Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json)
Hash identifier: j6V76Auy4yE6rE5ITt8fsITpfwoZ43GAk6j5I0M4tEM=
Subject key identifier: 6B:88:B4:62:59:A5:7D:28:68:E9:7F:48:76:1C:51:F1:F2:4D:66:8A
Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295
Certificate serial: 019D9CD17B0F6BA44654FD150FFD4E9F6986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
Manifest number: 08AC
Signing time: Fri 17 Apr 2026 19:01:07 +0000
Manifest this update: Fri 17 Apr 2026 19:01:07 +0000
Manifest next update: Sat 18 Apr 2026 19:01:07 +0000
Files and hashes: 1: ByyzWxM12G0BPucLG6JiwdJtgEE.roa (hash: 4G2lH2XdNKPJSfTS1f9mdoy30Er7U9NNS0wrRk3c+sc=)
2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: Pw1Nj9aphNrG0l6WhKwV03gEPxlCa1O3R9BrsiwqCf4=)
3: lH39RLJn2Hz8-UQkPP2o_JvX24I.roa (hash: iB4qVFkaq5F/oZHjDXHDMbbQUo5Vscic17RgZki9i5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:7b:0f:6b:a4:46:54:fd:15:0f:fd:4e:9f:69:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295
Validity
Not Before: Apr 17 19:01:07 2026 GMT
Not After : Apr 18 19:01:07 2026 GMT
Subject: CN=6b88b46259a57d2868e97f48761c51f1f24d668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:9b:e9:06:0a:43:c7:f6:be:a1:af:81:16:
75:ac:00:50:1f:c3:a5:1f:65:df:da:47:31:a5:d8:
c5:fb:5b:e9:cf:0c:ec:c7:bf:f3:ee:35:9f:35:d2:
82:e6:06:4c:8b:37:e3:36:bf:be:6a:8d:dd:32:bb:
11:fe:2a:ef:f6:2b:02:38:b8:00:61:22:a6:42:be:
a5:b0:c3:5b:32:49:fa:90:0f:a5:53:5d:55:3d:9f:
ff:d6:05:df:cf:46:46:c6:48:bb:2a:bc:39:12:6a:
ae:54:bb:37:ba:9d:a8:7f:3b:cc:8f:1e:9f:bb:a7:
36:a2:4f:fb:b0:21:e0:7c:d0:cc:a2:3f:f1:44:fe:
27:b6:0c:ee:d3:d7:92:46:ba:01:68:52:f4:8b:b9:
72:ed:3d:06:cc:ea:b9:64:65:32:3f:92:b4:b6:be:
11:87:02:6c:36:ce:57:ca:53:05:63:97:82:7b:1a:
92:9c:59:de:75:25:c3:63:37:8d:a0:46:69:50:2d:
f0:2a:ee:2f:58:3c:75:ee:ee:f8:fb:ff:f0:65:3b:
dd:69:fb:60:fb:42:47:08:37:c5:1e:0d:f6:ed:6c:
ad:6c:b8:1b:fe:38:74:c4:58:30:6a:7d:0c:88:be:
ba:0d:27:15:9a:3a:74:44:9a:5b:3e:04:e3:f3:1c:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:B4:62:59:A5:7D:28:68:E9:7F:48:76:1C:51:F1:F2:4D:66:8A
X509v3 Authority Key Identifier:
keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:d2:36:0e:b6:10:b7:d1:a0:96:c9:c7:ca:4e:d8:e4:39:
a7:6f:77:83:0d:de:4c:1f:59:79:99:c4:85:7d:bf:10:a9:6f:
12:28:5d:0a:7f:ce:bd:e1:37:8a:ca:aa:e6:f5:f8:31:f2:1d:
98:89:50:78:05:03:25:76:46:a7:8f:cc:ce:f8:6d:cc:d2:db:
f5:62:ec:95:5a:33:fd:3c:9e:46:04:e4:b8:f9:86:1e:64:d2:
58:d3:50:e2:3b:35:58:24:df:19:8b:a5:59:63:d4:05:ed:46:
ca:c0:3f:1e:1a:b9:ff:fb:ba:18:26:b4:7c:1b:3a:24:95:de:
63:8b:24:fe:96:13:d9:d8:fe:1d:e9:1c:c3:a8:87:e5:fb:2b:
19:42:a6:9a:1f:a8:97:86:cc:f7:bb:cd:a5:a5:cc:b7:1c:8a:
50:38:7f:d6:48:11:c8:08:82:1f:24:da:51:cb:42:6e:bc:ec:
9e:14:87:b4:1e:5b:ea:60:a1:52:6d:1a:e3:cd:73:e3:4f:bc:
4f:e5:4e:18:d7:bd:24:02:e8:01:d4:3d:95:f0:e7:85:11:a0:
93:34:44:c3:d7:7b:1d:6a:37:ef:b5:6a:5b:82:42:56:77:5e:
cd:fb:f5:ba:7d:d5:f9:85:20:be:b0:c4:74:59:1d:33:7d:20:
67:7d:21:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0XsPa6RGVP0VD/1On2mGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm
YjQyOTUwHhcNMjYwNDE3MTkwMTA3WhcNMjYwNDE4MTkwMTA3WjAzMTEwLwYDVQQD
Eyg2Yjg4YjQ2MjU5YTU3ZDI4NjhlOTdmNDg3NjFjNTFmMWYyNGQ2NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniKb6QYKQ8f2vqGvgRZ1rABQH8Ol
H2Xf2kcxpdjF+1vpzwzsx7/z7jWfNdKC5gZMizfjNr++ao3dMrsR/irv9isCOLgA
YSKmQr6lsMNbMkn6kA+lU11VPZ//1gXfz0ZGxki7Krw5EmquVLs3up2ofzvMjx6f
u6c2ok/7sCHgfNDMoj/xRP4ntgzu09eSRroBaFL0i7ly7T0GzOq5ZGUyP5K0tr4R
hwJsNs5XylMFY5eCexqSnFnedSXDYzeNoEZpUC3wKu4vWDx17u74+//wZTvdaftg
+0JHCDfFHg327WytbLgb/jh0xFgwan0MiL66DScVmjp0RJpbPgTj8xyOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuItGJZpX0oaOl/SHYcUfHyTWaKMB8GA1UdIwQY
MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt
NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5
LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZvSNg62
ELfRoJbJx8pO2OQ5p293gw3eTB9ZeZnEhX2/EKlvEihdCn/OveE3isqq5vX4MfId
mIlQeAUDJXZGp4/MzvhtzNLb9WLslVoz/TyeRgTkuPmGHmTSWNNQ4js1WCTfGYul
WWPUBe1GysA/Hhq5//u6GCa0fBs6JJXeY4sk/pYT2dj+Hekcw6iH5fsrGUKmmh+o
l4bM97vNpaXMtxyKUDh/1kgRyAiCHyTaUctCbrzsnhSHtB5b6mChUm0a481z40+8
T+VOGNe9JALoAdQ9lfDnhRGgkzREw9d7HWo377VqW4JCVndezfv1un3V+YUgvrDE
dFkdM30gZ30hxQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:23 2026 by rpki-client