
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: Kt9jmgSczYD7ytwNlAHgq+w43SRZBfHblCIQTy8bPYk=
Subject key identifier: 1E:5B:C1:6C:83:AD:EB:19:A1:21:79:24:1D:E6:FA:88:75:84:60:01
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 019D98BDF021DAC722931E14C31FF89DE0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1609
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: duSbs1Y82ux4jGzdWzwYO9FVG00.roa (hash: QHGY5HrFdT382Sq+4MEu4KIOluOvbBf/5zNCTvenn7M=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: opgqo4YM9ClDjtbVaNmF1r+ut7lbl0Kfu+JgPyk9LZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f0:21:da:c7:22:93:1e:14:c3:1f:f8:9d:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=1e5bc16c83adeb19a12179241de6fa8875846001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:6a:94:16:2a:5e:58:b2:26:cc:7b:0b:50:
44:dd:1b:96:46:79:60:d0:b5:43:c0:de:05:0c:d5:
b1:8f:2c:31:82:fa:85:26:2c:fe:3a:ee:c0:a8:12:
df:08:17:b5:43:dd:ab:da:53:a3:46:3e:6e:77:c4:
f0:d2:6b:32:51:30:30:e3:61:70:94:19:ab:38:76:
0c:50:44:70:9f:a1:62:3d:1e:49:49:f8:87:6b:3b:
1f:e1:5d:51:17:49:cd:93:51:c3:7a:e3:70:9e:45:
32:7c:6a:51:92:c7:8d:3e:44:1b:3a:0a:cf:8a:78:
ea:03:00:18:ad:1a:dd:70:8e:14:58:86:7e:0c:85:
ee:4b:3f:e3:21:a5:d2:ed:fe:d7:f3:17:eb:13:29:
d7:29:1f:04:02:58:d4:b4:0e:d7:48:be:74:81:a4:
48:fa:51:07:19:34:e7:41:28:28:32:6f:d8:37:7e:
43:3c:22:89:3d:76:90:c8:9a:cb:7f:9c:32:37:f5:
5b:c6:2f:6d:03:65:dc:ae:0c:81:8c:65:99:0d:d2:
96:19:6e:d9:e9:dc:47:a7:d4:b8:5d:10:53:96:7f:
be:17:99:c5:1d:0a:75:de:93:a2:d7:54:87:59:4c:
b9:55:e5:80:d3:76:32:1d:23:73:10:2c:99:9c:25:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:C1:6C:83:AD:EB:19:A1:21:79:24:1D:E6:FA:88:75:84:60:01
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bc:41:49:53:61:26:5e:56:22:c4:1b:fb:5f:de:a0:c2:93:
75:5e:23:88:9a:d0:5d:f1:54:45:97:d4:94:3e:d9:a8:fb:f7:
83:88:17:92:27:32:a9:cd:ad:8f:0e:c4:a8:5b:99:ef:02:cb:
23:2e:67:3c:e9:77:9c:3c:99:4b:61:64:eb:d7:1f:4d:75:f6:
4a:15:c3:02:99:43:31:1b:25:83:48:53:ff:08:d1:1b:d7:73:
88:e8:c5:31:e6:4e:72:22:b7:8a:3f:93:0e:15:d6:a7:fe:56:
29:d0:96:44:43:9b:49:d7:41:81:ad:d7:03:5d:c7:61:66:3d:
73:53:d6:b2:d5:33:b0:c3:47:9b:95:f6:7e:5b:5a:6a:4a:3f:
ea:cf:4c:18:80:45:29:ac:10:de:fd:29:88:af:4c:e0:28:d7:
93:ef:d6:57:cb:92:e0:22:dd:0d:0d:b5:42:33:38:7a:16:0f:
ea:3e:1a:cd:83:90:4f:be:60:ce:7c:52:81:48:d5:a8:02:66:
75:bf:77:59:8b:99:88:58:46:ea:0f:1f:1a:6d:1e:26:b0:23:
38:bd:13:12:b9:97:f0:93:64:62:2e:e7:0e:77:84:6f:f2:cc:
d7:f8:79:41:23:0c:b6:fd:0a:ff:3c:a1:63:d8:e9:16:f7:41:
23:60:2b:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvfAh2scikx4Uwx/4neC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWVlNTc5ZTAxMzIxOGY1NzEzODY0MTNlMmM1YjJiYzI0
NWE4MzYwHhcNMjYwNDE3MDAwMTE3WhcNMjYwNDE4MDAwMTE3WjAzMTEwLwYDVQQD
EygxZTViYzE2YzgzYWRlYjE5YTEyMTc5MjQxZGU2ZmE4ODc1ODQ2MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPFqlBYqXliyJsx7C1BE3RuWRnlg
0LVDwN4FDNWxjywxgvqFJiz+Ou7AqBLfCBe1Q92r2lOjRj5ud8Tw0msyUTAw42Fw
lBmrOHYMUERwn6FiPR5JSfiHazsf4V1RF0nNk1HDeuNwnkUyfGpRkseNPkQbOgrP
injqAwAYrRrdcI4UWIZ+DIXuSz/jIaXS7f7X8xfrEynXKR8EAljUtA7XSL50gaRI
+lEHGTTnQSgoMm/YN35DPCKJPXaQyJrLf5wyN/Vbxi9tA2XcrgyBjGWZDdKWGW7Z
6dxHp9S4XRBTln++F5nFHQp13pOi11SHWUy5VeWA03YyHSNzECyZnCXceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5bwWyDresZoSF5JB3m+oh1hGABMB8GA1UdIwQY
MBaAFMqu5XngEyGPVxOGQT4sWyvCRag2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQt
YTVkMTE0OGYyNWJkLzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NTk4NzQtZTdmMi00NWZkLTgxOWQtYTVkMTE0OGYyNWJk
LzEveXE3bGVlQVRJWTlYRTRaQlBpeGJLOEpGcURZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7xBSVNh
Jl5WIsQb+1/eoMKTdV4jiJrQXfFURZfUlD7ZqPv3g4gXkicyqc2tjw7EqFuZ7wLL
Iy5nPOl3nDyZS2Fk69cfTXX2ShXDAplDMRslg0hT/wjRG9dziOjFMeZOciK3ij+T
DhXWp/5WKdCWREObSddBga3XA13HYWY9c1PWstUzsMNHm5X2fltaako/6s9MGIBF
KawQ3v0piK9M4CjXk+/WV8uS4CLdDQ21QjM4ehYP6j4azYOQT75gznxSgUjVqAJm
db93WYuZiFhG6g8fGm0eJrAjOL0TErmX8JNkYi7nDneEb/LM1/h5QSMMtv0K/zyh
Y9jpFvdBI2ArbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:38 2026 by rpki-client