Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: zpyRc2YoqaD1of23YbLckXYzcCLHm42Fz8m93CeC7ik=
Subject key identifier: 8F:38:EE:26:8C:9D:0B:8D:B2:AC:5D:E0:B1:D4:BF:A6:CD:FA:36:69
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 019D99D064ADAD93340AF5B45765735216DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0D2B
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: CJtzVhmEB21UnuIZQ2j1Q4yvZsfxZt9Foz+TXBATTtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:64:ad:ad:93:34:0a:f5:b4:57:65:73:52:16:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=8f38ee268c9d0b8db2ac5de0b1d4bfa6cdfa3669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:e4:f6:bd:c0:9c:58:ec:ac:f3:07:19:c0:
cb:e8:e7:3d:51:58:40:85:fc:46:56:8e:34:6e:89:
bd:ae:f3:28:9b:b0:4c:00:bc:7e:67:a2:5a:a7:3a:
c6:98:13:ef:e6:83:07:5f:62:44:4f:a6:80:a4:ec:
04:5a:06:bd:d7:e5:7b:60:c3:90:91:d2:a9:9f:05:
8b:81:d6:32:be:82:ed:b4:52:5b:1a:9b:f0:22:27:
b3:2b:fe:8a:a3:08:9d:1e:0d:43:83:f2:49:5d:a5:
14:63:75:13:0d:3c:b3:07:2a:c8:1d:41:42:a6:d1:
89:e0:06:9a:61:f4:c1:c2:b7:46:0d:d5:ac:25:26:
53:f8:4e:61:1a:0b:6c:4f:f2:af:86:bf:58:57:ec:
10:e7:de:e0:2e:b9:15:cd:c5:b7:26:d9:eb:18:68:
fc:4e:55:b3:4d:cd:bf:88:df:70:26:73:d3:5d:30:
ef:9b:66:b3:bd:77:2c:85:b2:ee:7c:e9:38:10:31:
cf:b6:a9:43:f9:77:f2:bc:4d:89:ea:ab:7c:09:99:
9e:a9:71:c7:a0:db:7a:3e:f2:fd:2b:74:a2:b6:67:
fa:c1:76:1b:80:d2:32:e1:d7:dd:7c:fa:c6:f6:bf:
68:5a:c9:53:eb:d5:43:3f:2f:d0:81:a0:56:4e:05:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:EE:26:8C:9D:0B:8D:B2:AC:5D:E0:B1:D4:BF:A6:CD:FA:36:69
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:9e:b7:c8:1e:5d:a0:39:a4:69:07:a9:a0:ef:c2:78:a9:
88:d6:06:58:59:1a:0f:4a:54:ff:e0:88:08:ac:6b:2d:03:fe:
da:ef:38:3c:00:36:c2:d0:3e:fe:e4:c7:d6:ae:68:f6:1f:b4:
40:ad:97:03:bb:03:07:e7:50:35:fc:24:6c:a5:fd:16:e1:1d:
3e:89:1e:fd:19:0b:fc:5b:ce:dd:63:6c:16:ba:40:e4:b0:a8:
87:87:5a:27:ec:bc:89:bd:c6:0a:41:14:23:33:ea:05:e9:53:
1a:df:d5:e3:85:11:0c:f6:bb:19:89:c2:d9:15:1d:c4:c7:19:
2d:bd:83:b9:d6:49:f4:f7:87:ef:01:9b:59:14:f0:5b:2b:cc:
3c:ae:57:c6:47:5a:bc:95:ea:19:f4:94:11:9c:8d:2d:15:b7:
14:5f:03:ff:9c:46:d5:e9:24:91:f8:c9:ce:87:19:62:9c:ee:
0c:4c:3d:8a:17:ae:dc:58:c7:27:a1:22:46:ae:e3:4d:87:dc:
34:c6:83:3d:6b:6f:8c:bd:62:c3:39:24:82:9e:b1:4f:57:d7:
40:51:14:19:2a:50:ea:28:2d:65:ad:46:95:9a:59:b9:8f:01:
30:c7:a2:71:25:e8:97:e6:3e:1e:f2:7d:81:96:e6:18:ba:c7:
a2:ad:af:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0GStrZM0CvW0V2VzUhbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzdkMjRiMWQ3MWMwMjE0NzY5ZjExOWRmNzI5OGZmMGNm
ODk3YjAwHhcNMjYwNDE3MDUwMTA0WhcNMjYwNDE4MDUwMTA0WjAzMTEwLwYDVQQD
Eyg4ZjM4ZWUyNjhjOWQwYjhkYjJhYzVkZTBiMWQ0YmZhNmNkZmEzNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjk9r3AnFjsrPMHGcDL6Oc9UVhA
hfxGVo40bom9rvMom7BMALx+Z6JapzrGmBPv5oMHX2JET6aApOwEWga91+V7YMOQ
kdKpnwWLgdYyvoLttFJbGpvwIiezK/6KowidHg1Dg/JJXaUUY3UTDTyzByrIHUFC
ptGJ4AaaYfTBwrdGDdWsJSZT+E5hGgtsT/Kvhr9YV+wQ597gLrkVzcW3JtnrGGj8
TlWzTc2/iN9wJnPTXTDvm2azvXcshbLufOk4EDHPtqlD+XfyvE2J6qt8CZmeqXHH
oNt6PvL9K3Sitmf6wXYbgNIy4dfdfPrG9r9oWslT69VDPy/QgaBWTgXRVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI847iaMnQuNsqxd4LHUv6bN+jZpMB8GA1UdIwQY
MBaAFMh30ksdccAhR2nxGd9ymP8M+JewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYt
OWVjMjhhZTY1NzQ1LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYtOWVjMjhhZTY1NzQ1
LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrmet8ge
XaA5pGkHqaDvwnipiNYGWFkaD0pU/+CICKxrLQP+2u84PAA2wtA+/uTH1q5o9h+0
QK2XA7sDB+dQNfwkbKX9FuEdPoke/RkL/FvO3WNsFrpA5LCoh4daJ+y8ib3GCkEU
IzPqBelTGt/V44URDPa7GYnC2RUdxMcZLb2DudZJ9PeH7wGbWRTwWyvMPK5Xxkda
vJXqGfSUEZyNLRW3FF8D/5xG1ekkkfjJzocZYpzuDEw9iheu3FjHJ6EiRq7jTYfc
NMaDPWtvjL1iwzkkgp6xT1fXQFEUGSpQ6igtZa1GlZpZuY8BMMeicSXol+Y+HvJ9
gZbmGLrHoq2vMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:41 2026 by rpki-client