
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
File: YRuftFY550kvKzYx9kD2q5r7YpA.mft (raw, json)
Hash identifier: bIQaS2yIn1cMjld6+E2zIIBbaTjBZa3/noRSaJ1IrLE=
Subject key identifier: E9:08:58:84:C6:31:C7:71:B8:DD:7A:0D:84:1E:54:49:8D:7F:E0:0C
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 01A0E02A76564B56363B946228BB6B858832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
Manifest number: 0516
Signing time: Sun 27 Sep 2026 00:01:14 +0000
Manifest this update: Sun 27 Sep 2026 00:01:14 +0000
Manifest next update: Mon 28 Sep 2026 00:01:14 +0000
Files and hashes: 1: 3-z9WVuuMK0MQ-O8ytcjQmUulmQ.roa (hash: QlGcIApQxI3USCeOW3H47w4RX3p+KD+avqAifqggosI=)
2: YRuftFY550kvKzYx9kD2q5r7YpA.crl (hash: +Ym7vtTKe1ZndqyaUfxP1yA15Vy4wqhPg4y8PBprP9w=)
3: eYKGIFqmXxArxKrm4dHPlBfdDkQ.roa (hash: OjAQmRNCdlZ/ho0O0hjfQYZhYcPqc7W3tUBnTWwRO0M=)
4: i8JTjG8kAd1c1HqV5LoJhukgMAE.roa (hash: u27SpMwjFzAC7wQTCgUg0cr2wavmv6lyaTijyCZtCvI=)
5: uKdnnQsot7mlRO752cNll6GISRQ.roa (hash: VbgboVS4OB0UdrRSp+d5djlaTMUsF7uI2qR/6y5b4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:76:56:4b:56:36:3b:94:62:28:bb:6b:85:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: Sep 27 00:01:14 2026 GMT
Not After : Sep 28 00:01:14 2026 GMT
Subject: CN=e9085884c631c771b8dd7a0d841e54498d7fe00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:8b:ef:1b:05:b0:e7:86:02:e8:06:d1:bf:
ee:59:cd:5f:9f:b7:90:ea:d9:07:95:8b:3b:f7:b3:
9c:60:a1:54:81:49:8b:5c:2e:56:0d:88:20:46:f4:
bb:4d:9c:95:90:85:80:51:9d:f3:00:54:8e:f7:bc:
99:18:4f:df:00:70:04:60:01:7e:11:c6:2b:60:b1:
9e:19:2a:b8:a3:58:5f:88:6c:ad:70:60:8c:f2:30:
d1:29:b2:f9:19:24:c0:da:53:ef:32:2e:af:e2:74:
c8:69:7a:ea:5b:fe:3d:3a:33:9e:6f:48:8c:69:f7:
cc:df:88:14:57:e2:fb:64:17:42:b1:bd:41:a4:24:
38:4f:63:84:92:16:25:62:40:2b:14:b3:2f:55:76:
ff:0f:6e:8e:1d:12:9e:f4:10:96:fe:0d:d6:78:45:
19:be:39:c3:72:3f:ac:16:00:e5:fc:30:4b:c4:5c:
e3:a1:b4:2d:bc:de:ea:49:b2:f6:ce:06:6e:5f:a1:
6c:a8:dc:1e:76:c0:f7:5d:56:13:64:67:58:8b:a1:
a1:68:b8:4d:6a:f4:40:59:c6:85:0f:39:10:8d:25:
02:a4:26:a4:b6:45:4d:d8:28:5c:64:ea:5d:41:3d:
9a:2d:88:53:7c:a5:01:c0:32:5a:77:e0:b6:6e:76:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:58:84:C6:31:C7:71:B8:DD:7A:0D:84:1E:54:49:8D:7F:E0:0C
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:f2:53:97:cf:8e:af:71:04:bb:1b:d6:45:68:d5:e6:06:
26:ed:5f:75:ef:4e:ea:5f:3a:9b:58:30:45:9b:a4:f7:c1:c6:
ba:69:a4:c5:55:84:0d:de:5e:7e:ec:bd:93:01:2a:1a:46:b6:
ed:c4:10:08:30:94:89:1e:fe:2b:d3:56:e4:e8:8d:19:c8:48:
6a:56:8d:ec:1d:78:97:86:dd:a7:57:92:37:6d:87:19:6e:c8:
81:7c:f1:e6:0a:a5:30:b1:74:b4:a2:91:93:69:41:5f:1b:e3:
37:b2:f3:19:94:97:7c:58:bf:46:80:27:8e:19:8c:9f:bf:2e:
d1:7c:61:20:7b:a8:9f:0c:01:6c:5c:b9:9a:db:c7:2c:d2:d7:
9f:e5:a3:f0:de:06:f7:d6:dc:84:08:d9:51:ad:67:c7:1d:48:
a6:d1:e1:7f:f6:74:c3:6b:a2:de:99:9c:63:9d:2c:46:e3:2b:
17:9d:ac:22:bb:0b:58:7d:f2:63:c9:ca:bb:36:bb:aa:47:ae:
20:a2:90:f3:ed:4c:2a:db:e7:1b:3a:ec:d1:a0:32:f4:a3:6b:
a6:68:bf:df:9c:9a:d7:9f:01:ae:df:2d:57:a7:85:f6:33:8e:
22:8e:09:5e:31:5f:16:b4:ad:35:db:99:33:f0:ee:ba:f5:35:
79:ad:5e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:00:46 2026 by rpki-client