Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier: epjw9c6L3L8yhw+xvEGXwO9O5zW8be+3+jYmb0wKMP4=
Subject key identifier: 94:FC:E0:CF:CB:67:B0:68:E5:5F:43:F6:6C:4A:93:B4:76:0C:22:BE
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 019DA29CF2148D20BEA53724EC02E64B3A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 22:01:27 +0000
Manifest this update: Sat 18 Apr 2026 22:01:27 +0000
Manifest next update: Sun 19 Apr 2026 22:01:27 +0000
Files and hashes: 1: duVPwRuDqX3QDkaKIyT4P6ztbz4.roa (hash: kMA3LqVtrh17srYO2maurS2CA2PcrI4sa4rbcd9ehyQ=)
2: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: bNML2VGON5l2exVXJCgGzdkm7eo/xAYRWNhu17Z4z4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:f2:14:8d:20:be:a5:37:24:ec:02:e6:4b:3a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Apr 18 22:01:27 2026 GMT
Not After : Apr 19 22:01:27 2026 GMT
Subject: CN=94fce0cfcb67b068e55f43f66c4a93b4760c22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:b4:72:49:bb:5f:75:20:79:65:10:0d:d5:
16:86:a7:b6:5c:79:01:f4:74:f8:e3:3b:f0:ab:a9:
64:0c:78:14:f5:71:e0:2c:e6:c1:89:e9:23:49:fe:
8d:a1:e5:49:07:36:e3:38:ab:21:6d:6e:4b:90:4c:
95:b5:db:0d:9e:85:94:f5:b0:59:19:97:18:69:9d:
12:4e:8d:5e:1c:92:30:f0:4d:8f:c5:a0:86:d0:9c:
00:8b:e1:69:11:e0:64:18:60:41:aa:51:9f:a8:e5:
ce:9b:d6:8b:dc:f5:14:60:59:96:64:0f:ab:69:bf:
41:f0:90:19:83:94:5a:01:f0:c9:fc:40:06:2c:60:
76:f9:c2:2d:b8:33:db:20:99:5c:2a:b2:1e:ec:2e:
96:d3:99:86:29:11:d6:95:30:21:a8:86:43:6b:d9:
98:8f:b8:97:7d:a0:68:6d:d6:8c:7f:f1:72:b9:0c:
02:72:e0:18:c7:bd:88:82:4b:c5:5f:91:1b:87:e8:
d7:e7:e8:33:98:1d:ff:90:b3:4f:73:2c:b7:8c:1c:
0e:dd:3d:91:26:f2:39:74:15:90:35:7b:e3:c4:4f:
97:ad:42:1e:fb:ee:ce:7c:ce:f8:5f:7c:f4:3c:4a:
58:4a:60:a4:f5:c4:8f:64:3f:04:9d:27:18:8a:b1:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:E0:CF:CB:67:B0:68:E5:5F:43:F6:6C:4A:93:B4:76:0C:22:BE
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4e:19:af:cf:98:8e:54:f3:23:11:30:86:96:3e:42:e9:a1:
3c:44:1b:0e:2f:2a:4f:cc:0e:a6:d7:86:5f:b6:32:a9:a1:69:
e3:d7:6b:09:5e:67:22:c5:2b:d2:d2:00:4d:7c:f1:9e:e3:d0:
a1:a9:6e:4c:63:ef:0e:21:e5:d2:eb:e8:b6:15:66:6d:ad:5c:
20:e9:00:55:38:f6:e1:06:f3:a0:48:7b:53:6f:e4:b6:8f:c3:
d8:0e:5e:1d:c0:c0:cf:8c:a4:52:5e:75:48:83:3e:3e:02:d4:
3e:d5:08:65:17:46:2d:e4:ce:fd:d8:27:50:38:0e:6f:c6:f2:
d5:de:e7:18:0e:53:a3:6d:3a:1c:3c:c3:f5:96:3c:80:29:35:
c6:83:70:e3:69:58:a3:a4:25:46:d5:8e:7b:c8:5a:04:70:bc:
66:a3:ed:6f:6f:af:7e:a9:ea:2d:fb:1e:0c:16:68:b9:5b:21:
41:94:be:4b:9e:ef:d7:5c:fe:10:9e:f2:4b:21:39:a5:44:d3:
80:fc:ed:49:33:55:b7:cb:cf:78:8e:61:dd:64:a7:16:77:06:
1a:9f:29:72:1e:6e:eb:b0:f6:8d:4b:fd:2d:40:c9:99:00:d4:
7d:e6:9f:97:0d:2f:fb:44:e2:7a:34:da:92:f1:b7:fb:7d:a3:
8f:2b:92:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inPIUjSC+pTck7ALmSzoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk
YmFjYmEwHhcNMjYwNDE4MjIwMTI3WhcNMjYwNDE5MjIwMTI3WjAzMTEwLwYDVQQD
Eyg5NGZjZTBjZmNiNjdiMDY4ZTU1ZjQzZjY2YzRhOTNiNDc2MGMyMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a60ckm7X3UgeWUQDdUWhqe2XHkB
9HT44zvwq6lkDHgU9XHgLObBiekjSf6NoeVJBzbjOKshbW5LkEyVtdsNnoWU9bBZ
GZcYaZ0STo1eHJIw8E2PxaCG0JwAi+FpEeBkGGBBqlGfqOXOm9aL3PUUYFmWZA+r
ab9B8JAZg5RaAfDJ/EAGLGB2+cItuDPbIJlcKrIe7C6W05mGKRHWlTAhqIZDa9mY
j7iXfaBobdaMf/FyuQwCcuAYx72IgkvFX5Ebh+jX5+gzmB3/kLNPcyy3jBwO3T2R
JvI5dBWQNXvjxE+XrUIe++7OfM74X3z0PEpYSmCk9cSPZD8EnScYirGuLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT84M/LZ7Bo5V9D9mxKk7R2DCK+MB8GA1UdIwQY
MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct
MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy
LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs04Zr8+Y
jlTzIxEwhpY+QumhPEQbDi8qT8wOpteGX7YyqaFp49drCV5nIsUr0tIATXzxnuPQ
oaluTGPvDiHl0uvothVmba1cIOkAVTj24QbzoEh7U2/kto/D2A5eHcDAz4ykUl51
SIM+PgLUPtUIZRdGLeTO/dgnUDgOb8by1d7nGA5To206HDzD9ZY8gCk1xoNw42lY
o6QlRtWOe8haBHC8ZqPtb2+vfqnqLfseDBZouVshQZS+S57v11z+EJ7ySyE5pUTT
gPztSTNVt8vPeI5h3WSnFncGGp8pch5u67D2jUv9LUDJmQDUfeaflw0v+0TiejTa
kvG3+32jjyuSiA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:02 2026 by rpki-client