Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: 9uf10jd4JGRRdH0KvfkNPtnS80ZsmWUAzX06mKnSCOg=
Subject key identifier: 3C:78:40:99:22:6D:E5:6F:16:B5:A7:99:52:2F:8D:C9:8D:84:85:A9
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 019D98F46F0D8D6C22EF41ADE5E18600134F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 1328
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: OmKYv-eBNTYluusfNr4dZe7zC_c.roa (hash: w1Hd7iJpZYHQEo80iQwx2qNAI2ou5wncgHu/GLia0Tg=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: awc4kS059ulDkFoh94UfSoNVleLIdItRw+2reuAySyo=)
3: l-QyBKePUGvgwvLYQ39xVIrG-Xc.roa (hash: BEyQW94VrHgV1DUmSXCji9F0XD6RgtTzxouMSqJBF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6f:0d:8d:6c:22:ef:41:ad:e5:e1:86:00:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=3c784099226de56f16b5a799522f8dc98d8485a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:03:90:9e:e3:74:72:07:66:47:c3:51:99:
7d:6c:f5:65:63:a7:25:c9:f9:40:26:6c:0d:fb:8f:
91:90:6e:5f:64:2c:7a:76:ce:92:6d:6b:95:81:3d:
f1:6d:7b:62:cc:32:29:f4:f8:6b:c7:7f:bb:1b:77:
09:c9:58:0b:ab:d0:7b:62:75:1b:50:6d:aa:f9:76:
82:2a:80:75:79:cc:20:95:d8:61:54:bb:e4:78:74:
20:13:b6:c4:c7:4c:d5:cf:d6:b8:3a:04:2c:fb:08:
35:6a:c3:72:1f:14:8d:e8:e5:d0:11:2a:c5:97:e1:
27:78:b7:53:98:b6:2a:c8:6a:dd:b8:32:3e:4d:79:
a0:60:c8:c7:af:14:4d:33:d8:76:b8:f8:82:2d:f2:
54:dd:8a:8f:c2:eb:3a:b3:69:2a:96:78:c0:bb:84:
8b:a5:9c:d8:60:99:fc:89:29:d5:73:b6:e6:48:de:
49:7c:db:2f:49:cd:34:35:5c:8d:85:4a:3f:68:ac:
ac:c7:25:b7:d8:90:7e:d0:2d:f5:7b:b7:b8:89:74:
e7:50:aa:eb:21:60:f2:74:24:4e:ed:bd:f8:00:48:
27:4e:71:02:ad:55:79:78:8f:f7:89:0e:e4:25:2f:
b6:e0:b6:9c:98:8a:02:71:70:01:01:26:7d:c5:70:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:40:99:22:6D:E5:6F:16:B5:A7:99:52:2F:8D:C9:8D:84:85:A9
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:c6:08:75:d6:64:18:f2:e4:fc:dc:51:26:38:f9:29:7e:
ea:a4:6c:25:65:92:eb:28:fa:b4:51:f9:e4:f0:3c:9a:79:92:
9e:8f:7c:c7:35:cb:5f:47:76:62:68:a6:72:dc:c9:58:bd:7c:
73:af:cc:17:23:24:5d:7c:52:79:1e:62:1c:85:0c:1f:6c:79:
8c:1b:88:18:69:3f:24:eb:bd:9c:98:58:c7:d0:fa:33:a6:71:
01:ad:24:49:b2:0d:4d:7a:ae:d5:e5:32:48:81:4e:ba:8d:63:
a6:9c:e5:68:80:bd:21:a8:bd:82:50:98:f8:9d:1c:1f:ee:2e:
3e:ad:f3:81:5d:30:b7:d8:b1:e3:9a:bc:3b:dc:98:e1:2c:de:
1b:18:a6:37:c3:10:e9:01:5b:eb:f1:e5:8f:a7:ff:68:94:f2:
59:80:70:27:51:e6:b8:33:ea:1e:16:51:36:93:06:55:f0:c6:
48:d2:0c:2b:fc:7d:d0:ed:66:91:45:e0:cb:e7:77:19:9e:fc:
56:36:d3:dd:fe:c7:23:d6:01:92:b9:24:ba:13:99:ad:68:7e:
5a:8a:7e:cc:d2:d2:c7:fc:92:3d:be:c2:4e:51:b9:86:7a:a4:
3a:07:e2:9b:9d:37:37:a8:75:3b:07:c2:6f:37:3a:f9:63:20:
fe:ef:dc:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9G8NjWwi70Gt5eGGABNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk
MjE2NjYwHhcNMjYwNDE3MDEwMDQ5WhcNMjYwNDE4MDEwMDQ5WjAzMTEwLwYDVQQD
EygzYzc4NDA5OTIyNmRlNTZmMTZiNWE3OTk1MjJmOGRjOThkODQ4NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpoDkJ7jdHIHZkfDUZl9bPVlY6cl
yflAJmwN+4+RkG5fZCx6ds6SbWuVgT3xbXtizDIp9Phrx3+7G3cJyVgLq9B7YnUb
UG2q+XaCKoB1ecwgldhhVLvkeHQgE7bEx0zVz9a4OgQs+wg1asNyHxSN6OXQESrF
l+EneLdTmLYqyGrduDI+TXmgYMjHrxRNM9h2uPiCLfJU3YqPwus6s2kqlnjAu4SL
pZzYYJn8iSnVc7bmSN5JfNsvSc00NVyNhUo/aKysxyW32JB+0C31e7e4iXTnUKrr
IWDydCRO7b34AEgnTnECrVV5eI/3iQ7kJS+24LacmIoCcXABASZ9xXDptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx4QJkibeVvFrWnmVIvjcmNhIWpMB8GA1UdIwQY
MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt
YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3
LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr47GCHXW
ZBjy5PzcUSY4+Sl+6qRsJWWS6yj6tFH55PA8mnmSno98xzXLX0d2YmimctzJWL18
c6/MFyMkXXxSeR5iHIUMH2x5jBuIGGk/JOu9nJhYx9D6M6ZxAa0kSbINTXqu1eUy
SIFOuo1jppzlaIC9Iai9glCY+J0cH+4uPq3zgV0wt9ix45q8O9yY4SzeGximN8MQ
6QFb6/Hlj6f/aJTyWYBwJ1HmuDPqHhZRNpMGVfDGSNIMK/x90O1mkUXgy+d3GZ78
VjbT3f7HI9YBkrkkuhOZrWh+Wop+zNLSx/ySPb7CTlG5hnqkOgfim503N6h1OwfC
bzc6+WMg/u/clg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:15 2026 by rpki-client