Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: BUKCyCgdNoFSuWxVWo6ycA/qvTDYuY6JdKEaXFnjnHY=
Subject key identifier: 11:70:C3:AB:80:EA:A4:96:02:F6:88:D9:C1:0C:0B:D3:31:AE:1A:27
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019DA45399C2BEE89E288AD1ED4D89BD597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:00:35 +0000
Manifest this update: Sun 19 Apr 2026 06:00:35 +0000
Manifest next update: Mon 20 Apr 2026 06:00:35 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: izGO952k85MzN80rOpgg+K1Q8Nu6F/Jnc+TjPLaLUMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:99:c2:be:e8:9e:28:8a:d1:ed:4d:89:bd:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Apr 19 06:00:35 2026 GMT
Not After : Apr 20 06:00:35 2026 GMT
Subject: CN=1170c3ab80eaa49602f688d9c10c0bd331ae1a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:cb:66:79:db:83:71:3e:db:6a:e6:f5:6d:
ff:48:68:e8:b9:4f:b6:57:18:8d:68:6e:5e:0d:6f:
19:d4:26:e0:d9:5b:cc:2f:89:07:b2:2e:c0:3c:66:
31:c2:13:ff:78:1f:c7:e8:60:51:ae:3c:41:16:cc:
b1:5a:45:ac:6e:74:fe:a6:50:b8:ea:3b:30:33:ef:
87:c2:2e:b1:d4:58:2b:ea:4d:d3:4e:7a:ba:ea:da:
e2:9e:71:c4:be:4e:aa:ba:92:60:67:dc:51:35:21:
18:81:e2:6b:63:5a:e8:b8:b2:5e:75:bf:52:53:8b:
5a:7c:61:51:c0:11:b4:a1:c3:a6:ae:95:27:57:e4:
25:8e:ba:8a:dc:43:a1:a3:2f:a2:f0:87:b5:b1:df:
42:1d:f0:92:34:30:56:72:3a:e2:ee:14:05:f8:30:
8a:37:16:95:70:16:cb:bd:4f:04:4b:6d:b9:48:73:
f2:5c:6c:3f:a3:18:06:b7:04:e7:7c:ee:1b:31:1e:
f9:c7:7d:fd:20:37:c4:ab:f0:72:86:21:26:92:c7:
c4:a7:7e:56:6e:23:64:dc:e3:f7:73:6c:08:55:5c:
4b:7e:b9:ca:5f:04:d8:d2:52:40:65:b5:4c:df:e4:
c4:da:7f:7e:8a:7b:3a:8d:7d:b6:6a:c9:e6:79:35:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:C3:AB:80:EA:A4:96:02:F6:88:D9:C1:0C:0B:D3:31:AE:1A:27
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:e5:ab:93:0d:35:42:60:08:20:09:ed:a2:77:c4:81:65:
b9:9a:55:af:6e:8b:8f:96:bc:7e:23:cb:26:53:d0:01:b3:50:
b9:9e:29:67:97:4d:2a:ea:1c:7a:29:e3:54:a0:3c:9b:ac:64:
fd:f7:02:fb:ad:89:e2:17:92:da:7e:66:da:ca:7e:cf:fb:ea:
a4:47:bb:3b:9a:3f:9d:6a:6d:c5:d1:bc:ea:b3:96:a2:be:46:
f9:dc:4e:67:0a:d9:c2:59:67:12:2a:c5:f8:06:0e:1a:30:43:
42:f1:3a:de:e6:cd:1f:7e:bf:3d:a7:29:07:34:58:93:4a:6f:
ea:41:13:23:11:47:e5:6e:bf:95:5c:9b:48:9d:fc:d1:3a:fc:
f4:f1:4d:55:b4:d5:c0:a6:22:68:8a:2a:3d:30:73:76:5c:90:
76:69:3e:d6:64:3a:d0:05:dd:9d:bc:5c:00:e1:57:5a:e3:33:
a4:11:9b:87:13:1e:0e:35:53:d9:b6:32:fb:ba:15:50:83:31:
4b:65:b8:ff:bf:01:67:34:73:e8:f2:fa:bb:7f:93:b5:ef:2c:
e4:20:fb:91:dd:ba:f9:81:5d:b2:ff:8d:6e:2c:28:32:6b:58:
93:02:95:b0:97:5c:1f:7e:4f:15:d9:16:75:93:55:d8:da:0b:
1e:06:d5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU5nCvuieKIrR7U2JvVl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjYwNDE5MDYwMDM1WhcNMjYwNDIwMDYwMDM1WjAzMTEwLwYDVQQD
EygxMTcwYzNhYjgwZWFhNDk2MDJmNjg4ZDljMTBjMGJkMzMxYWUxYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s/LZnnbg3E+22rm9W3/SGjouU+2
VxiNaG5eDW8Z1Cbg2VvML4kHsi7APGYxwhP/eB/H6GBRrjxBFsyxWkWsbnT+plC4
6jswM++Hwi6x1Fgr6k3TTnq66trinnHEvk6qupJgZ9xRNSEYgeJrY1rouLJedb9S
U4tafGFRwBG0ocOmrpUnV+QljrqK3EOhoy+i8Ie1sd9CHfCSNDBWcjri7hQF+DCK
NxaVcBbLvU8ES225SHPyXGw/oxgGtwTnfO4bMR75x339IDfEq/ByhiEmksfEp35W
biNk3OP3c2wIVVxLfrnKXwTY0lJAZbVM3+TE2n9+ins6jX22asnmeTWYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFww6uA6qSWAvaI2cEMC9MxrhonMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuXlq5MN
NUJgCCAJ7aJ3xIFluZpVr26Lj5a8fiPLJlPQAbNQuZ4pZ5dNKuoceinjVKA8m6xk
/fcC+62J4heS2n5m2sp+z/vqpEe7O5o/nWptxdG86rOWor5G+dxOZwrZwllnEirF
+AYOGjBDQvE63ubNH36/PacpBzRYk0pv6kETIxFH5W6/lVybSJ380Tr89PFNVbTV
wKYiaIoqPTBzdlyQdmk+1mQ60AXdnbxcAOFXWuMzpBGbhxMeDjVT2bYy+7oVUIMx
S2W4/78BZzRz6PL6u3+Tte8s5CD7kd26+YFdsv+NbiwoMmtYkwKVsJdcH35PFdkW
dZNV2NoLHgbVoQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:37 2026 by rpki-client