Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: 501O23RK2qAT4nNA3cGCN3DYu3jg7TN29kwIM/iGFBA=
Subject key identifier: 90:18:84:8A:1D:75:5F:90:56:6C:80:12:22:5B:9F:9D:31:1A:F6:DC
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019DCD875C9666262EC4E391DF87DF969B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 136D
Signing time: Mon 27 Apr 2026 06:01:33 +0000
Manifest this update: Mon 27 Apr 2026 06:01:33 +0000
Manifest next update: Tue 28 Apr 2026 06:01:33 +0000
Files and hashes: 1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: XvqZvAZNuEOvrVViDuSbW/udymaSh2tYH6hhuBGkpfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:5c:96:66:26:2e:c4:e3:91:df:87:df:96:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Apr 27 06:01:33 2026 GMT
Not After : Apr 28 06:01:33 2026 GMT
Subject: CN=9018848a1d755f90566c8012225b9f9d311af6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:c9:21:8d:d6:5c:bb:72:64:64:1b:fe:b2:
7a:d8:68:44:5b:7c:e9:49:54:20:fe:04:1a:d2:b3:
bd:d3:e8:10:73:02:f4:07:a9:be:ca:3c:ad:a1:b0:
75:37:71:27:78:1d:1d:b4:2e:b3:aa:12:de:b2:ed:
d2:f3:7d:aa:8a:c4:e6:4f:24:9c:b1:50:73:d4:9e:
d7:ae:aa:f6:ad:34:d5:ff:b8:3b:e0:7f:ae:cb:99:
db:2b:15:c5:a5:ba:53:61:b3:90:5a:9a:ab:e9:69:
01:bc:71:6b:b0:d5:89:85:00:44:e2:72:a9:33:03:
a4:57:1a:95:38:5c:6b:3f:31:09:cf:41:c5:72:f2:
f7:e3:50:43:2e:6d:3d:5b:c2:01:b7:cf:e2:a1:6e:
eb:c8:e3:e6:e1:a8:30:ea:34:19:ce:49:32:ea:0e:
ff:14:f3:4a:84:09:3e:04:58:a2:e3:e8:dd:7b:2c:
e0:76:5f:a4:98:f8:bf:28:1e:18:d3:a2:11:0a:e3:
9b:d6:0f:26:21:50:f6:3f:dc:92:af:95:b8:3f:1f:
43:dc:f2:ad:bb:af:2a:fa:96:2e:57:3e:7c:82:7d:
b5:4b:69:9d:89:24:cc:cd:d4:7e:ce:a6:7b:59:a4:
c3:5f:23:b5:f9:31:d8:12:2a:ca:28:55:e3:db:15:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:18:84:8A:1D:75:5F:90:56:6C:80:12:22:5B:9F:9D:31:1A:F6:DC
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:46:4b:70:ab:8a:22:ec:55:56:88:40:6a:ee:73:85:ac:
93:99:4a:7f:f2:75:89:31:f0:59:d5:5d:b7:9f:51:88:95:cb:
8a:64:54:ef:cd:36:b8:56:f9:d0:3f:cb:c2:b0:96:74:fd:b2:
d0:e5:3d:8c:aa:eb:16:9d:83:4a:95:97:68:52:a8:41:58:b2:
3f:5b:4e:bd:77:c9:77:60:da:80:d9:0c:44:c5:49:1a:ba:6d:
8f:48:ab:da:37:1e:7a:2e:27:15:48:30:6e:d3:36:bd:b2:24:
e3:30:01:3a:32:d0:92:84:12:ac:a8:1b:2c:f1:f8:26:2f:ad:
ed:b4:b0:db:23:27:98:28:67:78:18:86:bb:26:fc:53:d6:db:
c3:82:27:c4:34:a7:ea:45:db:fe:c6:48:e8:95:0e:27:0c:60:
d2:b3:6c:43:93:d1:ad:d4:87:bb:7d:9a:b4:06:6a:d9:44:2c:
46:3e:70:3a:18:61:de:1b:c4:51:fb:33:86:49:80:57:23:4c:
08:b0:85:90:2a:63:00:b6:71:0b:66:7c:c2:07:00:00:3c:99:
b3:78:95:d5:0c:56:db:3a:13:41:e7:6b:6f:96:03:4b:e5:de:
3f:5e:88:6a:5b:1a:fd:b1:51:89:13:83:91:ba:87:02:e9:04:
54:7b:51:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh1yWZiYuxOOR34fflpttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw
MDQ3ZmMwHhcNMjYwNDI3MDYwMTMzWhcNMjYwNDI4MDYwMTMzWjAzMTEwLwYDVQQD
Eyg5MDE4ODQ4YTFkNzU1ZjkwNTY2YzgwMTIyMjViOWY5ZDMxMWFmNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIPJIY3WXLtyZGQb/rJ62GhEW3zp
SVQg/gQa0rO90+gQcwL0B6m+yjytobB1N3EneB0dtC6zqhLesu3S832qisTmTySc
sVBz1J7Xrqr2rTTV/7g74H+uy5nbKxXFpbpTYbOQWpqr6WkBvHFrsNWJhQBE4nKp
MwOkVxqVOFxrPzEJz0HFcvL341BDLm09W8IBt8/ioW7ryOPm4agw6jQZzkky6g7/
FPNKhAk+BFii4+jdeyzgdl+kmPi/KB4Y06IRCuOb1g8mIVD2P9ySr5W4Px9D3PKt
u68q+pYuVz58gn21S2mdiSTMzdR+zqZ7WaTDXyO1+THYEirKKFXj2xXVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAYhIoddV+QVmyAEiJbn50xGvbcMB8GA1UdIwQY
MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt
YmQzYTYzMGVlNWNjLzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj
LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl9GS3Cr
iiLsVVaIQGruc4Wsk5lKf/J1iTHwWdVdt59RiJXLimRU7802uFb50D/LwrCWdP2y
0OU9jKrrFp2DSpWXaFKoQViyP1tOvXfJd2DagNkMRMVJGrptj0ir2jceei4nFUgw
btM2vbIk4zABOjLQkoQSrKgbLPH4Ji+t7bSw2yMnmChneBiGuyb8U9bbw4InxDSn
6kXb/sZI6JUOJwxg0rNsQ5PRrdSHu32atAZq2UQsRj5wOhhh3hvEUfszhkmAVyNM
CLCFkCpjALZxC2Z8wgcAADyZs3iV1QxW2zoTQedrb5YDS+XeP16Ialsa/bFRiROD
kbqHAukEVHtRAg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:57:52 2026 by rpki-client