Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: Wmz4Bnr/u51F2ncNWvYls7MPkXPro39IPhXghfkdBxQ=
Subject key identifier: 6B:F2:BF:DF:FC:5A:11:33:18:25:55:F8:1A:26:9B:65:B9:F0:43:55
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 01A0C859404AE6A3F180625285131F820584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 09:01:27 +0000
Manifest this update: Tue 22 Sep 2026 09:01:27 +0000
Manifest next update: Wed 23 Sep 2026 09:01:27 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: z4kfA0YEElpwLv+yZEkiRH71imnn8Wbz9mvWdfAzBto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:40:4a:e6:a3:f1:80:62:52:85:13:1f:82:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Sep 22 09:01:27 2026 GMT
Not After : Sep 23 09:01:27 2026 GMT
Subject: CN=6bf2bfdffc5a1133182555f81a269b65b9f04355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:1d:bf:3b:5c:8f:22:48:8b:8f:d0:ec:13:
62:12:39:16:ca:a9:62:f7:56:2a:e1:b2:47:fb:d2:
e3:f7:c5:5d:4a:95:3e:29:a9:f5:12:0f:29:be:49:
5e:ce:3f:19:be:db:ec:3a:bd:a3:7c:08:f6:39:7e:
d8:8d:4d:81:ac:05:c6:53:7c:96:a2:cd:67:b2:55:
4d:a1:a6:58:16:ca:ca:0e:d3:ad:68:7f:3b:78:53:
a8:29:a5:85:d4:23:ad:f8:b3:09:ce:24:28:85:45:
dc:8c:06:5f:b8:1c:ec:9b:2b:fb:c7:8f:a7:89:b3:
80:c5:1f:35:4a:a4:54:61:f9:92:a5:84:98:a0:64:
dd:9b:3f:40:63:11:9a:5a:27:3d:47:24:05:b7:17:
81:3b:9b:5f:f3:03:36:96:5e:85:6c:b5:85:42:c8:
7e:36:5a:8d:05:85:14:fa:8c:60:90:6d:62:a0:f1:
00:c6:f4:3a:ea:74:4a:9d:90:a9:76:91:63:60:1c:
b9:af:48:47:30:a0:8c:a7:6f:2f:97:69:81:89:78:
96:4d:ca:5d:b0:df:89:e2:53:6d:f7:e4:72:12:8c:
bc:bb:b0:e4:81:27:bc:45:2f:96:b6:2e:5a:c2:8c:
a4:2e:e4:e0:f3:c3:03:45:f5:39:6a:6f:be:f7:2c:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:BF:DF:FC:5A:11:33:18:25:55:F8:1A:26:9B:65:B9:F0:43:55
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:3f:4e:90:12:f3:05:fe:eb:a4:23:a8:8f:ab:99:f3:61:
aa:83:32:5b:fc:5d:5c:d4:24:02:34:cb:32:73:0c:c0:16:34:
a6:53:3c:8a:9d:c1:f7:5f:81:34:58:ea:b0:30:56:ae:8e:d8:
47:4b:9b:d5:b5:50:38:c9:c3:3d:a9:67:db:97:1a:31:2f:9a:
81:6c:c2:a8:8b:65:3c:8c:61:f6:2c:c7:94:81:1f:e2:fd:01:
96:9a:42:76:8d:07:12:85:72:7f:a4:9b:d1:cf:8c:e4:1e:66:
1c:8f:dd:17:ac:5d:8b:b4:1b:bd:05:53:ce:fc:88:4c:9c:a4:
96:16:a2:39:ac:d9:e5:32:86:b4:7b:42:96:b4:59:f0:4c:b3:
86:5a:bb:58:50:87:96:6f:ac:3a:cf:34:70:69:a0:d1:26:c4:
9f:37:0d:90:01:56:41:53:a3:f7:c4:5d:ca:88:38:e5:79:7d:
0d:0d:3a:66:4f:79:13:de:43:47:97:e0:de:98:19:37:51:a7:
79:f7:0d:c2:89:ac:66:c8:89:87:47:3a:05:aa:82:dc:8a:8e:
a0:18:7b:bb:bf:b2:a7:38:17:e3:d6:26:8c:b1:48:1a:5d:29:
59:31:01:be:8b:89:39:4f:cf:6d:66:89:cc:d4:9c:7c:ca:b9:
50:2b:88:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWUBK5qPxgGJShRMfggWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTI1NjU2YzUwYmIyNTRmNTgwNzdkMWI5NjZlNDc0YjE2
MzQ3YWYwHhcNMjYwOTIyMDkwMTI3WhcNMjYwOTIzMDkwMTI3WjAzMTEwLwYDVQQD
Eyg2YmYyYmZkZmZjNWExMTMzMTgyNTU1ZjgxYTI2OWI2NWI5ZjA0MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEwdvztcjyJIi4/Q7BNiEjkWyqli
91Yq4bJH+9Lj98VdSpU+Kan1Eg8pvklezj8ZvtvsOr2jfAj2OX7YjU2BrAXGU3yW
os1nslVNoaZYFsrKDtOtaH87eFOoKaWF1COt+LMJziQohUXcjAZfuBzsmyv7x4+n
ibOAxR81SqRUYfmSpYSYoGTdmz9AYxGaWic9RyQFtxeBO5tf8wM2ll6FbLWFQsh+
NlqNBYUU+oxgkG1ioPEAxvQ66nRKnZCpdpFjYBy5r0hHMKCMp28vl2mBiXiWTcpd
sN+J4lNt9+RyEoy8u7DkgSe8RS+Wti5awoykLuTg88MDRfU5am++9ywuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvyv9/8WhEzGCVV+Bomm2W58ENVMB8GA1UdIwQY
MBaAFGLiVlbFC7JU9YB30blm5HSxY0evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2Mt
YzIwNjRiMGY5YWI5LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80MjQ2ODUtZDhhOS00MzY4LThkM2MtYzIwNjRiMGY5YWI5
LzEvWXVKV1ZzVUxzbFQxZ0hmUnVXYmtkTEZqUjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6c/TpAS
8wX+66QjqI+rmfNhqoMyW/xdXNQkAjTLMnMMwBY0plM8ip3B91+BNFjqsDBWro7Y
R0ub1bVQOMnDPaln25caMS+agWzCqItlPIxh9izHlIEf4v0BlppCdo0HEoVyf6Sb
0c+M5B5mHI/dF6xdi7QbvQVTzvyITJyklhaiOazZ5TKGtHtClrRZ8Eyzhlq7WFCH
lm+sOs80cGmg0SbEnzcNkAFWQVOj98Rdyog45Xl9DQ06Zk95E95DR5fg3pgZN1Gn
efcNwomsZsiJh0c6BaqC3IqOoBh7u7+ypzgX49YmjLFIGl0pWTEBvouJOU/PbWaJ
zNScfMq5UCuImg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:13 2026 by rpki-client