Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier: O8FgWCYlc6drDtnlLkEHd4dTUkFUtRCEfMYrIOerLcA=
Subject key identifier: C5:AB:64:15:7D:0B:42:B0:E6:6E:A4:A1:9F:DA:E4:7C:83:0D:F6:CE
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial: 019D98BD92C7D4CD84A5ADEB6C48F8FB5F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:53 +0000
Manifest this update: Fri 17 Apr 2026 00:00:53 +0000
Manifest next update: Sat 18 Apr 2026 00:00:53 +0000
Files and hashes: 1: D8kmbrxGH990IEjHOfCChDR_0RI.roa (hash: av49JGDKCD6wMkJgxe4+rUguaf8/22rVV0DlSQeu/3g=)
2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: k4rCfiy3mZcvdmip8OU7R+BRZ55gE6KjoLeHwOQYgYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:92:c7:d4:cd:84:a5:ad:eb:6c:48:f8:fb:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Validity
Not Before: Apr 17 00:00:53 2026 GMT
Not After : Apr 18 00:00:53 2026 GMT
Subject: CN=c5ab64157d0b42b0e66ea4a19fdae47c830df6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:82:41:82:75:e5:b4:d0:49:76:7c:f8:7b:
ae:94:68:7d:dc:e7:66:00:76:aa:bc:a2:bf:9e:1c:
66:9d:ce:9a:65:4b:a7:75:fc:3c:8a:e3:6b:df:6b:
23:e0:4d:15:ff:6e:ef:9b:c2:c0:5f:31:68:41:22:
da:b7:f1:3d:83:ec:bb:eb:d4:60:5f:c7:52:60:f2:
24:9c:4a:09:39:18:be:0a:00:48:5b:f9:e9:36:9c:
10:e2:4c:96:69:5a:a5:fc:0a:3f:95:e5:d1:be:1a:
df:a6:fb:e7:12:ee:61:33:64:14:8f:b2:7e:c3:a2:
27:40:20:8c:f6:40:82:d2:76:f9:f3:dd:97:04:49:
3d:9f:1a:b7:76:32:8f:3b:78:37:e1:b7:55:5f:ba:
28:6d:e8:5b:cb:05:f4:b6:44:68:36:b5:83:7f:44:
9b:ab:51:ab:1f:e4:0b:36:74:49:ff:2a:4b:b3:53:
bd:61:b2:98:e7:38:70:cf:a2:9a:22:3d:8a:8a:37:
9d:f7:e3:10:4d:fc:e2:95:b3:cb:5b:75:1f:21:fe:
a7:e4:0f:50:a9:4f:9f:66:d5:ae:21:3e:a8:2c:0c:
1b:44:1d:25:6b:5d:65:8a:2d:a9:0b:c8:f6:23:41:
1c:b0:75:3f:52:4a:e5:54:54:06:cb:73:04:e2:e7:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AB:64:15:7D:0B:42:B0:E6:6E:A4:A1:9F:DA:E4:7C:83:0D:F6:CE
X509v3 Authority Key Identifier:
keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:d3:e4:44:b7:7a:9e:ef:ab:96:14:2e:0e:b0:3a:e7:99:
95:0b:5a:57:44:be:a3:51:49:01:76:e8:da:bd:d2:a4:68:69:
33:84:9d:ab:3b:78:37:4c:28:6c:3f:db:fb:73:d4:53:d6:15:
3f:fa:f6:b3:d6:8c:c1:ae:91:ac:12:da:aa:db:e2:4a:a1:a6:
8e:7b:c8:ae:6c:c3:df:6e:61:57:8b:94:fc:8f:91:97:fc:a7:
b4:e8:0e:e4:32:d1:66:2f:23:3f:12:10:0a:cf:5e:4c:d5:1c:
ab:18:b7:b5:cb:89:17:2f:ca:2a:c7:a8:95:e3:fc:b7:2f:e0:
3e:98:e4:0c:54:82:61:b3:a2:db:16:ec:43:af:20:64:7a:45:
6d:a9:9e:0a:ee:1a:5a:2f:b8:e7:b4:22:90:34:ed:8d:45:8c:
c6:0e:b6:17:a9:4a:d1:bd:fb:86:f4:8b:54:8b:c5:d3:f9:c2:
40:0d:76:d9:e7:93:bd:03:3f:d6:c9:d3:a5:69:2c:d3:1a:8c:
e5:8b:ad:d6:95:01:4d:3e:30:a2:95:68:c8:8c:7a:bb:3d:25:
6a:a5:25:f5:03:9a:d4:41:e0:77:9d:bc:75:4e:c9:cd:6e:a0:
73:68:46:d0:b1:e8:76:68:21:51:cf:7d:fc:23:ce:43:0b:ac:
ba:a3:b1:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZLH1M2Epa3rbEj4+19lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjYwNDE3MDAwMDUzWhcNMjYwNDE4MDAwMDUzWjAzMTEwLwYDVQQD
EyhjNWFiNjQxNTdkMGI0MmIwZTY2ZWE0YTE5ZmRhZTQ3YzgzMGRmNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eGCQYJ15bTQSXZ8+HuulGh93Odm
AHaqvKK/nhxmnc6aZUundfw8iuNr32sj4E0V/27vm8LAXzFoQSLat/E9g+y769Rg
X8dSYPIknEoJORi+CgBIW/npNpwQ4kyWaVql/Ao/leXRvhrfpvvnEu5hM2QUj7J+
w6InQCCM9kCC0nb5892XBEk9nxq3djKPO3g34bdVX7oobehbywX0tkRoNrWDf0Sb
q1GrH+QLNnRJ/ypLs1O9YbKY5zhwz6KaIj2Kijed9+MQTfzilbPLW3UfIf6n5A9Q
qU+fZtWuIT6oLAwbRB0la11lii2pC8j2I0EcsHU/UkrlVFQGy3ME4uf/BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWrZBV9C0Kw5m6koZ/a5HyDDfbOMB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdzT5ES3
ep7vq5YULg6wOueZlQtaV0S+o1FJAXbo2r3SpGhpM4Sdqzt4N0wobD/b+3PUU9YV
P/r2s9aMwa6RrBLaqtviSqGmjnvIrmzD325hV4uU/I+Rl/yntOgO5DLRZi8jPxIQ
Cs9eTNUcqxi3tcuJFy/KKseoleP8ty/gPpjkDFSCYbOi2xbsQ68gZHpFbameCu4a
Wi+457QikDTtjUWMxg62F6lK0b37hvSLVIvF0/nCQA122eeTvQM/1snTpWks0xqM
5Yut1pUBTT4wopVoyIx6uz0laqUl9QOa1EHgd528dU7JzW6gc2hG0LHodmghUc99
/CPOQwusuqOx7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:52 2026 by rpki-client