
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: 2RX2HSr6kap7hspc6CMOXO0qGTGMWfr4l1rKll7HNks=
Subject key identifier: 8D:AE:1C:28:00:2C:A4:19:F2:59:3F:F6:3B:08:47:33:CA:B5:12:B1
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 01A001DD4A84E18280C77416B1B119FBAD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:01:14 +0000
Manifest this update: Fri 14 Aug 2026 20:01:14 +0000
Manifest next update: Sat 15 Aug 2026 20:01:14 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: 6nh0ol46SmNDfiU6FbC0aBwzW7fCtbxkMrR72ECmyDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:4a:84:e1:82:80:c7:74:16:b1:b1:19:fb:ad:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Aug 14 20:01:14 2026 GMT
Not After : Aug 15 20:01:14 2026 GMT
Subject: CN=8dae1c28002ca419f2593ff63b084733cab512b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:78:b3:3e:00:1d:b5:3d:18:3b:d2:12:46:
8a:f0:bc:48:40:4d:96:0c:d5:89:88:99:17:4c:1a:
76:59:4e:52:dc:06:06:57:22:61:d6:7e:f2:17:5d:
01:0c:e1:1e:c4:5b:ba:c7:aa:3d:c0:75:10:73:26:
1f:d5:09:01:9f:8d:69:79:8f:44:53:ee:88:12:3b:
c7:49:c1:fa:fb:be:25:11:f1:be:f1:88:93:a2:78:
56:0b:c4:ef:f5:a7:10:91:98:14:62:9f:33:3c:9b:
02:c8:22:2a:65:2b:14:71:db:d1:67:2a:d4:e8:f6:
c7:5c:6c:f6:41:bd:c8:a5:63:40:df:3d:31:77:91:
a5:00:a2:7d:46:24:51:c9:dc:bc:19:ee:12:7d:ff:
05:2a:a3:3c:46:3c:3b:9d:61:13:f2:71:d1:9d:5f:
cf:5c:da:d6:a7:d5:a6:54:cb:d1:7b:4b:f1:39:ee:
36:09:e0:5d:68:0a:1b:bb:95:47:f3:bd:89:87:66:
f5:7e:7e:77:5c:4e:43:4f:2a:3d:11:d9:27:63:18:
82:32:8c:28:e6:c4:5b:eb:df:2e:96:c1:92:e5:03:
0a:4e:34:12:5e:ed:68:fd:83:34:5d:34:2f:a3:f8:
c2:04:d6:2c:9a:a9:04:ba:47:0e:b4:a2:62:b8:ef:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:1C:28:00:2C:A4:19:F2:59:3F:F6:3B:08:47:33:CA:B5:12:B1
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f2:a8:98:fc:03:37:3a:17:13:c8:f6:1a:c8:71:8e:99:23:
53:33:03:66:a0:7f:cb:18:cf:0f:f7:c5:d0:8c:1e:f7:14:78:
2b:38:fd:6e:ec:a3:a3:fa:ea:d6:4a:f7:a3:e8:47:5f:6a:95:
f9:bf:35:61:df:1d:8b:92:e3:f9:24:b7:7b:40:52:70:93:bb:
38:e9:94:ab:da:c6:e9:e1:00:0f:7b:f3:00:8f:0b:5e:d4:5e:
15:76:24:05:12:b5:e5:b1:c2:d1:65:35:99:39:f9:90:92:92:
f7:92:2e:fc:1d:c6:9e:47:56:bd:31:d0:87:8b:a3:f5:dd:dc:
d7:a2:60:f7:28:f9:76:7e:50:ca:43:55:b8:99:65:5c:47:11:
58:ca:df:19:51:a7:92:54:f1:44:1d:d4:f7:57:45:12:d7:b3:
e5:b1:78:c3:fa:b9:fa:91:e1:33:78:b1:ce:71:4b:2c:87:35:
5f:6a:54:b6:f4:ed:5a:4b:68:7d:72:2c:10:6b:ee:aa:1c:4d:
64:47:e8:db:37:fa:ec:67:87:29:b2:37:87:bf:48:03:d0:15:
3f:e4:22:62:b4:17:0e:21:df:f3:bb:d7:70:9b:fa:3b:76:e1:
c9:ae:8a:f2:40:e4:f8:a0:08:e1:65:19:e6:a5:9c:3f:0d:65:
0c:ad:aa:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3UqE4YKAx3QWsbEZ+62MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx
Y2JhZjEwHhcNMjYwODE0MjAwMTE0WhcNMjYwODE1MjAwMTE0WjAzMTEwLwYDVQQD
Eyg4ZGFlMWMyODAwMmNhNDE5ZjI1OTNmZjYzYjA4NDczM2NhYjUxMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypB4sz4AHbU9GDvSEkaK8LxIQE2W
DNWJiJkXTBp2WU5S3AYGVyJh1n7yF10BDOEexFu6x6o9wHUQcyYf1QkBn41peY9E
U+6IEjvHScH6+74lEfG+8YiTonhWC8Tv9acQkZgUYp8zPJsCyCIqZSsUcdvRZyrU
6PbHXGz2Qb3IpWNA3z0xd5GlAKJ9RiRRydy8Ge4Sff8FKqM8Rjw7nWET8nHRnV/P
XNrWp9WmVMvRe0vxOe42CeBdaAobu5VH872Jh2b1fn53XE5DTyo9EdknYxiCMowo
5sRb698ulsGS5QMKTjQSXu1o/YM0XTQvo/jCBNYsmqkEukcOtKJiuO+T/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2uHCgALKQZ8lk/9jsIRzPKtRKxMB8GA1UdIwQY
MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt
NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi
LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPKomPwD
NzoXE8j2GshxjpkjUzMDZqB/yxjPD/fF0Iwe9xR4Kzj9buyjo/rq1kr3o+hHX2qV
+b81Yd8di5Lj+SS3e0BScJO7OOmUq9rG6eEAD3vzAI8LXtReFXYkBRK15bHC0WU1
mTn5kJKS95Iu/B3GnkdWvTHQh4uj9d3c16Jg9yj5dn5QykNVuJllXEcRWMrfGVGn
klTxRB3U91dFEtez5bF4w/q5+pHhM3ixznFLLIc1X2pUtvTtWktofXIsEGvuqhxN
ZEfo2zf67GeHKbI3h79IA9AVP+QiYrQXDiHf87vXcJv6O3bhya6K8kDk+KAI4WUZ
5qWcPw1lDK2qpg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:29:59 2026 by rpki-client