Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: AUeuFBdGKe3ukSiQwoSYXLAqfK3J53G6m34NNa2EDg4=
Subject key identifier: A4:57:9F:ED:A6:58:12:68:09:40:C7:DF:A1:EA:4E:73:8C:C4:27:04
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 019D9962B6B7832E8224E3B8BC016DFD110F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: 0542
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: QdTb0RR0urv3B5QUl+gJFhkhKmKXe/kMuYgzm4EFPNI=)
2: yjWJBP_-NJfhexDZzlwqedaPyY4.roa (hash: SkEjGblzIkRFnt59eOfa2NG/dhlC1N31bem5GR7D9p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b6:b7:83:2e:82:24:e3:b8:bc:01:6d:fd:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=a4579feda65812680940c7dfa1ea4e738cc42704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:06:e4:43:e1:a5:eb:b1:3c:2d:8b:da:e8:
45:ed:70:c5:74:1b:71:c2:7d:5c:5a:91:bb:55:ed:
a6:30:94:7f:49:6a:ad:f1:ae:0f:af:c2:18:3f:08:
ea:57:45:6c:57:67:bd:e0:f0:70:b9:50:54:f6:d3:
8a:f2:ee:7f:7a:95:15:92:ba:3e:6c:81:fb:bd:ea:
a6:f9:ef:6b:d2:f0:b8:ef:0f:7a:5a:3a:f6:40:70:
fa:66:9e:a6:7b:07:4e:9c:1d:a2:8b:5f:9b:1e:2a:
8e:71:64:99:ff:7c:35:d6:e7:8a:c0:c8:18:99:20:
c6:6d:6a:31:9a:51:0b:da:81:fd:03:d7:50:d9:b0:
82:3a:68:3b:16:b8:97:c0:4a:33:16:36:bc:22:cd:
e6:44:c1:f3:73:93:c2:51:5d:7a:75:57:d6:b7:e4:
13:11:27:69:a4:46:c2:73:09:93:b7:6c:4b:67:e1:
19:0d:44:4a:fa:bc:6e:fe:c1:03:a9:8e:fc:8b:5d:
9f:8f:3d:14:f2:19:b3:53:33:ca:a9:49:aa:75:16:
1e:41:af:57:fc:f0:76:94:23:05:f4:2b:22:bf:45:
f5:d8:12:9f:94:20:73:03:b9:ed:be:6a:c7:c1:08:
6d:90:20:1c:c5:a6:f4:00:7e:f0:99:5b:81:30:7c:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:9F:ED:A6:58:12:68:09:40:C7:DF:A1:EA:4E:73:8C:C4:27:04
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:5a:b0:77:cf:6a:2e:da:5f:0d:ba:f0:37:b9:2a:9d:40:
25:f0:76:bb:70:fe:fc:43:17:a0:4e:4d:82:96:2d:0f:bb:1f:
31:52:27:80:dc:3a:10:6f:2d:df:e7:e7:a2:6b:1e:44:46:89:
ea:8c:69:1a:5a:2d:e2:61:93:ff:41:c4:02:1f:0d:76:69:17:
49:42:5b:73:96:3c:54:ee:52:4b:32:2d:b6:62:54:85:33:04:
b7:b8:9c:6e:9c:84:38:3b:4f:41:63:f9:31:40:5f:e8:33:03:
e6:ff:c1:fc:58:6e:7d:2b:14:9e:40:5f:42:8d:6c:41:7a:53:
ec:8b:8a:98:c5:39:c1:d6:89:fa:17:f0:73:e2:f8:ee:2f:38:
27:8b:b3:0e:f1:da:e2:d3:e0:c5:4c:9f:95:62:eb:b4:11:10:
1a:f1:7a:dd:82:95:69:f6:e8:64:53:60:a0:20:c1:39:37:ce:
a7:9e:ec:c5:56:d0:3c:15:3b:2e:ec:6a:8d:66:05:eb:16:d8:
55:63:13:3f:d8:54:d3:47:10:3b:58:a2:9b:e6:0e:b7:03:68:
2e:8a:19:ef:d9:98:a3:7c:39:69:00:8f:e6:f6:69:22:c2:81:
c1:6c:7d:fe:70:c0:95:e4:b2:f2:fd:d0:8a:26:dd:14:80:a2:
98:68:57:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYra3gy6CJOO4vAFt/REPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOWNmOWE5ZTBiNjQ2MWFkODMzODc1YWMxMTY4Zjg5MjNm
ZDU1MGIwHhcNMjYwNDE3MDMwMTE2WhcNMjYwNDE4MDMwMTE2WjAzMTEwLwYDVQQD
EyhhNDU3OWZlZGE2NTgxMjY4MDk0MGM3ZGZhMWVhNGU3MzhjYzQyNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8wG5EPhpeuxPC2L2uhF7XDFdBtx
wn1cWpG7Ve2mMJR/SWqt8a4Pr8IYPwjqV0VsV2e94PBwuVBU9tOK8u5/epUVkro+
bIH7veqm+e9r0vC47w96Wjr2QHD6Zp6mewdOnB2ii1+bHiqOcWSZ/3w11ueKwMgY
mSDGbWoxmlEL2oH9A9dQ2bCCOmg7FriXwEozFja8Is3mRMHzc5PCUV16dVfWt+QT
ESdppEbCcwmTt2xLZ+EZDURK+rxu/sEDqY78i12fjz0U8hmzUzPKqUmqdRYeQa9X
/PB2lCMF9Csiv0X12BKflCBzA7ntvmrHwQhtkCAcxab0AH7wmVuBMHwWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRXn+2mWBJoCUDH36HqTnOMxCcEMB8GA1UdIwQY
MBaAFGGc+angtkYa2DOHWsEWj4kj/VULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzIt
MTRhZmFlOTEzMzZkLzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNmJmYWItZWFjNi00YTQyLTg4NzItMTRhZmFlOTEzMzZk
LzEvWVp6NXFlQzJSaHJZTTRkYXdSYVBpU1A5VlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4xasHfP
ai7aXw268De5Kp1AJfB2u3D+/EMXoE5NgpYtD7sfMVIngNw6EG8t3+fnomseREaJ
6oxpGlot4mGT/0HEAh8NdmkXSUJbc5Y8VO5SSzIttmJUhTMEt7icbpyEODtPQWP5
MUBf6DMD5v/B/FhufSsUnkBfQo1sQXpT7IuKmMU5wdaJ+hfwc+L47i84J4uzDvHa
4tPgxUyflWLrtBEQGvF63YKVafboZFNgoCDBOTfOp57sxVbQPBU7LuxqjWYF6xbY
VWMTP9hU00cQO1iim+YOtwNoLooZ79mYo3w5aQCP5vZpIsKBwWx9/nDAleSy8v3Q
iibdFICimGhX4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:55 2026 by rpki-client