6a:86:79:3a:99:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:79:9F:A3:A7:B8:D8:79:04:76:1E:E1:7B:4D:01:DD:9D:3C:9D
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:03:b4:5f:9b:4d:80:31:69:41:ba:5a:a4:1f:2e:25:d3:
9a:15:3a:49:49:91:df:a2:16:02:5a:90:5f:11:3e:29:3a:89:
c1:fe:c6:38:73:8a:8a:60:5c:d9:71:bb:bd:19:03:99:4a:55:
38:96:2a:96:20:b0:00:50:49:43:72:21:b6:0c:ab:ae:8b:f3:
bf:9c:44:55:9a:34:5a:80:d6:18:b5:c2:b7:00:7b:77:ad:2f:
89:cc:73:2a:aa:24:e9:dc:65:bc:cd:b8:67:8e:d2:5b:57:f8:
4c:5c:bb:8d:10:2d:65:58:29:7a:db:b2:b8:6f:78:b8:cc:62:
4c:5e:3c:66:78:5c:b4:3f:ac:a6:0a:55:e1:a0:5f:50:e6:74:
70:87:e0:28:ec:3d:2d:a6:59:8c:4b:04:a1:43:30:2c:82:d1:
63:c4:b2:b5:cf:18:ea:a5:41:2c:fe:d3:aa:a4:e6:17:72:11:
7f:b7:04:ee:48:e4:2b:85:97:d9:fb:da:06:29:5e:66:61:d6:
53:c6:7e:0d:0e:8d:c1:ab:ca:e4:ea:5b:09:49:7d:a9:4d:c8:
61:47:0a:9d:a7:19:6a:37:53:46:15:a5:e7:48:84:48:3a:b7:
66:2a:68:ee:85:10:06:0d:e0:0f:92:12:17:2a:b9:a7:b4:7e:
07:c3:5c:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCiLg85T343m6ubZmRz7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3
ODM0NTgwHhcNMjYwNDE5MDAwMDQzWhcNMjYwNDIwMDAwMDQzWjAzMTEwLwYDVQQD
EygyNDhjNzk5ZmEzYTdiOGQ4NzkwNDc2MWVlMTdiNGQwMWRkOWQzYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjwzwZj9s1QEl4YATA7Tu/2v+X/+
ZF32bWx66RxJPczB5vBmqsJGAi1M5WvZzMDQr5IxmPaZ6/ro85qkFw00/JsPglAS
JdGUqRn2W6ImCUxhxqLZieFn3ciwQplFpee4eJsx0EgdCAqXIuw4I8x/Pc8Frn/l
1TwggKHfETjkQblNCDev4p7deO3II3bW2XHIEL8XLqyzmbMlLm/vgewDgTFUjYbC
SUGk2s7zryql+Q3dw/66YSxRyHO9LNqF6dokvNNgzLEIBJxdncm79YmAOpFNXnI7
vLH06LPWcoP35LTvucwgJq4qGFQaVFWnQ1LGrrO3dBs5xvxXaoZ5OpmXVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSMeZ+jp7jYeQR2HuF7TQHdnTydMB8GA1UdIwQY
MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt
YjA2NDY2MGY3MDRmLzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm
LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVsDtF+b
TYAxaUG6WqQfLiXTmhU6SUmR36IWAlqQXxE+KTqJwf7GOHOKimBc2XG7vRkDmUpV
OJYqliCwAFBJQ3Ihtgyrrovzv5xEVZo0WoDWGLXCtwB7d60vicxzKqok6dxlvM24
Z47SW1f4TFy7jRAtZVgpetuyuG94uMxiTF48ZnhctD+spgpV4aBfUOZ0cIfgKOw9
LaZZjEsEoUMwLILRY8Sytc8Y6qVBLP7TqqTmF3IRf7cE7kjkK4WX2fvaBileZmHW
U8Z+DQ6NwavK5OpbCUl9qU3IYUcKnacZajdTRhWl50iESDq3Zipo7oUQBg3gD5IS
Fyq5p7R+B8Ncxg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:46 2026 by rpki-client