Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: L6axBf8nJ2L8bAuNxUXJskM4mlXFuLkH/6SbVLQOQSk=
Subject key identifier: 1F:07:B6:B3:E7:86:5A:F2:17:6F:4C:4D:09:D5:41:AE:83:22:D7:D2
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019DA1C0F5B2FFD9A804BB5610106D6834A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 18C3
Signing time: Sat 18 Apr 2026 18:01:10 +0000
Manifest this update: Sat 18 Apr 2026 18:01:10 +0000
Manifest next update: Sun 19 Apr 2026 18:01:10 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: 5LNZRiYYlR9uqEfqjvqmIwcVXU0dTl0GQE6nZO94lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:c0:f5:b2:ff:d9:a8:04:bb:56:10:10:6d:68:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Apr 18 18:01:10 2026 GMT
Not After : Apr 19 18:01:10 2026 GMT
Subject: CN=1f07b6b3e7865af2176f4c4d09d541ae8322d7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:26:39:14:13:5b:47:e8:48:32:8d:3f:35:
f2:58:c1:c6:dc:c1:78:f7:7f:de:d4:0b:16:39:4e:
29:49:69:70:6d:5f:b3:88:df:56:a1:c7:ee:7e:06:
1d:07:d6:97:c1:d0:5a:fd:3e:a0:f6:29:a3:6f:c9:
d2:f2:de:1d:6b:fe:ed:66:80:ee:32:34:c5:73:33:
8b:54:74:bc:b1:b4:5e:60:ca:c3:4c:68:cf:44:ad:
e8:98:77:2b:b6:8a:52:53:86:24:2e:f1:c3:9a:36:
c5:b0:b5:ac:2e:72:62:7b:55:56:83:ee:d5:24:22:
0e:2d:b6:4b:12:bf:78:04:3a:c6:89:9a:7b:83:ab:
d1:c6:04:62:a6:f2:d6:a6:40:41:8d:83:2d:79:e0:
38:1f:de:3a:67:47:9e:11:7c:5c:98:8f:41:e0:e5:
de:18:9c:aa:9c:5b:5d:56:53:46:16:3d:aa:71:47:
fd:2d:9b:82:01:09:1f:fb:40:e2:09:9c:aa:e0:57:
41:2b:c7:78:d1:1b:d8:2e:58:2b:e1:d8:47:2c:2d:
07:0f:e2:89:72:84:90:16:df:15:5c:3f:52:41:93:
46:39:bd:d0:26:08:fd:4d:91:a2:83:73:97:91:52:
b6:a7:18:c4:b0:43:50:fb:32:0a:83:41:d0:60:bf:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:07:B6:B3:E7:86:5A:F2:17:6F:4C:4D:09:D5:41:AE:83:22:D7:D2
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:01:19:d3:61:46:95:05:09:4d:7d:cd:74:b9:32:6a:86:
61:f4:9e:06:79:7c:ce:49:67:70:d6:82:78:42:87:2f:51:0f:
20:9c:a1:3e:ed:68:1b:37:92:1f:1c:9c:94:3c:91:27:26:8c:
2c:72:3a:02:5d:09:e0:bc:08:f0:5e:17:01:81:78:c0:38:54:
06:af:43:af:b7:40:9b:5c:e8:a4:08:d6:f8:80:4a:56:b5:cd:
fe:f6:d8:da:cb:6c:1d:b1:73:f2:16:ee:df:c7:46:a0:34:32:
b2:96:19:f9:9e:6d:10:0d:53:6e:c9:f4:da:8e:55:46:68:43:
fa:c8:d0:ee:0f:b6:1b:b4:59:51:8f:85:53:89:61:0c:e0:b2:
42:1e:4d:14:ad:36:92:37:da:a6:8a:1f:fe:25:3e:7c:5b:2f:
8f:c8:33:56:ff:78:30:7e:79:f8:c1:f1:eb:bb:39:f9:d6:6c:
ac:63:88:4a:2e:4c:23:14:51:e5:dc:e1:d4:9c:9b:05:59:53:
e2:c2:d3:bc:e9:69:71:3c:bf:9d:3d:6f:44:b6:83:d7:f1:e1:
60:fb:4f:4b:84:a3:63:1c:ea:0a:12:d5:ee:ae:06:b2:9d:3b:
86:4d:9f:5f:f1:21:01:3e:c2:6f:04:ea:a3:8b:28:0e:b6:6d:
0c:a7:e4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2hwPWy/9moBLtWEBBtaDSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTVlMWNiYzY3ZTc4MmRiZjlmOGU3NDRlNDM3MjY4YmRj
YzM5Y2UwHhcNMjYwNDE4MTgwMTEwWhcNMjYwNDE5MTgwMTEwWjAzMTEwLwYDVQQD
EygxZjA3YjZiM2U3ODY1YWYyMTc2ZjRjNGQwOWQ1NDFhZTgzMjJkN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJEmORQTW0foSDKNPzXyWMHG3MF4
93/e1AsWOU4pSWlwbV+ziN9WocfufgYdB9aXwdBa/T6g9imjb8nS8t4da/7tZoDu
MjTFczOLVHS8sbReYMrDTGjPRK3omHcrtopSU4YkLvHDmjbFsLWsLnJie1VWg+7V
JCIOLbZLEr94BDrGiZp7g6vRxgRipvLWpkBBjYMteeA4H946Z0eeEXxcmI9B4OXe
GJyqnFtdVlNGFj2qcUf9LZuCAQkf+0DiCZyq4FdBK8d40RvYLlgr4dhHLC0HD+KJ
coSQFt8VXD9SQZNGOb3QJgj9TZGig3OXkVK2pxjEsENQ+zIKg0HQYL//1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8HtrPnhlryF29MTQnVQa6DItfSMB8GA1UdIwQY
MBaAFMuV4cvGfngtv5+OdE5Dcmi9zDnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmIt
NzY2ODJlNzk0Y2MzLzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83M2UwMGYtZTNlMy00ZDIzLWFkNmItNzY2ODJlNzk0Y2Mz
LzEveTVYaHk4Wi1lQzJfbjQ1MFRrTnlhTDNNT2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAwBGdNh
RpUFCU19zXS5MmqGYfSeBnl8zklncNaCeEKHL1EPIJyhPu1oGzeSHxyclDyRJyaM
LHI6Al0J4LwI8F4XAYF4wDhUBq9Dr7dAm1zopAjW+IBKVrXN/vbY2stsHbFz8hbu
38dGoDQyspYZ+Z5tEA1Tbsn02o5VRmhD+sjQ7g+2G7RZUY+FU4lhDOCyQh5NFK02
kjfapoof/iU+fFsvj8gzVv94MH55+MHx67s5+dZsrGOISi5MIxRR5dzh1JybBVlT
4sLTvOlpcTy/nT1vRLaD1/HhYPtPS4SjYxzqChLV7q4Gsp07hk2fX/EhAT7CbwTq
o4soDrZtDKfkfg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 00:52:59 2026 by rpki-client