Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: sJiCQfW6Lz6fGOcQ8n+LjafSZKBL2zIqbNjfmyJThXA=
Subject key identifier: 81:4A:94:03:7F:EE:26:FF:FB:C7:54:44:2F:CC:96:61:4C:FC:92:62
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 019D98BDC322F5A9BB09C91A77E2F9A62E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 17A0
Signing time: Fri 17 Apr 2026 00:01:06 +0000
Manifest this update: Fri 17 Apr 2026 00:01:06 +0000
Manifest next update: Sat 18 Apr 2026 00:01:06 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: U56/jihRIyklDXbY0vZ69YdGfTCxtJsk1BKgflVVzms=)
2: _i3dzwW_EszihKFaFxYgzMY5p6w.roa (hash: C9SSGdcc7YzzmpkvenG+iGlQfE2KKjV6QnZm59ExRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c3:22:f5:a9:bb:09:c9:1a:77:e2:f9:a6:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Apr 17 00:01:06 2026 GMT
Not After : Apr 18 00:01:06 2026 GMT
Subject: CN=814a94037fee26fffbc754442fcc96614cfc9262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:55:65:fd:b4:4e:58:0b:24:49:ee:f4:9e:
0b:ea:5b:5e:0f:60:e7:40:4a:39:5e:5a:24:5c:ee:
00:10:c8:3e:88:ae:52:30:ac:fd:32:16:3d:14:13:
33:fc:6e:d8:12:12:74:83:89:20:e9:c9:2c:e4:7c:
65:4e:3a:3b:d8:1a:b1:8a:3c:a8:ae:ac:53:cf:cc:
ee:17:26:11:65:5c:55:f7:08:8b:c3:62:ff:9c:0b:
40:8b:a9:2f:a8:0b:63:aa:2b:09:f1:d5:61:8d:2f:
1e:de:80:2b:d2:a1:b2:ca:b3:7c:f7:6d:b5:2b:1c:
72:7d:8a:94:e2:28:c8:49:50:e0:38:c1:8c:9b:5c:
c8:c6:b4:50:94:19:55:a8:00:b4:f6:22:50:ce:5f:
e5:72:8d:dd:e6:0d:89:3e:a8:53:9b:61:87:65:ed:
bb:0c:60:e4:c9:44:1b:53:79:56:d6:b6:2b:b9:d1:
a9:47:06:d5:c7:22:4a:82:af:91:ab:32:9f:d3:84:
9d:6b:df:cb:44:01:30:ea:b3:1a:15:91:4b:1a:88:
f0:0c:ba:9f:9b:c1:ef:fd:c7:e9:97:13:22:db:a4:
bf:17:18:e4:87:7a:70:b8:48:78:20:42:b5:b5:5d:
ed:36:36:09:a7:ee:75:77:5e:86:3e:7e:61:43:3f:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4A:94:03:7F:EE:26:FF:FB:C7:54:44:2F:CC:96:61:4C:FC:92:62
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:ad:55:e8:d7:cf:17:da:f7:5e:35:f1:dc:a8:2b:5c:11:14:
f9:0d:8b:45:50:4d:7d:c8:19:a9:00:90:bd:72:17:00:85:08:
dc:91:74:76:9c:59:19:44:09:03:75:0f:5e:6f:4c:85:71:6f:
ea:e2:af:2d:e8:76:e8:31:47:7e:36:73:c3:0b:db:cf:22:b3:
63:f6:65:97:e4:ad:ee:de:70:61:b9:e1:32:27:9a:44:bf:93:
4a:64:27:9d:b5:dd:1d:8f:db:31:9c:8c:dc:1f:7e:92:3e:c7:
da:a6:6b:40:fa:a6:a8:a0:f9:42:32:8a:0a:b8:87:6c:3d:9d:
f9:3c:b4:11:2a:a8:c5:26:46:01:21:f2:05:aa:f8:b7:0b:d7:
da:7a:b6:3d:16:7e:78:0c:8e:ae:b7:bf:83:15:fb:0f:bd:d6:
e1:dd:07:eb:93:43:b6:27:c9:c8:c4:c3:ae:af:3b:40:97:3d:
6b:ac:08:dd:03:c2:f5:d8:df:16:f4:f2:c4:95:e3:43:60:6b:
91:7a:59:be:9a:cd:34:7a:6c:3b:84:39:2e:d8:4a:69:81:05:
5f:0e:ea:4f:3c:07:38:aa:e5:32:fe:37:7e:36:b7:3d:46:95:
51:63:5d:93:7a:13:03:90:d8:35:c2:ba:ee:69:6d:30:7c:e3:
e9:bf:dc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvcMi9am7Cckad+L5pi4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxM2Q1ZTEzNzlmZWE5ZDFkMGY3MjU2ZWQwZmM5MTgzYmU3
NGZlZmIwHhcNMjYwNDE3MDAwMTA2WhcNMjYwNDE4MDAwMTA2WjAzMTEwLwYDVQQD
Eyg4MTRhOTQwMzdmZWUyNmZmZmJjNzU0NDQyZmNjOTY2MTRjZmM5MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy5VZf20TlgLJEnu9J4L6lteD2Dn
QEo5XlokXO4AEMg+iK5SMKz9MhY9FBMz/G7YEhJ0g4kg6cks5HxlTjo72Bqxijyo
rqxTz8zuFyYRZVxV9wiLw2L/nAtAi6kvqAtjqisJ8dVhjS8e3oAr0qGyyrN89221
KxxyfYqU4ijISVDgOMGMm1zIxrRQlBlVqAC09iJQzl/lco3d5g2JPqhTm2GHZe27
DGDkyUQbU3lW1rYrudGpRwbVxyJKgq+RqzKf04Sda9/LRAEw6rMaFZFLGojwDLqf
m8Hv/cfplxMi26S/Fxjkh3pwuEh4IEK1tV3tNjYJp+51d16GPn5hQz8xowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFKlAN/7ib/+8dURC/MlmFM/JJiMB8GA1UdIwQY
MBaAFGE9XhN5/qnR0PclbtD8kYO+dP77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUt
N2Y3M2E0NjcxYTFlLzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUtN2Y3M2E0NjcxYTFl
LzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6a1V6NfP
F9r3XjXx3KgrXBEU+Q2LRVBNfcgZqQCQvXIXAIUI3JF0dpxZGUQJA3UPXm9MhXFv
6uKvLeh26DFHfjZzwwvbzyKzY/Zll+St7t5wYbnhMieaRL+TSmQnnbXdHY/bMZyM
3B9+kj7H2qZrQPqmqKD5QjKKCriHbD2d+Ty0ESqoxSZGASHyBar4twvX2nq2PRZ+
eAyOrre/gxX7D73W4d0H65NDtifJyMTDrq87QJc9a6wI3QPC9djfFvTyxJXjQ2Br
kXpZvprNNHpsO4Q5LthKaYEFXw7qTzwHOKrlMv43fja3PUaVUWNdk3oTA5DYNcK6
7mltMHzj6b/cag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:13 2026 by rpki-client