Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: O3tkhEIStd9Xw9shRUN/wp7pgo46cmu0hKDbKD5k338=
Subject key identifier: A1:AC:A7:BF:56:B0:71:35:91:EF:63:E0:B3:AE:BE:A2:FD:9B:CC:DB
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019DCDF5714217B574C58F7298B16C0D703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 13BD
Signing time: Mon 27 Apr 2026 08:01:47 +0000
Manifest this update: Mon 27 Apr 2026 08:01:47 +0000
Manifest next update: Tue 28 Apr 2026 08:01:47 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: AHRmf7ywkQSxVKYpTUhqnd1l7+IyvHxCoDTZHAEMhIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:71:42:17:b5:74:c5:8f:72:98:b1:6c:0d:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Apr 27 08:01:47 2026 GMT
Not After : Apr 28 08:01:47 2026 GMT
Subject: CN=a1aca7bf56b0713591ef63e0b3aebea2fd9bccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:1d:94:c7:30:aa:71:c4:af:d0:09:c7:71:
32:a4:97:76:e1:91:e2:a0:41:12:e3:3c:2b:c5:96:
7f:67:08:4f:cb:fb:40:03:38:e9:96:db:bb:67:67:
20:11:3a:f3:08:35:31:6a:6e:8b:3c:63:2c:35:cf:
56:e6:54:5c:5e:3a:c6:ca:6c:55:39:dd:4e:c2:e3:
80:f7:f9:f4:e9:5a:d5:3b:1b:e6:2f:cd:ed:03:ef:
04:07:43:df:9f:ff:e2:f6:dd:8b:26:33:f3:c8:46:
9d:f7:c5:a8:a4:60:b6:34:ab:2d:36:a7:d4:11:e8:
04:fe:e8:cc:b2:60:69:ae:a5:04:f7:5d:91:22:d0:
e1:82:2e:87:fd:67:e6:f0:f2:a6:53:c6:23:48:2f:
a5:0d:d0:30:75:57:3c:70:ad:e8:de:01:08:a5:75:
d9:ba:ec:63:5a:1e:0f:15:d3:3a:60:02:1a:d7:18:
e0:f0:53:72:70:a1:8d:e8:04:d4:3f:c2:de:4c:d0:
07:e0:d4:9d:0f:23:0a:20:38:e5:ee:84:38:83:7b:
7e:75:58:db:2f:d3:5b:c7:d2:a5:e9:30:90:1e:7d:
f3:71:a3:21:b6:7d:78:a8:a6:06:68:28:4c:cd:9a:
d8:c9:3e:83:be:ee:3b:33:dd:c5:6f:90:be:91:84:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:A7:BF:56:B0:71:35:91:EF:63:E0:B3:AE:BE:A2:FD:9B:CC:DB
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:84:30:5c:b5:2f:1f:31:7d:9c:dc:02:85:89:bb:8b:c0:24:
72:fc:0d:30:13:3b:b6:ab:02:9e:19:c1:9b:04:5d:f3:8a:41:
81:a9:24:32:ed:9f:17:f5:fc:c3:03:3e:00:fd:e9:95:1b:21:
e0:3f:9f:ac:74:d1:6d:e6:05:95:96:0b:5b:37:5b:a0:58:b0:
c8:9b:fe:75:90:68:2c:2b:19:98:bf:f4:85:58:c4:10:d0:9f:
ea:8f:d6:ba:c6:a3:d9:bb:8b:da:58:1f:a5:bf:35:36:9e:60:
ae:ff:8e:9d:de:40:39:35:84:f1:b2:fc:f8:40:df:4d:6d:13:
6a:ac:a5:c6:30:25:2f:1d:e1:8e:95:91:6c:8d:66:6f:f6:85:
18:91:f4:30:c1:27:2f:d4:46:23:fb:86:39:59:71:6b:96:06:
04:68:e2:51:af:ac:9a:8f:41:70:b6:cc:6b:ff:00:98:6c:47:
84:99:55:5b:3c:95:95:98:a3:03:f1:44:16:e4:74:c8:fb:67:
39:82:4e:6f:c6:3a:2f:e8:d0:86:dd:aa:31:a0:63:2f:68:1e:
83:80:39:3a:e9:22:cc:93:f9:0a:79:37:ec:0d:85:cf:c2:0a:
6b:51:b2:8c:43:cd:38:9c:f7:ff:97:4c:0e:25:43:2c:e1:ae:
12:9d:f0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9XFCF7V0xY9ymLFsDXA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDVhYTcwMzQyNTBhYjFhODc4OWFjODZjYzBlZWYzYmZj
OWRiNWYwHhcNMjYwNDI3MDgwMTQ3WhcNMjYwNDI4MDgwMTQ3WjAzMTEwLwYDVQQD
EyhhMWFjYTdiZjU2YjA3MTM1OTFlZjYzZTBiM2FlYmVhMmZkOWJjY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQsdlMcwqnHEr9AJx3EypJd24ZHi
oEES4zwrxZZ/ZwhPy/tAAzjpltu7Z2cgETrzCDUxam6LPGMsNc9W5lRcXjrGymxV
Od1OwuOA9/n06VrVOxvmL83tA+8EB0Pfn//i9t2LJjPzyEad98WopGC2NKstNqfU
EegE/ujMsmBprqUE912RItDhgi6H/Wfm8PKmU8YjSC+lDdAwdVc8cK3o3gEIpXXZ
uuxjWh4PFdM6YAIa1xjg8FNycKGN6ATUP8LeTNAH4NSdDyMKIDjl7oQ4g3t+dVjb
L9Nbx9Kl6TCQHn3zcaMhtn14qKYGaChMzZrYyT6Dvu47M93Fb5C+kYTiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGsp79WsHE1ke9j4LOuvqL9m8zbMB8GA1UdIwQY
MBaAFMjVqnA0JQqxqHiayGzA7vO/ydtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDIt
MmQ3MmYyMzE5M2RiLzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yZDQ5MGMtNmZmOC00NzFkLTk3ZDItMmQ3MmYyMzE5M2Ri
LzEveU5XcWNEUWxDckdvZUpySWJNRHU4N19KMjE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4QwXLUv
HzF9nNwChYm7i8AkcvwNMBM7tqsCnhnBmwRd84pBgakkMu2fF/X8wwM+AP3plRsh
4D+frHTRbeYFlZYLWzdboFiwyJv+dZBoLCsZmL/0hVjEENCf6o/Wusaj2buL2lgf
pb81Np5grv+Ond5AOTWE8bL8+EDfTW0TaqylxjAlLx3hjpWRbI1mb/aFGJH0MMEn
L9RGI/uGOVlxa5YGBGjiUa+smo9BcLbMa/8AmGxHhJlVWzyVlZijA/FEFuR0yPtn
OYJOb8Y6L+jQht2qMaBjL2geg4A5OukizJP5Cnk37A2Fz8IKa1GyjEPNOJz3/5dM
DiVDLOGuEp3wfw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:41 2026 by rpki-client