Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: /vhWbo8tF+zgO8n6RXsZ7ZLb3/rgzQByn6fMPEYiw4c=
Subject key identifier: 25:FB:2A:AF:CC:E9:D0:A6:07:80:86:7A:0F:E9:1E:20:9F:81:A3:24
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019D9A3EBC3A417A2766ECF87C78409DEBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:35 +0000
Manifest this update: Fri 17 Apr 2026 07:01:35 +0000
Manifest next update: Sat 18 Apr 2026 07:01:35 +0000
Files and hashes: 1: cVlURNqZQAh6Qe1KHamU9SvF4u8.roa (hash: GimlEEISLfZZspdQqTlAmRyOG3nJltXybDu3f42C8MQ=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: ShXi+PQBuW0ggGXKNJwHa2z9fbXHGofP24yICtMnI0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bc:3a:41:7a:27:66:ec:f8:7c:78:40:9d:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Apr 17 07:01:35 2026 GMT
Not After : Apr 18 07:01:35 2026 GMT
Subject: CN=25fb2aafcce9d0a60780867a0fe91e209f81a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:7b:53:c1:d4:8b:7a:48:95:e9:69:c0:4a:
23:60:a6:e1:87:1f:ab:83:27:0c:4e:2a:d5:d1:ec:
c9:47:12:11:da:0a:ed:6c:c2:84:49:d8:a2:06:7c:
c1:e1:01:fd:33:91:43:7c:ed:04:ba:b2:2f:13:a3:
06:75:58:43:e2:dc:0c:5b:93:b3:ec:3d:c5:48:65:
1b:13:5c:07:b4:61:09:06:50:78:6d:40:14:29:f3:
2d:12:17:55:e7:3c:fb:75:c8:55:d8:d8:cc:f5:d0:
68:ac:31:ae:ae:2c:2f:3f:24:f8:04:1b:97:90:ee:
22:fb:47:71:68:9a:9a:de:55:cd:de:2d:d6:82:8b:
5e:5f:36:71:a3:47:35:c9:fc:17:5c:1d:69:57:05:
9b:6d:20:6b:04:4b:4e:7c:16:b7:9f:b1:5f:27:57:
49:b1:62:18:bd:8f:10:a2:14:9a:6e:65:77:13:e9:
5a:02:a2:0d:7d:54:f3:83:d8:a1:92:f2:b4:10:d4:
85:90:71:92:d4:f6:64:1a:2e:ff:b6:0f:a9:76:cd:
56:84:4b:f8:79:14:f5:81:1e:4a:5c:ee:d5:85:8e:
b8:be:d2:16:45:74:e4:da:99:c0:7f:20:b9:c2:b9:
66:ef:ae:17:d7:dc:ce:1a:f6:fe:46:a2:99:84:d5:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:2A:AF:CC:E9:D0:A6:07:80:86:7A:0F:E9:1E:20:9F:81:A3:24
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cd:00:39:85:fe:ab:2d:a7:ea:b0:e0:65:35:60:92:85:d8:
33:cc:fa:73:15:73:75:6c:97:e8:cb:b2:ae:cc:21:c5:92:6a:
2f:ab:60:c7:66:ec:63:4f:f6:af:75:c2:b1:2f:e7:3e:ac:34:
1e:17:b5:8a:66:aa:48:a3:1b:15:a7:81:5e:dc:a8:d0:0a:2d:
90:42:f4:b2:a1:0b:74:23:6a:1e:da:74:dc:fb:14:2a:21:48:
d7:7d:0f:0d:13:48:e0:bc:ab:69:db:6a:97:c9:30:5b:6e:0f:
68:73:b2:33:8f:6e:ef:bd:f4:0d:02:cd:57:e5:29:76:d7:b5:
10:8b:63:1a:1c:64:c4:f2:14:b8:7e:97:12:89:5f:cd:2e:4b:
d3:13:80:d9:bb:ad:23:2f:62:b1:94:56:08:c5:90:f2:3f:18:
ae:90:27:80:e2:28:0e:a5:9c:06:d3:8a:86:16:2f:7a:94:b0:
a5:e3:0f:62:9e:92:88:3f:24:4b:73:6a:97:08:04:2d:00:df:
a7:b8:97:e8:94:e6:c3:8f:d6:d4:68:53:de:c5:66:c8:e4:13:
a6:23:89:50:fd:6e:a6:ef:66:47:7e:60:51:4c:6b:8d:39:2d:
31:da:2a:c8:dd:30:13:72:86:04:cb:a0:97:26:d5:52:a7:a3:
ac:6d:10:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPrw6QXonZuz4fHhAnevpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx
MThiMmMwHhcNMjYwNDE3MDcwMTM1WhcNMjYwNDE4MDcwMTM1WjAzMTEwLwYDVQQD
EygyNWZiMmFhZmNjZTlkMGE2MDc4MDg2N2EwZmU5MWUyMDlmODFhMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUV7U8HUi3pIlelpwEojYKbhhx+r
gycMTirV0ezJRxIR2grtbMKESdiiBnzB4QH9M5FDfO0EurIvE6MGdVhD4twMW5Oz
7D3FSGUbE1wHtGEJBlB4bUAUKfMtEhdV5zz7dchV2NjM9dBorDGuriwvPyT4BBuX
kO4i+0dxaJqa3lXN3i3WgoteXzZxo0c1yfwXXB1pVwWbbSBrBEtOfBa3n7FfJ1dJ
sWIYvY8QohSabmV3E+laAqINfVTzg9ihkvK0ENSFkHGS1PZkGi7/tg+pds1WhEv4
eRT1gR5KXO7VhY64vtIWRXTk2pnAfyC5wrlm764X19zOGvb+RqKZhNUJeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX7Kq/M6dCmB4CGeg/pHiCfgaMkMB8GA1UdIwQY
MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt
NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk
LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs0AOYX+
qy2n6rDgZTVgkoXYM8z6cxVzdWyX6MuyrswhxZJqL6tgx2bsY0/2r3XCsS/nPqw0
Hhe1imaqSKMbFaeBXtyo0AotkEL0sqELdCNqHtp03PsUKiFI130PDRNI4Lyradtq
l8kwW24PaHOyM49u7730DQLNV+Updte1EItjGhxkxPIUuH6XEolfzS5L0xOA2but
Iy9isZRWCMWQ8j8YrpAngOIoDqWcBtOKhhYvepSwpeMPYp6SiD8kS3NqlwgELQDf
p7iX6JTmw4/W1GhT3sVmyOQTpiOJUP1upu9mR35gUUxrjTktMdoqyN0wE3KGBMug
lybVUqejrG0Qrg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:28 2026 by rpki-client