Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: 2HNOp5rG7QTcp72ARTj7eezDnYs68yI/JEuezand8mc=
Subject key identifier: CD:DB:46:43:43:5F:14:1F:76:4C:DF:22:07:6D:E1:95:B6:E0:C5:38
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 01A0DF4F2222ED9FD346A420CD6143C043C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 02F4
Signing time: Sat 26 Sep 2026 20:01:40 +0000
Manifest this update: Sat 26 Sep 2026 20:01:40 +0000
Manifest next update: Sun 27 Sep 2026 20:01:40 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: LTKpyKm5VZtG9NrSymNeoHnfVDY7KAiXD+7i/DLqiqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:22:22:ed:9f:d3:46:a4:20:cd:61:43:c0:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Sep 26 20:01:40 2026 GMT
Not After : Sep 27 20:01:40 2026 GMT
Subject: CN=cddb4643435f141f764cdf22076de195b6e0c538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:0f:e9:b4:8f:4f:d5:61:8d:01:b1:f0:b6:
5e:81:14:31:fc:3c:bb:d4:20:c7:f2:bd:96:4e:2a:
59:75:98:43:a7:d0:b1:69:ef:10:f5:8e:f4:d1:2c:
5a:91:f7:1b:67:a4:f0:f1:0c:c5:96:ae:2d:98:28:
40:06:0a:1d:f6:7d:98:4f:74:42:6d:39:3d:6b:21:
0d:dc:5e:61:fd:f7:c9:3d:19:b0:9f:22:d2:d7:9b:
89:f6:ed:87:bc:55:cb:8e:98:a3:03:e5:c3:63:0f:
35:bb:28:13:e7:c1:96:1b:26:25:c2:b8:2d:df:56:
76:fd:e5:da:91:80:85:57:bc:d8:bd:49:37:e2:14:
0f:c8:8b:06:5c:d8:bc:cd:44:96:76:1e:cd:25:4f:
4a:14:a6:52:bc:1b:9a:e1:2a:5d:ea:99:b7:5f:96:
ab:61:8b:18:5a:75:59:bd:31:d5:e8:2b:1e:ab:46:
c6:cf:a2:58:c0:5c:24:34:e0:39:d9:6e:52:1c:77:
bb:4e:f6:14:2f:fb:10:41:3b:16:28:7f:19:04:ca:
63:67:82:a7:4e:f8:60:ff:f9:f8:00:1d:7d:9b:03:
96:b8:cb:db:9b:1a:1f:77:29:b2:7f:bc:66:c0:96:
be:09:23:6e:8b:63:b2:ee:e1:fc:67:24:50:74:2e:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:46:43:43:5F:14:1F:76:4C:DF:22:07:6D:E1:95:B6:E0:C5:38
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:f9:ec:55:7b:3a:5a:17:fe:b4:43:eb:db:bc:55:d8:e4:
ef:56:18:eb:38:aa:16:d0:7d:7d:78:b7:76:20:e2:c0:5f:bb:
5d:f7:d4:4d:24:76:a4:ed:8d:b6:a1:c5:de:2c:c6:62:9a:21:
a8:19:33:f8:54:34:77:4e:7b:92:04:a6:41:1d:e2:eb:b4:1d:
51:21:5b:03:a1:e7:33:b2:65:2b:f0:8d:01:06:50:01:e7:c4:
e1:75:83:a1:f2:1a:dc:52:27:ed:3b:dd:5d:d5:f0:23:0c:63:
18:5d:5e:e9:9b:f3:cd:de:6c:76:33:e6:a9:fc:f8:98:38:a4:
5a:20:d7:09:15:e2:7b:bb:70:4b:9c:24:d5:e7:d7:78:82:0a:
82:d8:0c:fd:0a:6c:4d:46:19:72:56:1d:8c:3b:46:b6:4c:e7:
6e:32:69:87:4c:7c:ba:45:31:67:ff:bf:86:c4:ac:5e:66:a9:
40:1c:7e:bd:b1:47:3b:76:ce:2b:89:68:88:d8:ed:e8:ea:68:
93:9e:ef:12:87:13:cb:d2:88:e8:ab:4c:01:84:1f:4d:02:45:
ab:ef:d0:a8:3b:6b:d8:92:58:b0:56:93:89:c0:14:4e:d7:63:
70:11:e6:e0:b6:7a:92:84:00:5d:7b:fc:d8:81:ce:1f:cc:b0:
74:86:ff:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:06:11 2026 by rpki-client