Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: CMFLHGm8mrUOTs5L5L0XsGG09nYh/Xs9+nigWyJvLNs=
Subject key identifier: EB:EA:19:A5:C9:52:6E:D7:58:69:5E:BB:13:8C:13:F2:1B:9A:42:D0
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019D9B504BC067C48418D5A5155B78F44F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 114C
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: MyGEZ3L02tPSWEisPvflLNHxjTmsaTo1d25w8roZsyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4b:c0:67:c4:84:18:d5:a5:15:5b:78:f4:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=ebea19a5c9526ed758695ebb138c13f21b9a42d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:8c:6b:7c:d3:48:d8:dd:27:3e:39:d0:70:
98:ae:9a:c9:28:5b:47:a8:85:7f:ba:24:d1:38:8e:
97:f7:31:78:12:44:05:c4:57:07:f7:2d:60:87:16:
61:fb:b1:03:80:0d:42:bd:d0:4c:50:2d:20:38:eb:
84:75:88:fa:77:6b:0a:e4:2d:dc:64:b1:69:f8:8b:
ea:21:fa:82:35:e2:9c:06:35:95:41:94:7d:97:09:
09:df:d7:ec:41:4c:77:fb:04:d7:fb:4c:1c:69:63:
7f:34:37:3d:98:50:90:6a:5c:d5:16:36:f5:21:47:
28:57:83:fc:9e:ac:0d:9e:3d:7f:bb:77:9a:24:57:
6b:b8:aa:f9:1f:bd:dc:8c:6c:76:86:74:db:b1:7c:
12:7c:98:3a:1d:e6:38:68:2a:e2:88:a5:29:7f:ef:
72:2f:8a:79:0b:a9:47:8a:7c:19:d6:a4:9a:1a:b3:
c5:7c:44:ac:ce:e9:21:7b:8b:80:03:7b:d7:a8:6c:
b4:57:b8:b5:a9:94:ed:27:ad:fc:3b:4c:c9:f7:55:
6d:77:ca:56:0d:4a:47:71:08:d8:36:3c:58:3e:5a:
2f:db:27:6e:05:77:04:4b:05:b2:b3:95:45:03:5f:
d4:5e:53:ff:c4:e0:fb:75:51:5e:72:10:a1:b9:2c:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:19:A5:C9:52:6E:D7:58:69:5E:BB:13:8C:13:F2:1B:9A:42:D0
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:71:e0:a6:92:c0:08:41:0a:e8:9f:1d:a5:34:27:b7:60:53:
b2:80:e8:5f:63:5f:e8:33:4b:f7:fd:32:40:d3:0a:a2:49:9e:
95:a7:f7:5d:be:d0:f1:2d:8e:4f:a5:5c:14:60:eb:00:42:31:
fa:22:3b:57:aa:cf:48:97:e5:bd:82:d5:c1:51:a7:00:61:f5:
3d:c1:23:ca:55:45:e6:1c:c4:b4:4f:d6:4e:cc:f7:dc:0f:d0:
5b:90:ff:4f:dd:03:64:0a:11:b0:9a:6b:86:6e:49:25:67:51:
9c:2a:06:cf:72:50:c4:19:13:e0:3c:06:d7:c6:fd:f5:4d:d9:
5c:e4:0d:40:ff:98:eb:26:e2:61:95:ff:b8:e1:4e:4c:df:83:
9d:33:8d:ed:c6:b3:c1:3b:d5:6c:e7:a1:d6:80:00:c5:d0:9d:
55:1f:ba:12:99:34:77:0e:7a:c7:5d:c9:7b:55:72:dd:1b:01:
28:2a:b7:c3:66:e6:c0:4a:d0:20:39:de:0b:a4:35:75:1e:c9:
be:c0:05:25:48:ec:6e:98:30:ec:e7:87:0e:6b:44:aa:38:8c:
b1:e2:a7:46:f5:36:27:11:eb:9a:eb:f2:a7:64:62:54:01:c0:
35:42:02:47:12:da:b1:9d:17:61:d3:80:81:80:b1:b0:a5:09:
f4:fb:5d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUEvAZ8SEGNWlFVt49E99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGFjNTJlMmI1NzJjYzJhOTlhNzQxMjU3ZTU2OWFhMzcx
ZTM1NjgwHhcNMjYwNDE3MTIwMDIzWhcNMjYwNDE4MTIwMDIzWjAzMTEwLwYDVQQD
EyhlYmVhMTlhNWM5NTI2ZWQ3NTg2OTVlYmIxMzhjMTNmMjFiOWE0MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWmMa3zTSNjdJz450HCYrprJKFtH
qIV/uiTROI6X9zF4EkQFxFcH9y1ghxZh+7EDgA1CvdBMUC0gOOuEdYj6d2sK5C3c
ZLFp+IvqIfqCNeKcBjWVQZR9lwkJ39fsQUx3+wTX+0wcaWN/NDc9mFCQalzVFjb1
IUcoV4P8nqwNnj1/u3eaJFdruKr5H73cjGx2hnTbsXwSfJg6HeY4aCriiKUpf+9y
L4p5C6lHinwZ1qSaGrPFfESszukhe4uAA3vXqGy0V7i1qZTtJ638O0zJ91Vtd8pW
DUpHcQjYNjxYPlov2yduBXcESwWys5VFA1/UXlP/xOD7dVFechChuSxezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvqGaXJUm7XWGleuxOME/IbmkLQMB8GA1UdIwQY
MBaAFMhKxS4rVyzCqZp0Elflaao3HjVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQt
MmNjMzQyYjAwNTE5LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hYmRhZmMtYjM4OS00NTE4LWIxMmQtMmNjMzQyYjAwNTE5
LzEveUVyRkxpdFhMTUtwbW5RU1YtVnBxamNlTldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3HgppLA
CEEK6J8dpTQnt2BTsoDoX2Nf6DNL9/0yQNMKokmelaf3Xb7Q8S2OT6VcFGDrAEIx
+iI7V6rPSJflvYLVwVGnAGH1PcEjylVF5hzEtE/WTsz33A/QW5D/T90DZAoRsJpr
hm5JJWdRnCoGz3JQxBkT4DwG18b99U3ZXOQNQP+Y6ybiYZX/uOFOTN+DnTON7caz
wTvVbOeh1oAAxdCdVR+6Epk0dw56x13Je1Vy3RsBKCq3w2bmwErQIDneC6Q1dR7J
vsAFJUjsbpgw7OeHDmtEqjiMseKnRvU2JxHrmuvyp2RiVAHANUICRxLasZ0XYdOA
gYCxsKUJ9Ptdqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:48 2026 by rpki-client