Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 3UHTJ5rTBUOgOsMXZXV9G68xnFz3/GLWNrCO1CpnA+Q=
Subject key identifier: 26:B6:03:E0:14:D9:C8:0A:97:9A:12:1E:1E:DF:9E:87:BD:C0:36:CA
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019DA4C16FDAFB9F1A83C15632F929BA123A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 11EE
Signing time: Sun 19 Apr 2026 08:00:33 +0000
Manifest this update: Sun 19 Apr 2026 08:00:33 +0000
Manifest next update: Mon 20 Apr 2026 08:00:33 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: ekOS4A9MKNjGVuBahC/0ScKz2auYsbqSDXWM30fGTIA=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:6f:da:fb:9f:1a:83:c1:56:32:f9:29:ba:12:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Apr 19 08:00:33 2026 GMT
Not After : Apr 20 08:00:33 2026 GMT
Subject: CN=26b603e014d9c80a979a121e1edf9e87bdc036ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:3e:ef:92:53:8c:61:7a:3f:6d:34:5e:cc:
16:f9:a8:92:5c:11:55:9b:72:62:47:16:2f:11:b4:
0f:9d:d3:00:02:be:ba:dd:c5:3f:be:80:f7:ed:a3:
af:d8:49:c4:d8:99:91:8d:14:3c:97:78:7c:0e:19:
ca:8e:ce:7f:58:45:6f:42:93:f3:06:f4:ad:94:1d:
b2:86:1b:b6:8c:7b:f9:44:5c:9b:0b:e1:92:b0:07:
5c:ff:e4:36:99:95:37:42:de:ee:a4:f7:49:c6:be:
c0:79:d8:fb:5d:85:ba:d6:16:f9:3e:01:89:ba:83:
3c:4e:64:d2:d2:8c:ca:da:bd:0b:fd:8b:27:31:e1:
01:bf:a7:87:7f:58:0b:38:16:cb:90:ff:67:41:f2:
56:fc:a9:13:af:74:6a:35:7d:50:8c:6b:6b:c2:83:
44:33:93:c7:ec:68:7b:bf:8a:21:16:17:cf:e9:74:
23:45:90:aa:e2:b4:2b:5e:d6:a3:8f:de:15:3e:3f:
91:3a:ac:c2:2c:7a:14:23:4a:b6:c8:d0:b6:18:71:
d1:a2:1c:11:0e:2c:09:6b:e8:6d:41:46:02:7e:79:
7a:58:de:b3:2a:cc:19:1b:2b:5c:6d:92:b0:91:bc:
2b:ab:d5:d0:34:1d:ce:9b:99:cd:8e:83:f6:4d:11:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:03:E0:14:D9:C8:0A:97:9A:12:1E:1E:DF:9E:87:BD:C0:36:CA
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bd:19:3c:d2:b0:07:92:dc:02:0f:82:17:ca:18:40:6d:03:
3d:19:35:e6:37:3c:c9:f4:f0:7e:82:9b:47:8e:7e:80:0b:8a:
b6:3d:8b:49:6e:14:95:35:26:09:7f:5c:75:cd:ae:58:7e:ae:
42:3a:78:6d:b3:b2:17:33:71:03:7d:e6:f3:9e:dd:05:e5:5f:
3e:c5:3a:6a:6e:77:97:dd:5d:f3:4f:99:bd:ba:64:1c:c5:30:
ec:82:f7:7e:c1:c5:be:1d:42:d4:90:fe:04:97:66:40:64:34:
31:07:c5:10:bb:84:36:f7:e6:89:3c:a1:cf:a1:59:9c:01:55:
7e:84:c2:58:a0:80:82:d2:98:dd:44:d1:c9:05:61:c9:06:90:
ad:25:4e:ac:b6:56:67:bb:b9:a4:44:85:9b:29:60:2f:62:e0:
30:58:b7:d3:39:85:13:a5:09:cb:36:ae:4d:69:42:2c:07:0a:
98:b1:ec:06:a8:27:32:72:b7:f6:d8:28:20:ac:05:c3:43:04:
f2:32:08:76:28:a1:31:59:a4:a5:51:46:b8:c6:99:77:2d:a1:
72:12:b8:01:3e:70:de:96:bf:43:65:69:08:34:69:af:a4:ae:
3c:cf:55:30:95:61:5c:3a:ac:fa:da:4e:f0:d6:b7:6c:28:7c:
50:d7:4a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwW/a+58ag8FWMvkpuhI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1
Y2MzMTIwHhcNMjYwNDE5MDgwMDMzWhcNMjYwNDIwMDgwMDMzWjAzMTEwLwYDVQQD
EygyNmI2MDNlMDE0ZDljODBhOTc5YTEyMWUxZWRmOWU4N2JkYzAzNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3w+75JTjGF6P200XswW+aiSXBFV
m3JiRxYvEbQPndMAAr663cU/voD37aOv2EnE2JmRjRQ8l3h8DhnKjs5/WEVvQpPz
BvStlB2yhhu2jHv5RFybC+GSsAdc/+Q2mZU3Qt7upPdJxr7Aedj7XYW61hb5PgGJ
uoM8TmTS0ozK2r0L/YsnMeEBv6eHf1gLOBbLkP9nQfJW/KkTr3RqNX1QjGtrwoNE
M5PH7Gh7v4ohFhfP6XQjRZCq4rQrXtajj94VPj+ROqzCLHoUI0q2yNC2GHHRohwR
DiwJa+htQUYCfnl6WN6zKswZGytcbZKwkbwrq9XQNB3Om5nNjoP2TRFGNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa2A+AU2cgKl5oSHh7fnoe9wDbKMB8GA1UdIwQY
MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt
MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy
LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb0ZPNKw
B5LcAg+CF8oYQG0DPRk15jc8yfTwfoKbR45+gAuKtj2LSW4UlTUmCX9cdc2uWH6u
Qjp4bbOyFzNxA33m857dBeVfPsU6am53l91d80+ZvbpkHMUw7IL3fsHFvh1C1JD+
BJdmQGQ0MQfFELuENvfmiTyhz6FZnAFVfoTCWKCAgtKY3UTRyQVhyQaQrSVOrLZW
Z7u5pESFmylgL2LgMFi30zmFE6UJyzauTWlCLAcKmLHsBqgnMnK39tgoIKwFw0ME
8jIIdiihMVmkpVFGuMaZdy2hchK4AT5w3pa/Q2VpCDRpr6SuPM9VMJVhXDqs+tpO
8Na3bCh8UNdKmQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:45 2026 by rpki-client