Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: lVN9xZ5xMIoIBgHT5o0fke/XmiQqDhblJ4LpLSqYlz0=
Subject key identifier: 91:0D:C2:5C:39:A4:D8:F1:86:CC:48:6E:95:4C:9B:F6:FE:12:43:5A
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019D9B19886BD5F6C9BB6E61912BE92481E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 1495
Signing time: Fri 17 Apr 2026 11:00:34 +0000
Manifest this update: Fri 17 Apr 2026 11:00:34 +0000
Manifest next update: Sat 18 Apr 2026 11:00:34 +0000
Files and hashes: 1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
2: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
3: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
4: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
5: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: qch8boGb3S2HlPizMBLQpBFcCg4C1qq3oMuM6UusqDU=)
6: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
7: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
8: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:88:6b:d5:f6:c9:bb:6e:61:91:2b:e9:24:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Apr 17 11:00:34 2026 GMT
Not After : Apr 18 11:00:34 2026 GMT
Subject: CN=910dc25c39a4d8f186cc486e954c9bf6fe12435a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:8e:e9:70:4e:7d:7f:5a:c6:2b:12:cb:75:
63:d0:84:84:e0:f2:d8:0c:66:e0:5e:ac:9c:cc:54:
78:24:ac:85:3f:e9:8b:f8:bc:9c:38:da:2e:e9:73:
06:b5:e9:03:18:2a:a7:ff:4c:2a:8d:e1:aa:e7:1d:
7b:42:9d:55:ce:d3:e0:12:44:8c:4a:d7:f2:96:a7:
56:fe:c5:43:73:ac:4a:60:13:a4:87:7d:81:ec:4a:
e1:21:33:07:63:ed:a5:e3:56:8a:cd:fa:c7:62:76:
ad:61:91:fd:60:c6:b5:70:df:a6:e0:30:c6:f1:40:
16:be:9b:39:26:f4:4f:b6:07:2b:40:e9:07:57:56:
95:06:24:a4:34:6e:ec:01:29:ad:65:2c:dc:53:c6:
a0:40:41:18:21:c7:f1:94:62:57:b9:d0:93:ac:47:
0b:a3:53:3c:89:1b:d1:6f:98:5c:bc:e7:5d:58:18:
b7:31:c9:f2:3f:56:7e:b7:5a:a9:19:57:4e:eb:98:
9c:f2:a3:cf:f3:34:e3:a0:1d:94:3c:c3:51:2d:0b:
a0:da:92:26:32:4c:88:26:48:dc:88:f6:11:32:b9:
e1:c5:e3:93:de:ef:4e:ab:a5:36:7c:ef:ea:d6:0d:
59:d3:dd:0f:47:eb:1b:c9:c7:86:04:15:1f:0e:41:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0D:C2:5C:39:A4:D8:F1:86:CC:48:6E:95:4C:9B:F6:FE:12:43:5A
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:45:dd:3d:ac:f3:0f:63:06:4d:e2:19:60:76:52:c4:7e:15:
c7:4d:ea:82:9e:bf:95:b9:c6:6e:0f:e8:e3:4f:00:07:ff:3b:
86:fd:d0:b8:9a:34:d2:75:ec:25:67:61:f0:65:33:a7:55:e2:
5a:ea:70:01:79:a2:d0:c8:7f:00:03:27:5f:1b:c5:25:c7:81:
02:a6:30:00:7d:50:5a:3b:2f:56:08:f8:ca:ad:28:d3:f7:b0:
cd:44:ae:5a:b0:f4:a9:56:9e:67:ce:80:35:ea:8b:91:0e:91:
4e:a0:3b:84:55:5e:ef:57:32:3f:ea:55:d4:28:db:48:87:bf:
d7:2e:44:ce:35:5e:d0:5b:33:c9:21:70:08:86:d5:02:9c:6a:
1e:24:e0:0d:28:92:55:13:a5:31:37:ea:39:50:5a:93:0c:0f:
4d:2a:c7:cb:e5:b8:59:db:ad:8b:58:23:f7:29:46:bf:6d:f8:
4c:3c:b2:c8:3f:8a:5e:d8:d0:ba:22:8f:c3:f9:75:6b:8e:81:
51:57:14:59:44:90:fe:a8:30:40:17:95:b1:0d:d6:60:87:2b:
f9:ec:f8:28:8b:89:64:70:ec:54:67:49:e3:0a:bf:2d:7f:9e:
d7:43:b9:a2:62:d9:50:8c:66:49:06:db:f5:a4:8d:14:83:89:
7e:54:74:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGYhr1fbJu25hkSvpJIHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5
YWQwNzgwHhcNMjYwNDE3MTEwMDM0WhcNMjYwNDE4MTEwMDM0WjAzMTEwLwYDVQQD
Eyg5MTBkYzI1YzM5YTRkOGYxODZjYzQ4NmU5NTRjOWJmNmZlMTI0MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR2O6XBOfX9axisSy3Vj0ISE4PLY
DGbgXqyczFR4JKyFP+mL+LycONou6XMGtekDGCqn/0wqjeGq5x17Qp1VztPgEkSM
StfylqdW/sVDc6xKYBOkh32B7ErhITMHY+2l41aKzfrHYnatYZH9YMa1cN+m4DDG
8UAWvps5JvRPtgcrQOkHV1aVBiSkNG7sASmtZSzcU8agQEEYIcfxlGJXudCTrEcL
o1M8iRvRb5hcvOddWBi3McnyP1Z+t1qpGVdO65ic8qPP8zTjoB2UPMNRLQug2pIm
MkyIJkjciPYRMrnhxeOT3u9Oq6U2fO/q1g1Z090PR+sbyceGBBUfDkHLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJENwlw5pNjxhsxIbpVMm/b+EkNaMB8GA1UdIwQY
MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt
ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5
LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0XdPazz
D2MGTeIZYHZSxH4Vx03qgp6/lbnGbg/o408AB/87hv3QuJo00nXsJWdh8GUzp1Xi
WupwAXmi0Mh/AAMnXxvFJceBAqYwAH1QWjsvVgj4yq0o0/ewzUSuWrD0qVaeZ86A
NeqLkQ6RTqA7hFVe71cyP+pV1CjbSIe/1y5EzjVe0FszySFwCIbVApxqHiTgDSiS
VROlMTfqOVBakwwPTSrHy+W4Wduti1gj9ylGv234TDyyyD+KXtjQuiKPw/l1a46B
UVcUWUSQ/qgwQBeVsQ3WYIcr+ez4KIuJZHDsVGdJ4wq/LX+e10O5omLZUIxmSQbb
9aSNFIOJflR0Tw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:05 2026 by rpki-client