Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 46WIGdeOWh6uVWZfAbI7F6UE76hxmMSn+hiDWwokw3c=
Subject key identifier: 0F:98:D3:44:72:60:8A:C1:8D:48:9B:4C:C3:A2:29:0E:C0:5D:B9:9D
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019DA0E508185250FC33CEAC0259313DF72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 11EC
Signing time: Sat 18 Apr 2026 14:00:57 +0000
Manifest this update: Sat 18 Apr 2026 14:00:57 +0000
Manifest next update: Sun 19 Apr 2026 14:00:57 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: ITlivZHSXeT+Q65jxRT8xI7XyQexhwSZ6Dqj0p5loFE=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:e5:08:18:52:50:fc:33:ce:ac:02:59:31:3d:f7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Apr 18 14:00:57 2026 GMT
Not After : Apr 19 14:00:57 2026 GMT
Subject: CN=0f98d34472608ac18d489b4cc3a2290ec05db99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:7d:ad:32:13:e6:e1:45:11:04:d1:15:87:
e6:4b:ae:da:9f:b9:cf:72:8a:89:9f:34:72:45:f9:
07:61:fa:61:2d:26:44:2d:77:5b:bd:e8:d2:57:e1:
4a:da:25:f0:eb:ca:60:2f:90:80:05:d7:68:91:96:
0a:d3:c1:5d:0c:58:44:ba:2e:a2:ea:27:f0:a0:cd:
79:14:4a:d4:14:7a:0c:b1:2c:9c:55:8c:38:71:fe:
59:3b:32:0e:7c:82:28:dd:46:0d:e8:f6:29:43:d0:
97:60:cc:61:55:ca:91:8e:51:60:1f:9d:4c:a5:b9:
28:e2:a2:c1:cf:c5:4d:31:99:93:4a:d8:77:5b:76:
c3:c7:b4:1c:3d:46:7c:cc:b3:98:80:60:23:85:13:
60:1d:ef:74:22:1c:87:af:14:34:96:f6:c5:19:07:
e1:8e:8a:a7:06:b7:96:3c:dc:93:10:70:6a:1c:0c:
4c:de:a4:36:fa:71:b2:fe:f0:1d:2b:4f:9d:e5:55:
72:da:46:9b:04:a8:e0:cf:de:a1:5d:94:e9:5b:b8:
0d:0e:48:8f:d9:d2:03:54:dc:98:64:42:33:d5:ca:
74:ef:de:77:5c:a5:36:bc:1e:98:af:17:27:cc:79:
7b:cc:46:9f:28:2c:97:bf:0b:ab:b5:ac:d4:ad:aa:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:D3:44:72:60:8A:C1:8D:48:9B:4C:C3:A2:29:0E:C0:5D:B9:9D
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9d:1c:81:5a:82:19:37:a0:53:ea:b0:f7:e6:f3:b5:f1:f8:
43:2c:96:48:e6:b7:6e:32:e4:69:8b:a5:19:53:1c:44:c0:85:
60:00:ae:3e:0f:8f:c0:41:ac:ee:79:b1:4b:8a:72:2e:65:40:
b7:f9:6e:ca:82:71:10:14:21:15:86:d3:2c:fd:63:e8:c9:3c:
4b:24:e0:bb:f8:8e:2c:2b:4c:c0:ce:94:04:e4:66:0e:7b:50:
c2:a0:2b:7d:6d:9a:fc:d0:55:4c:40:2f:10:8f:48:5d:7d:86:
a4:06:e3:9e:3e:fe:80:40:ce:d0:57:7d:9d:61:ee:a4:01:03:
24:75:8c:24:bc:c6:5c:ca:ac:f5:ea:53:13:04:a2:dc:ee:0d:
84:ae:52:ea:19:3d:ce:bd:5d:f9:4c:c0:20:af:b8:2c:cb:58:
b1:ce:fd:20:6c:16:13:a3:f7:c0:e7:8e:db:6c:60:ef:4d:9e:
ea:3c:1e:b3:2c:96:5d:95:5c:a4:8d:ad:33:17:32:53:88:a8:
2a:aa:8f:a2:5b:32:ec:0e:49:8d:bd:35:ed:a5:0b:36:aa:3e:
9f:bb:15:5a:3b:2f:8c:a2:bc:38:af:2f:c1:38:d8:7c:2b:d9:
13:63:4f:df:02:8f:ed:3a:ae:ce:a7:ae:6f:27:b6:c7:d4:f5:
e6:21:af:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2g5QgYUlD8M86sAlkxPfcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1
Y2MzMTIwHhcNMjYwNDE4MTQwMDU3WhcNMjYwNDE5MTQwMDU3WjAzMTEwLwYDVQQD
EygwZjk4ZDM0NDcyNjA4YWMxOGQ0ODliNGNjM2EyMjkwZWMwNWRiOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gp9rTIT5uFFEQTRFYfmS67an7nP
coqJnzRyRfkHYfphLSZELXdbvejSV+FK2iXw68pgL5CABddokZYK08FdDFhEui6i
6ifwoM15FErUFHoMsSycVYw4cf5ZOzIOfIIo3UYN6PYpQ9CXYMxhVcqRjlFgH51M
pbko4qLBz8VNMZmTSth3W3bDx7QcPUZ8zLOYgGAjhRNgHe90IhyHrxQ0lvbFGQfh
joqnBreWPNyTEHBqHAxM3qQ2+nGy/vAdK0+d5VVy2kabBKjgz96hXZTpW7gNDkiP
2dIDVNyYZEIz1cp07953XKU2vB6YrxcnzHl7zEafKCyXvwurtazUraoxEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+Y00RyYIrBjUibTMOiKQ7AXbmdMB8GA1UdIwQY
MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt
MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy
LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp0cgVqC
GTegU+qw9+bztfH4QyyWSOa3bjLkaYulGVMcRMCFYACuPg+PwEGs7nmxS4pyLmVA
t/luyoJxEBQhFYbTLP1j6Mk8SyTgu/iOLCtMwM6UBORmDntQwqArfW2a/NBVTEAv
EI9IXX2GpAbjnj7+gEDO0Fd9nWHupAEDJHWMJLzGXMqs9epTEwSi3O4NhK5S6hk9
zr1d+UzAIK+4LMtYsc79IGwWE6P3wOeO22xg702e6jwesyyWXZVcpI2tMxcyU4io
KqqPolsy7A5Jjb017aULNqo+n7sVWjsvjKK8OK8vwTjYfCvZE2NP3wKP7Tquzqeu
bye2x9T15iGv4g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 19:40:49 2026 by rpki-client