Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: 1sf+38gpfORcgfluVVNZxkZ7F+0im108/QGm1cSppPs=
Subject key identifier: C5:43:00:AD:99:4F:B7:77:85:82:4E:E7:DD:CB:E4:84:99:B7:E2:87
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019D9A06CEC6655BFAE5EF66D945D18C293A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: l3oJceCd+1vQ017gG4dc5ZPioodiQe3ilrBey4HBYSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ce:c6:65:5b:fa:e5:ef:66:d9:45:d1:8c:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=c54300ad994fb77785824ee7ddcbe48499b7e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:3d:ff:98:71:89:b9:e9:3e:5c:aa:d5:fc:
78:20:af:04:c0:79:82:ed:c1:4d:a2:19:c8:d9:29:
48:33:16:76:dd:8f:71:28:4d:bb:bf:10:13:9f:62:
5f:aa:73:25:10:8d:a0:1d:c1:2e:88:86:83:d0:ab:
b9:c0:02:d4:b7:da:d7:a5:05:b1:e5:b5:a5:1d:28:
8e:3c:78:f3:78:38:ab:3e:8a:16:8f:98:f4:ee:40:
73:7d:38:97:7f:7e:71:74:29:f9:b4:0e:68:6a:1f:
79:8f:48:19:f8:11:05:fc:ed:4f:7c:da:b0:c8:6f:
92:66:ce:1e:a6:b2:d9:9f:fe:a7:83:ee:7b:9b:68:
a5:b0:4f:c4:e3:0c:b0:8a:ab:4d:e2:a4:73:cd:30:
36:76:13:06:9c:b4:d7:90:d1:68:c6:3f:67:d6:99:
f2:ac:b2:df:8b:f5:72:f0:3e:ef:d0:db:9a:7c:66:
96:87:2f:93:49:60:fd:1c:17:91:fa:53:f9:76:21:
0c:54:e2:47:a7:54:e3:15:a9:2c:52:40:6f:74:74:
1c:25:0a:62:70:4a:c3:51:2a:e8:bb:b9:03:b8:8c:
2e:8d:3a:a0:8e:fd:6f:ee:ca:69:82:6f:1d:d3:26:
76:06:d2:1c:65:5f:ee:37:79:89:31:21:07:f9:0d:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:00:AD:99:4F:B7:77:85:82:4E:E7:DD:CB:E4:84:99:B7:E2:87
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:c3:44:91:9f:a8:4a:fb:d1:00:0d:d5:83:ae:4e:53:08:
99:b4:f2:e7:2a:a7:2f:98:8f:ae:0a:2a:59:ca:dc:1a:aa:c5:
17:4a:74:e7:d0:ec:73:ad:c0:d1:40:b9:d2:8c:d9:92:2a:f5:
26:a2:06:af:a0:62:65:ea:77:6e:c3:fd:01:59:f3:50:c2:06:
0c:7c:f9:46:a4:5d:d9:ba:df:b6:09:54:c5:4c:84:b9:f0:2d:
9b:d8:b8:f2:88:9c:62:3b:f4:d6:c7:1e:b3:86:f3:e3:be:ee:
7a:5b:ab:36:3d:a9:8d:9a:cf:62:1c:b0:7d:28:ba:48:29:50:
72:53:fb:7f:89:e1:fa:36:52:dc:53:11:4b:3d:bf:2c:7e:34:
c0:d5:11:80:97:f5:01:d8:6a:1a:c0:25:7b:cd:a1:1e:a6:16:
e0:b3:32:3a:18:8d:c4:78:e7:cf:f9:c5:00:34:92:e1:86:e6:
50:e5:92:e6:23:b8:ce:41:b3:11:82:53:91:a4:32:cd:46:33:
90:59:b0:54:17:b7:7d:1b:27:01:7a:b6:c1:fc:07:59:fd:73:
7e:81:33:89:e8:69:69:f8:85:cc:a2:7f:7e:93:66:92:d1:e6:
7d:1e:ed:59:7d:cf:77:1f:6a:9b:2e:e2:d5:5d:46:93:79:88:
74:d0:b7:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBs7GZVv65e9m2UXRjCk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh
YTc1MTAwHhcNMjYwNDE3MDYwMDMwWhcNMjYwNDE4MDYwMDMwWjAzMTEwLwYDVQQD
EyhjNTQzMDBhZDk5NGZiNzc3ODU4MjRlZTdkZGNiZTQ4NDk5YjdlMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLs9/5hxibnpPlyq1fx4IK8EwHmC
7cFNohnI2SlIMxZ23Y9xKE27vxATn2JfqnMlEI2gHcEuiIaD0Ku5wALUt9rXpQWx
5bWlHSiOPHjzeDirPooWj5j07kBzfTiXf35xdCn5tA5oah95j0gZ+BEF/O1PfNqw
yG+SZs4eprLZn/6ng+57m2ilsE/E4wywiqtN4qRzzTA2dhMGnLTXkNFoxj9n1pny
rLLfi/Vy8D7v0NuafGaWhy+TSWD9HBeR+lP5diEMVOJHp1TjFaksUkBvdHQcJQpi
cErDUSrou7kDuIwujTqgjv1v7sppgm8d0yZ2BtIcZV/uN3mJMSEH+Q1EtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVDAK2ZT7d3hYJO593L5ISZt+KHMB8GA1UdIwQY
MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt
N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4
LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNbDRJGf
qEr70QAN1YOuTlMImbTy5yqnL5iPrgoqWcrcGqrFF0p059Dsc63A0UC50ozZkir1
JqIGr6BiZep3bsP9AVnzUMIGDHz5RqRd2brftglUxUyEufAtm9i48oicYjv01sce
s4bz477uelurNj2pjZrPYhywfSi6SClQclP7f4nh+jZS3FMRSz2/LH40wNURgJf1
AdhqGsAle82hHqYW4LMyOhiNxHjnz/nFADSS4YbmUOWS5iO4zkGzEYJTkaQyzUYz
kFmwVBe3fRsnAXq2wfwHWf1zfoEziehpafiFzKJ/fpNmktHmfR7tWX3Pdx9qmy7i
1V1Gk3mIdNC3FA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:10 2026 by rpki-client