Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier: RasEuT/Sy7DtSelZm8pKc1PJO1C28Ljiyeax08BO1Jg=
Subject key identifier: 28:89:96:E9:4C:C6:3A:73:03:F6:15:08:C9:05:D6:2E:74:B1:60:DF
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 019DCE628D605F4ADD486AED71E7D370EE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number: 028A
Signing time: Mon 27 Apr 2026 10:00:58 +0000
Manifest this update: Mon 27 Apr 2026 10:00:58 +0000
Manifest next update: Tue 28 Apr 2026 10:00:58 +0000
Files and hashes: 1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: wIsB8fBqHdMg9PgSgkqF9+XTK7KhicTuk1DxVPJsLzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:8d:60:5f:4a:dd:48:6a:ed:71:e7:d3:70:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Apr 27 10:00:58 2026 GMT
Not After : Apr 28 10:00:58 2026 GMT
Subject: CN=288996e94cc63a7303f61508c905d62e74b160df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:2f:87:e0:64:c1:d8:0b:8b:ce:f9:78:c4:
9a:86:0b:aa:f5:21:b9:7e:ec:0e:59:50:d6:d1:b7:
f0:12:bd:81:59:8f:8b:01:65:00:03:d8:7b:c8:1e:
75:ce:96:03:b1:e7:29:7d:07:a7:58:26:24:7d:c7:
83:93:86:ef:ec:93:cc:bf:49:e5:ff:5a:65:a5:fd:
37:cf:c4:81:c8:02:28:be:ea:d5:78:6a:46:62:fc:
8c:ba:85:57:7e:df:f5:16:fd:2f:f9:f2:ad:65:66:
4e:6c:c9:2e:d8:03:c9:93:93:ed:81:56:bc:40:d9:
6c:90:8e:87:c5:df:f2:72:d2:23:fc:3e:b4:87:fd:
79:98:1a:6e:1f:db:d4:57:d2:0d:42:97:ec:6a:c6:
78:07:64:00:24:cf:0d:38:2b:ca:0c:b2:1f:51:f6:
88:3f:e3:fe:e3:31:19:9a:7b:4f:1f:65:c0:00:20:
dd:5d:67:21:48:58:e5:d1:1f:b2:3f:bb:44:5a:37:
b8:fd:9f:26:27:77:c0:8b:ce:11:f3:75:c2:ff:3e:
76:81:22:98:5a:cf:0d:03:3d:ae:4c:7a:81:6f:e7:
8b:6e:2a:53:b4:77:b4:5f:45:4f:a5:72:28:72:1e:
d4:a7:28:51:ce:de:26:f2:6d:6c:ca:47:8f:a6:74:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:96:E9:4C:C6:3A:73:03:F6:15:08:C9:05:D6:2E:74:B1:60:DF
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:56:57:ef:ba:37:35:d3:df:45:09:95:df:67:ff:43:bc:18:
b7:e0:c2:70:fc:95:23:3e:28:b0:f9:a7:67:1b:6a:03:1c:0d:
1e:b0:fd:d4:c9:17:26:d9:e9:99:37:50:75:20:38:c2:74:a7:
cb:87:20:d9:67:0e:95:54:9b:8f:08:99:52:db:3f:df:3b:bc:
f9:4e:95:de:e8:9e:14:ea:78:a4:e0:d0:63:be:48:ee:44:1b:
10:47:0e:43:bf:e9:04:06:bd:74:48:76:62:0f:06:7a:cb:4b:
c8:32:f9:d1:ad:84:30:ed:85:98:61:ef:4e:4f:0e:90:ee:87:
a8:b7:c2:7d:e0:93:bb:88:00:a9:d0:32:9c:dc:a2:40:9c:de:
8d:06:1f:89:30:b9:66:97:38:4c:d2:82:5f:5f:c6:70:6d:0b:
61:27:f3:79:51:48:b9:8e:c4:d3:ea:35:0b:5c:95:12:89:9e:
64:50:60:48:fb:2b:43:85:76:68:76:dd:27:53:cc:04:85:8b:
e8:de:9d:3b:e6:09:dd:3a:d8:63:30:b0:b7:ff:9d:a4:f1:ca:
17:4b:3e:f1:2c:8d:56:94:7c:13:44:4a:09:f9:3b:5a:7e:cd:
07:1f:38:90:5e:16:a5:63:98:67:ad:22:35:1c:8b:75:05:f8:
bd:bd:11:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYo1gX0rdSGrtcefTcO5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh
ODJkOWIwHhcNMjYwNDI3MTAwMDU4WhcNMjYwNDI4MTAwMDU4WjAzMTEwLwYDVQQD
EygyODg5OTZlOTRjYzYzYTczMDNmNjE1MDhjOTA1ZDYyZTc0YjE2MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzsvh+BkwdgLi875eMSahguq9SG5
fuwOWVDW0bfwEr2BWY+LAWUAA9h7yB51zpYDsecpfQenWCYkfceDk4bv7JPMv0nl
/1plpf03z8SByAIovurVeGpGYvyMuoVXft/1Fv0v+fKtZWZObMku2APJk5PtgVa8
QNlskI6Hxd/yctIj/D60h/15mBpuH9vUV9INQpfsasZ4B2QAJM8NOCvKDLIfUfaI
P+P+4zEZmntPH2XAACDdXWchSFjl0R+yP7tEWje4/Z8mJ3fAi84R83XC/z52gSKY
Ws8NAz2uTHqBb+eLbipTtHe0X0VPpXIoch7UpyhRzt4m8m1sykePpnScAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiJlulMxjpzA/YVCMkF1i50sWDfMB8GA1UdIwQY
MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt
ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5
LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVZX77o3
NdPfRQmV32f/Q7wYt+DCcPyVIz4osPmnZxtqAxwNHrD91MkXJtnpmTdQdSA4wnSn
y4cg2WcOlVSbjwiZUts/3zu8+U6V3uieFOp4pODQY75I7kQbEEcOQ7/pBAa9dEh2
Yg8GestLyDL50a2EMO2FmGHvTk8OkO6HqLfCfeCTu4gAqdAynNyiQJzejQYfiTC5
Zpc4TNKCX1/GcG0LYSfzeVFIuY7E0+o1C1yVEomeZFBgSPsrQ4V2aHbdJ1PMBIWL
6N6dO+YJ3TrYYzCwt/+dpPHKF0s+8SyNVpR8E0RKCfk7Wn7NBx84kF4WpWOYZ60i
NRyLdQX4vb0RWg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:49 2026 by rpki-client