Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: vOiLdfON3QvNH/ybuSO/Tw6ff+fU79lQmqBxjZqz27g=
Subject key identifier: 2C:D0:BC:F8:21:36:E4:23:56:47:66:B4:65:FB:6F:B2:0F:47:83:CA
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019DCCAAAC5CED03CEAA64997A659D27D7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1607
Signing time: Mon 27 Apr 2026 02:00:30 +0000
Manifest this update: Mon 27 Apr 2026 02:00:30 +0000
Manifest next update: Tue 28 Apr 2026 02:00:30 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: sKUj23kkoNj6j2ewn8/FKyuVcfjwMQ+E0Wr5nQ3zsjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:ac:5c:ed:03:ce:aa:64:99:7a:65:9d:27:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Apr 27 02:00:30 2026 GMT
Not After : Apr 28 02:00:30 2026 GMT
Subject: CN=2cd0bcf82136e423564766b465fb6fb20f4783ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:08:f0:64:32:92:c3:73:64:c1:27:26:66:
84:87:d8:62:b6:01:1b:9f:f8:b0:84:5e:22:23:00:
44:54:86:9b:69:60:f8:8b:dc:f3:0d:d9:31:6f:8d:
08:c7:5d:07:ab:cc:68:c9:b1:76:24:ba:29:7a:d0:
9a:1b:d6:e2:2a:a7:c7:78:67:da:b1:29:df:fc:d5:
10:da:94:42:93:66:0a:94:ce:b6:56:68:95:17:0d:
cb:05:ed:49:d7:77:c8:de:bf:c6:20:e1:d5:45:7e:
46:79:91:ff:6a:5c:65:b4:2b:f5:b3:55:97:72:70:
e3:37:d7:15:cc:90:3a:db:64:9b:53:17:35:49:a6:
9d:6e:20:4b:33:8a:20:88:46:27:bc:98:30:6c:88:
e4:38:38:c3:af:71:65:fb:c7:8c:c1:81:63:88:50:
a7:d4:7e:a2:10:b5:1d:29:14:0a:2d:4a:fa:8f:4a:
af:e6:61:10:86:71:df:72:12:8d:ab:34:0c:33:3b:
2b:96:ef:72:ee:91:8f:c3:7c:f1:18:ff:ef:8b:ce:
77:86:d2:9b:80:ee:b7:fc:4a:99:c7:63:0d:1d:8e:
81:88:10:53:ee:92:13:ff:98:c2:f1:25:32:a2:f5:
a8:ea:7d:2e:c5:bc:84:e6:02:e1:42:06:6b:0f:1b:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:BC:F8:21:36:E4:23:56:47:66:B4:65:FB:6F:B2:0F:47:83:CA
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:2f:0f:54:9e:a5:89:d2:1b:fb:9c:ac:5c:a8:b1:c8:a3:
38:27:8d:67:9f:dd:d6:d5:bf:14:99:59:cb:f1:6b:85:9e:6f:
37:92:f0:35:0c:7f:db:ea:35:56:e8:e5:a4:ad:3e:6d:c7:75:
9a:64:9d:a4:5e:f7:8b:9e:cf:de:e1:84:4c:fa:ff:e7:ff:b4:
24:1a:ea:30:3f:74:89:f4:bb:6c:ba:51:7f:87:8d:a0:f4:49:
7c:4e:26:de:67:a7:69:a5:29:7f:3a:7a:a4:99:d0:e0:b2:71:
e6:0e:84:98:33:cf:ff:08:97:1d:4d:1a:f0:a8:96:fc:ca:10:
bb:35:79:d4:7d:bb:2a:c5:c5:c6:7a:67:99:d2:ba:4b:da:68:
65:0d:4b:59:95:04:76:1f:9f:0a:d7:a2:28:d3:9c:29:de:43:
a8:df:c7:ec:14:35:62:25:9c:e7:f1:4c:46:85:85:3d:5e:31:
0c:53:6d:90:d7:27:39:97:f8:eb:8c:cb:33:22:2a:4f:ec:e8:
2c:de:f7:70:d1:b9:dd:ea:ff:8f:ce:7a:40:5d:af:b2:dc:ad:
a1:48:42:9d:0f:2b:e2:cd:61:08:d2:6b:ff:57:d5:b4:d5:cd:
e6:cc:34:3c:63:f2:c9:b9:09:bc:64:8c:e5:46:38:b1:19:4e:
47:c0:a8:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mqqxc7QPOqmSZemWdJ9fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1
ODdmMTgwHhcNMjYwNDI3MDIwMDMwWhcNMjYwNDI4MDIwMDMwWjAzMTEwLwYDVQQD
EygyY2QwYmNmODIxMzZlNDIzNTY0NzY2YjQ2NWZiNmZiMjBmNDc4M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuAI8GQyksNzZMEnJmaEh9hitgEb
n/iwhF4iIwBEVIabaWD4i9zzDdkxb40Ix10Hq8xoybF2JLopetCaG9biKqfHeGfa
sSnf/NUQ2pRCk2YKlM62VmiVFw3LBe1J13fI3r/GIOHVRX5GeZH/alxltCv1s1WX
cnDjN9cVzJA622SbUxc1SaadbiBLM4ogiEYnvJgwbIjkODjDr3Fl+8eMwYFjiFCn
1H6iELUdKRQKLUr6j0qv5mEQhnHfchKNqzQMMzsrlu9y7pGPw3zxGP/vi853htKb
gO63/EqZx2MNHY6BiBBT7pIT/5jC8SUyovWo6n0uxbyE5gLhQgZrDxubXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzQvPghNuQjVkdmtGX7b7IPR4PKMB8GA1UdIwQY
MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt
N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx
LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinMvD1Se
pYnSG/ucrFyoscijOCeNZ5/d1tW/FJlZy/FrhZ5vN5LwNQx/2+o1VujlpK0+bcd1
mmSdpF73i57P3uGETPr/5/+0JBrqMD90ifS7bLpRf4eNoPRJfE4m3menaaUpfzp6
pJnQ4LJx5g6EmDPP/wiXHU0a8KiW/MoQuzV51H27KsXFxnpnmdK6S9poZQ1LWZUE
dh+fCteiKNOcKd5DqN/H7BQ1YiWc5/FMRoWFPV4xDFNtkNcnOZf464zLMyIqT+zo
LN73cNG53er/j856QF2vstytoUhCnQ8r4s1hCNJr/1fVtNXN5sw0PGPyybkJvGSM
5UY4sRlOR8CoZA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:24 2026 by rpki-client