
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier: CPSsK/vbr/uO/x3Cacb9vFLa2dV1PLDZFwQN9hjOF3Q=
Subject key identifier: 8B:A2:ED:50:B1:34:97:DE:FB:40:2D:AE:5A:CF:9F:32:E7:C2:94:71
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 019DCF74E70B51FFF28EA19855A46EAEB693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number: 07E7
Signing time: Mon 27 Apr 2026 15:00:38 +0000
Manifest this update: Mon 27 Apr 2026 15:00:38 +0000
Manifest next update: Tue 28 Apr 2026 15:00:38 +0000
Files and hashes: 1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: GugMshW4nqhw2/WPfpahAA4sLuoj8tTjWMP6gaSMmTg=)
4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:e7:0b:51:ff:f2:8e:a1:98:55:a4:6e:ae:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Apr 27 15:00:38 2026 GMT
Not After : Apr 28 15:00:38 2026 GMT
Subject: CN=8ba2ed50b13497defb402dae5acf9f32e7c29471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:54:49:07:19:8b:15:19:22:6a:af:80:ec:
f1:bf:24:c8:05:1e:54:94:54:27:45:c0:41:a5:8d:
d4:fd:21:e3:d6:3b:a9:f7:e6:31:1d:d5:f1:7b:61:
4d:b3:06:d9:3e:58:e3:65:6f:be:ca:46:47:c3:cb:
b3:fa:3c:57:1d:63:62:c0:17:af:ce:da:44:cc:6f:
df:56:71:38:d1:27:ff:ce:de:f6:9c:71:78:fd:77:
3e:de:99:76:6a:0c:d0:24:b9:d4:ae:79:76:b4:30:
87:81:9f:4f:43:dd:75:22:d0:cf:52:4a:b9:05:d9:
f0:a7:52:50:76:e4:58:80:b0:20:cd:e8:29:e4:e9:
40:be:ef:23:ef:9c:81:f5:cc:e9:9e:65:b6:c9:36:
2e:37:98:6d:44:bf:25:f1:ad:b7:02:3f:51:11:1e:
69:d6:4b:ed:fa:03:79:21:76:e4:c9:31:07:12:3f:
56:61:51:dd:06:cb:23:40:fd:20:27:c6:f4:8b:cf:
50:98:eb:f1:5c:92:91:99:6b:9b:07:d9:e6:8a:57:
12:16:2e:67:81:57:6d:77:32:1c:79:08:c3:19:00:
f3:8a:48:10:52:0c:a1:a8:af:1a:b1:27:d4:a1:50:
ad:a0:ed:76:46:84:9d:4b:09:d7:29:2b:03:c6:31:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:ED:50:B1:34:97:DE:FB:40:2D:AE:5A:CF:9F:32:E7:C2:94:71
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:c9:37:9b:8b:a2:c3:1c:cc:65:b8:7f:6c:b9:f0:7f:63:
8e:4a:8e:73:93:db:7a:41:f7:69:5e:9e:be:1b:0c:3f:ba:27:
75:03:2a:63:43:fd:9a:17:5b:e8:e2:e8:6b:95:78:9d:a5:d9:
ea:85:14:d7:96:be:f1:15:50:42:22:c4:e6:b0:47:a1:7e:a7:
50:d4:7c:6f:ff:8a:21:9e:50:6f:14:bd:e5:d9:ec:9e:8b:16:
66:88:ff:64:aa:a1:93:57:88:68:bb:5f:ae:e4:a4:df:5e:95:
ab:e8:41:03:88:9c:04:eb:17:ac:10:a1:d6:a4:33:b3:19:24:
68:81:36:5e:b8:b2:e9:57:39:d5:86:9a:1b:d4:56:c2:0a:3c:
bc:4c:22:e7:ef:d6:40:6c:7d:70:c1:ed:40:95:3c:60:40:d3:
d0:a3:0c:f4:d8:48:50:52:81:81:d3:7d:d2:26:9e:18:67:d8:
01:3c:af:13:d4:7c:49:d0:1f:07:d5:80:70:69:9f:36:aa:11:
13:ad:e5:f9:99:50:2d:fc:f8:af:7b:c4:eb:b3:30:44:88:e3:
69:11:46:0b:70:8c:39:8f:f3:85:19:de:f0:4b:cc:39:56:f0:
f6:1d:cf:6f:2a:45:3b:e2:d0:00:ec:88:8f:d1:e9:12:71:d6:
c0:56:6b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdOcLUf/yjqGYVaRurraTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0
MWYzYzQwHhcNMjYwNDI3MTUwMDM4WhcNMjYwNDI4MTUwMDM4WjAzMTEwLwYDVQQD
Eyg4YmEyZWQ1MGIxMzQ5N2RlZmI0MDJkYWU1YWNmOWYzMmU3YzI5NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AFUSQcZixUZImqvgOzxvyTIBR5U
lFQnRcBBpY3U/SHj1jup9+YxHdXxe2FNswbZPljjZW++ykZHw8uz+jxXHWNiwBev
ztpEzG/fVnE40Sf/zt72nHF4/Xc+3pl2agzQJLnUrnl2tDCHgZ9PQ911ItDPUkq5
Bdnwp1JQduRYgLAgzegp5OlAvu8j75yB9czpnmW2yTYuN5htRL8l8a23Aj9RER5p
1kvt+gN5IXbkyTEHEj9WYVHdBssjQP0gJ8b0i89QmOvxXJKRmWubB9nmilcSFi5n
gVdtdzIceQjDGQDzikgQUgyhqK8asSfUoVCtoO12RoSdSwnXKSsDxjHp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIui7VCxNJfe+0AtrlrPnzLnwpRxMB8GA1UdIwQY
MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt
NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw
LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqjJN5uL
osMczGW4f2y58H9jjkqOc5PbekH3aV6evhsMP7ondQMqY0P9mhdb6OLoa5V4naXZ
6oUU15a+8RVQQiLE5rBHoX6nUNR8b/+KIZ5QbxS95dnsnosWZoj/ZKqhk1eIaLtf
ruSk316Vq+hBA4icBOsXrBCh1qQzsxkkaIE2Xriy6Vc51YaaG9RWwgo8vEwi5+/W
QGx9cMHtQJU8YEDT0KMM9NhIUFKBgdN90iaeGGfYATyvE9R8SdAfB9WAcGmfNqoR
E63l+ZlQLfz4r3vE67MwRIjjaRFGC3CMOY/zhRne8EvMOVbw9h3PbypFO+LQAOyI
j9HpEnHWwFZrzw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:27 2026 by rpki-client