Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: 7mQPAQ2Jk8qvD96NQh9neII+JZULMtWTfmYYxADw9xI=
Subject key identifier: 51:C5:EC:E0:CB:F3:13:AB:23:8B:38:BC:12:B6:C4:F3:15:0B:6D:CC
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 01A0D15B6DE72546D981C95DE5A8973DD492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:00:25 +0000
Manifest this update: Thu 24 Sep 2026 03:00:25 +0000
Manifest next update: Fri 25 Sep 2026 03:00:25 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: /e46emyzof7cN1RnnqxJ5cpVCcsKFp8uRtPyKlRPlNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:6d:e7:25:46:d9:81:c9:5d:e5:a8:97:3d:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Sep 24 03:00:25 2026 GMT
Not After : Sep 25 03:00:25 2026 GMT
Subject: CN=51c5ece0cbf313ab238b38bc12b6c4f3150b6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:f1:e3:73:3b:b8:14:11:1c:78:b4:eb:1a:
41:e9:8c:04:8b:e9:9a:85:6d:3e:90:ed:d8:70:37:
cd:7f:dc:70:93:de:46:12:57:ca:43:09:58:35:42:
a2:62:0b:10:59:50:d1:f3:cf:0d:f6:c0:3a:0a:9a:
b1:e3:a3:f0:c3:d9:d1:a9:30:74:29:45:78:ea:fb:
f2:2b:f5:db:80:9e:dd:2a:46:01:4c:49:70:83:d8:
a5:a4:a1:2f:24:23:70:93:81:14:54:18:09:4c:7d:
a0:00:2d:b3:e3:4d:07:a4:a4:8e:f0:ec:e4:63:1b:
2e:0c:1b:db:48:2e:e3:52:83:4f:ac:fa:c8:e8:e7:
f6:c3:c5:b2:c4:e4:f0:f6:fb:c0:d0:e0:05:73:f7:
97:12:e0:95:49:a1:86:b8:ee:5c:32:c6:54:5f:70:
73:5e:08:5d:d4:8a:89:08:06:3f:42:43:80:1f:ce:
e2:f0:d0:c1:b2:f8:58:36:5c:ab:2f:84:25:4d:9b:
e4:cf:6f:25:b6:ed:61:7f:83:5a:e0:f6:7e:52:84:
9d:75:27:49:64:82:67:ff:a5:21:31:79:91:d4:9f:
be:a7:b5:d1:1b:53:e3:27:ef:b8:af:22:91:6b:b9:
d8:ce:12:d5:5c:c2:cb:18:94:c4:9d:a5:ea:0f:f0:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C5:EC:E0:CB:F3:13:AB:23:8B:38:BC:12:B6:C4:F3:15:0B:6D:CC
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:7a:19:e7:0e:29:d9:9b:c7:54:3d:0b:85:16:21:58:ba:
63:71:8f:c2:07:1e:a1:35:eb:f2:ce:c2:94:3a:37:70:b4:db:
d0:cc:e9:44:86:b5:46:ee:09:23:b8:d2:0d:9e:42:f9:79:67:
2e:e8:49:7a:6b:78:30:70:97:8a:98:e5:53:41:96:70:1a:f5:
80:75:ee:c2:94:c9:7a:52:5e:4d:34:84:00:20:b3:20:f9:12:
16:cd:b6:3f:dd:24:ba:b9:80:7d:01:49:1c:d0:e0:23:f8:a9:
72:e3:4e:76:7f:28:68:2d:81:c8:5f:a4:ce:8c:6c:ad:0e:63:
dc:5f:f1:3c:6d:62:f8:54:56:02:06:bb:36:78:a3:17:20:cf:
54:30:8f:0f:fe:9f:30:be:d5:3d:42:c9:3a:d4:57:fb:ca:3d:
46:59:c6:79:88:9c:2d:0e:0d:86:2c:18:9d:30:e0:57:4c:a1:
f6:f3:65:4f:d5:31:55:e8:f4:3f:eb:6f:79:15:f9:64:47:08:
0f:65:31:50:e3:e7:ff:eb:61:44:4f:81:db:55:22:81:ea:68:
3e:d4:40:8c:2f:28:6f:e0:70:9d:ab:af:4a:a3:52:2a:8b:62:
50:2c:0c:32:51:a5:2a:d1:fe:ba:4a:0a:5a:c2:71:6e:18:06:
49:83:f7:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW23nJUbZgcld5aiXPdSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjYwOTI0MDMwMDI1WhcNMjYwOTI1MDMwMDI1WjAzMTEwLwYDVQQD
Eyg1MWM1ZWNlMGNiZjMxM2FiMjM4YjM4YmMxMmI2YzRmMzE1MGI2ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKzx43M7uBQRHHi06xpB6YwEi+ma
hW0+kO3YcDfNf9xwk95GElfKQwlYNUKiYgsQWVDR888N9sA6Cpqx46Pww9nRqTB0
KUV46vvyK/XbgJ7dKkYBTElwg9ilpKEvJCNwk4EUVBgJTH2gAC2z400HpKSO8Ozk
YxsuDBvbSC7jUoNPrPrI6Of2w8WyxOTw9vvA0OAFc/eXEuCVSaGGuO5cMsZUX3Bz
Xghd1IqJCAY/QkOAH87i8NDBsvhYNlyrL4QlTZvkz28ltu1hf4Na4PZ+UoSddSdJ
ZIJn/6UhMXmR1J++p7XRG1PjJ++4ryKRa7nYzhLVXMLLGJTEnaXqD/C0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHF7ODL8xOrI4s4vBK2xPMVC23MMB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTV6GecO
Kdmbx1Q9C4UWIVi6Y3GPwgceoTXr8s7ClDo3cLTb0MzpRIa1Ru4JI7jSDZ5C+Xln
LuhJemt4MHCXipjlU0GWcBr1gHXuwpTJelJeTTSEACCzIPkSFs22P90kurmAfQFJ
HNDgI/ipcuNOdn8oaC2ByF+kzoxsrQ5j3F/xPG1i+FRWAga7NnijFyDPVDCPD/6f
ML7VPULJOtRX+8o9RlnGeYicLQ4NhiwYnTDgV0yh9vNlT9UxVej0P+tveRX5ZEcI
D2UxUOPn/+thRE+B21UigepoPtRAjC8ob+BwnauvSqNSKotiUCwMMlGlKtH+ukoK
WsJxbhgGSYP3Lw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:15:54 2026 by rpki-client