Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: scxl4gB87b0r3AfCiXnbKIdU9eN8rYrXaV0tNL9Of30=
Subject key identifier: A8:DA:86:84:9F:A0:9C:DF:33:A2:26:8A:AE:75:0A:BB:06:12:AB:FD
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019D98BD80F8A7DAEE34B89E23FEBFDB9173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 0675
Signing time: Fri 17 Apr 2026 00:00:49 +0000
Manifest this update: Fri 17 Apr 2026 00:00:49 +0000
Manifest next update: Sat 18 Apr 2026 00:00:49 +0000
Files and hashes: 1: I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa (hash: fCpVVld0L94vFLqVKGMCfHN/hOXwKxcQlDEoGOWDUFo=)
2: XExavfpXuaZ3MydZbyDnyFn5ni0.roa (hash: WQdTsTZhStmdezt2VotpAadyLft0mMYrZPTmmKNNRro=)
3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: yV9+v/BkDr36POCi8UE0KWOgUWoYhmgwCOEZKft6nlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:80:f8:a7:da:ee:34:b8:9e:23:fe:bf:db:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Apr 17 00:00:49 2026 GMT
Not After : Apr 18 00:00:49 2026 GMT
Subject: CN=a8da86849fa09cdf33a2268aae750abb0612abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:e3:b6:73:88:81:2e:de:b4:7a:17:04:1d:
b1:47:1f:34:2f:3c:fd:1d:be:2b:ec:a5:d6:1f:c6:
5f:ec:ee:18:e8:a2:a4:d3:a8:95:5f:d7:d0:66:3e:
74:92:fc:17:ac:b3:a3:d6:a2:ba:1c:79:c6:ab:91:
02:dd:ac:be:de:5e:c7:09:b6:89:9c:9d:60:01:5b:
90:36:8b:d1:72:d8:b8:e3:2a:a7:9c:80:90:41:2a:
b1:c8:3b:eb:72:e1:6d:40:27:67:55:34:2d:08:c4:
fb:c6:84:d3:d7:25:3c:ce:4c:49:f8:7a:27:c2:95:
be:67:cb:01:fa:cb:a6:91:29:f8:fe:82:42:49:1d:
b6:90:fb:1e:8e:01:c9:b9:ef:90:11:cf:bf:22:1d:
73:78:92:cd:06:2e:4c:f7:7c:35:3f:2f:10:1f:14:
a8:cd:7a:81:f0:b6:f1:de:04:e6:65:74:6b:d4:19:
cc:98:d8:1b:a6:4b:e7:b2:ff:f1:92:c3:e5:8c:db:
b1:37:b7:d0:79:9c:96:75:28:e9:20:87:da:99:9d:
64:fc:99:f5:04:74:86:48:a2:60:b6:36:8c:de:be:
9d:3e:c9:84:63:47:f6:d7:c2:93:b2:64:24:88:e4:
d7:41:62:f6:4a:d7:2c:de:6f:8f:0f:81:54:db:90:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:86:84:9F:A0:9C:DF:33:A2:26:8A:AE:75:0A:BB:06:12:AB:FD
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d2:0f:a6:1c:58:97:97:d7:ed:e5:fe:4f:f3:34:d6:fb:a2:
86:40:b6:84:cd:56:a2:6c:95:f5:d2:1a:f2:e0:2d:f6:e5:95:
de:f2:b2:92:e6:ad:f7:ba:39:0a:fb:d9:b7:ca:e3:38:c0:f7:
83:20:1e:dd:0a:0c:1a:14:5e:9b:0b:b9:6b:6a:99:e8:92:91:
af:d3:2c:c9:df:1c:2b:58:01:49:60:2d:72:1a:00:dd:fb:23:
06:3b:41:21:75:89:c1:70:f9:88:56:d8:f1:71:3a:fb:b6:61:
03:9e:8b:4d:e6:59:e2:23:da:3e:ed:34:58:56:10:af:f0:c1:
5f:15:c9:89:44:f5:a0:32:01:db:4b:10:50:d0:ac:ff:71:26:
39:ce:be:63:e8:79:0c:73:04:3c:0c:a2:30:ec:56:96:4b:b9:
55:c9:d2:4f:1d:12:58:7f:4f:c9:50:0d:e6:d6:ab:b3:62:2f:
99:53:bc:cd:04:c3:85:5b:df:27:f7:d0:d1:54:6c:f3:f8:b5:
3b:06:3c:0e:1d:c8:dd:6e:31:16:5b:a2:ff:17:f6:3d:98:ac:
e6:f9:1f:9f:d7:3a:5a:0f:13:ea:dd:de:8d:3a:40:5b:e6:9b:
00:03:ec:9c:15:24:e8:4f:66:e9:d2:e3:81:be:fe:6c:68:87:
6f:97:ff:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvYD4p9ruNLieI/6/25FzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy
ODE2OGQwHhcNMjYwNDE3MDAwMDQ5WhcNMjYwNDE4MDAwMDQ5WjAzMTEwLwYDVQQD
EyhhOGRhODY4NDlmYTA5Y2RmMzNhMjI2OGFhZTc1MGFiYjA2MTJhYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFLjtnOIgS7etHoXBB2xRx80Lzz9
Hb4r7KXWH8Zf7O4Y6KKk06iVX9fQZj50kvwXrLOj1qK6HHnGq5EC3ay+3l7HCbaJ
nJ1gAVuQNovRcti44yqnnICQQSqxyDvrcuFtQCdnVTQtCMT7xoTT1yU8zkxJ+Hon
wpW+Z8sB+sumkSn4/oJCSR22kPsejgHJue+QEc+/Ih1zeJLNBi5M93w1Py8QHxSo
zXqB8Lbx3gTmZXRr1BnMmNgbpkvnsv/xksPljNuxN7fQeZyWdSjpIIfamZ1k/Jn1
BHSGSKJgtjaM3r6dPsmEY0f218KTsmQkiOTXQWL2Stcs3m+PD4FU25C+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjahoSfoJzfM6Imiq51CrsGEqv9MB8GA1UdIwQY
MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt
YzdlMjUyMGM0Y2VhLzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh
LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdIPphxY
l5fX7eX+T/M01vuihkC2hM1WomyV9dIa8uAt9uWV3vKykuat97o5CvvZt8rjOMD3
gyAe3QoMGhRemwu5a2qZ6JKRr9Msyd8cK1gBSWAtchoA3fsjBjtBIXWJwXD5iFbY
8XE6+7ZhA56LTeZZ4iPaPu00WFYQr/DBXxXJiUT1oDIB20sQUNCs/3EmOc6+Y+h5
DHMEPAyiMOxWlku5VcnSTx0SWH9PyVAN5tars2IvmVO8zQTDhVvfJ/fQ0VRs8/i1
OwY8Dh3I3W4xFlui/xf2PZis5vkfn9c6Wg8T6t3ejTpAW+abAAPsnBUk6E9m6dLj
gb7+bGiHb5f/Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:48:08 2026 by rpki-client