Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: +9vQ77kha60x63u6bXrHHuAXXyUJbJ+spPTkZBTVuOs=
Subject key identifier: 6E:2D:16:F6:8D:0A:A2:F6:84:D4:A3:BE:C7:FB:EB:BC:35:A7:F1:23
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019D992BC3DD5E572511917C328DCC1662E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:01:15 +0000
Manifest this update: Fri 17 Apr 2026 02:01:15 +0000
Manifest next update: Sat 18 Apr 2026 02:01:15 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: VT41xpNLqGrsQUcxkci6QM4maV30QotxbJOwkKOBGB8=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:c3:dd:5e:57:25:11:91:7c:32:8d:cc:16:62:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Apr 17 02:01:15 2026 GMT
Not After : Apr 18 02:01:15 2026 GMT
Subject: CN=6e2d16f68d0aa2f684d4a3bec7fbebbc35a7f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:11:54:1c:f2:f4:64:ce:e5:9b:6b:cb:bf:
12:12:e2:35:43:c1:8b:f0:e8:a4:4b:4f:c1:b2:7c:
c7:e4:9e:bf:0a:68:c5:1b:f8:b6:a0:28:72:db:0e:
a2:a9:33:70:26:45:80:d9:f6:0b:90:23:39:43:c6:
1f:b7:3f:77:e3:8f:6a:e9:45:99:91:10:02:08:b0:
69:ae:b8:06:99:56:3f:76:6c:af:54:a6:1c:d5:37:
fe:97:f6:ef:97:b8:00:df:67:d5:80:15:ea:12:6f:
15:f2:2f:f0:f0:54:ec:e7:17:5c:2c:63:3c:55:25:
34:11:db:0e:9b:2a:b4:9f:c2:e4:3e:8a:5f:63:d5:
12:3f:67:12:6c:dd:9c:cc:d9:9d:d6:34:c3:a1:30:
c1:88:de:5c:db:ef:7d:e0:ba:aa:8f:0b:37:76:a9:
1a:fd:f3:a0:80:27:50:b6:a9:19:78:c4:c9:98:39:
7b:7d:40:24:29:97:9f:9b:84:87:25:aa:5d:6e:76:
fd:6a:d7:a9:5d:23:d8:c7:82:d8:aa:59:ec:12:72:
1a:fc:af:74:2e:7f:d4:e5:1f:61:84:98:1b:76:4d:
1f:e2:24:ea:5b:cf:26:d2:3f:1f:fb:5a:ea:5f:b2:
ef:39:2b:9b:35:5d:f7:d1:86:87:e1:ef:82:ba:85:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:16:F6:8D:0A:A2:F6:84:D4:A3:BE:C7:FB:EB:BC:35:A7:F1:23
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ff:8d:00:2f:75:b6:e9:22:c5:fb:56:91:0e:af:68:2a:4b:
55:fa:e4:f9:d3:ad:b5:b1:6f:01:48:52:f9:93:a0:28:6f:be:
47:f5:c9:40:91:e8:95:8c:cc:71:17:23:6b:97:5e:5b:6d:05:
a8:7f:ec:cd:b3:44:cd:72:42:33:5c:9d:55:9b:b6:28:70:bf:
dc:d9:85:bc:be:b7:fc:3c:79:85:9c:05:53:f2:79:e2:a6:bd:
6b:bb:c0:bd:67:99:4e:9b:28:80:d6:a5:49:44:64:fb:4a:f3:
6a:5d:b0:34:4d:b2:20:3d:a7:d6:bc:7a:a7:f9:56:37:63:a4:
e2:e4:65:86:cb:16:ec:c3:df:d1:2a:f7:27:68:28:30:d2:68:
e0:fb:5c:71:84:a9:33:1e:17:28:31:b8:7a:ea:2c:04:b8:14:
26:d9:f8:41:0c:1f:89:41:4d:d9:48:d1:43:c3:50:d1:3d:a5:
73:57:c3:fc:1a:e3:e5:d6:35:f9:8c:52:82:02:c8:f3:2e:08:
51:e0:3d:7c:4d:80:b1:ca:84:fe:50:0e:e6:16:cd:a2:8a:19:
24:90:50:87:c2:26:55:c5:34:18:99:d7:63:94:76:e0:e0:4a:
c4:95:a6:4d:21:19:13:6a:f9:18:87:70:b7:19:2b:cd:e2:06:
72:66:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:22 2026 by rpki-client