Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: 5pzIHws5et7N79SL2ta4QxtGog98CPcBhCWXjHs+xF0=
Subject key identifier: 5D:26:13:92:E0:70:E3:87:CF:9D:F8:9D:2B:EA:8E:4A:B6:15:48:9C
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 019FAC3EE390158EDCE9290E8FF06402495D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 0255
Signing time: Wed 29 Jul 2026 05:00:30 +0000
Manifest this update: Wed 29 Jul 2026 05:00:30 +0000
Manifest next update: Thu 30 Jul 2026 05:00:30 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: sGKWAi3LFSnSpskmPtuqJtUINbkI3rxVjxGktTiGtFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:e3:90:15:8e:dc:e9:29:0e:8f:f0:64:02:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Jul 29 05:00:30 2026 GMT
Not After : Jul 30 05:00:30 2026 GMT
Subject: CN=5d261392e070e387cf9df89d2bea8e4ab615489c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:94:45:81:d2:d5:3e:0a:41:56:57:fc:b2:
be:20:10:1a:71:9f:dd:ae:23:ef:52:ad:14:68:fc:
a7:f8:93:1a:6f:77:61:52:13:d8:2c:cd:a7:6a:8a:
b2:49:89:de:b1:40:2f:cd:d4:61:e1:ac:37:86:20:
4a:71:37:14:24:9a:0c:d4:cd:af:4f:47:5b:64:55:
cb:6a:34:90:a1:b7:ee:ec:17:a7:d9:37:c1:de:33:
c7:de:ce:c7:bb:63:5c:5e:22:77:96:15:43:1c:60:
1a:22:9d:6f:a9:3c:ee:e2:72:28:61:bd:b7:90:a7:
1c:a1:43:76:8f:df:3e:a4:92:b3:39:5a:9f:a1:13:
e6:a6:58:6b:29:ed:27:12:71:66:b7:ad:7f:38:3d:
71:cd:0e:e7:39:be:14:3b:66:be:be:1e:45:4d:37:
ed:87:66:38:07:63:a4:8a:a9:6d:66:25:94:af:58:
19:d3:e6:19:fe:09:24:f5:1c:2f:1e:b0:dc:b9:63:
69:d6:7f:37:24:5b:c7:88:38:22:d7:8e:cc:ee:c6:
49:5e:21:53:55:9b:03:40:7c:96:c5:b2:2f:db:52:
1f:f4:e8:d9:25:6d:8b:7d:bc:20:78:1e:00:e7:89:
aa:a8:0f:86:02:52:73:e9:fd:db:9d:63:61:1e:e7:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:13:92:E0:70:E3:87:CF:9D:F8:9D:2B:EA:8E:4A:B6:15:48:9C
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:66:d2:38:c9:f6:b4:b6:96:0b:21:59:b6:2b:b7:d7:37:d9:
64:6e:67:7e:5d:7e:0d:b9:fa:d2:41:26:0b:b6:13:d4:d2:8e:
e9:64:7a:c2:c4:dd:c0:0d:2f:b5:92:4d:d5:55:3b:a1:67:f0:
4d:d3:61:63:d7:43:86:52:78:39:33:07:ef:b7:64:0a:88:ac:
f5:e3:f4:ab:4a:8f:e3:37:87:3a:85:74:d5:de:8c:11:a9:5c:
2e:48:c5:68:ab:70:2f:ff:98:2b:8c:87:20:67:50:b6:d0:34:
a5:be:da:05:e7:bc:45:89:1d:1a:c8:2d:8e:c9:08:2a:96:8c:
05:46:db:78:56:f1:7b:d9:ca:91:10:5b:e6:fd:40:65:9a:88:
e3:89:70:e1:01:4d:be:1f:c7:9a:76:1c:b2:eb:13:d1:89:ba:
b7:1e:32:8e:4a:b8:b2:64:4c:49:92:30:8d:63:fd:17:c0:39:
ed:38:70:79:47:10:e8:6a:c2:59:21:7e:43:97:19:95:88:59:
96:27:6e:84:d0:94:4c:f4:31:fb:79:a2:32:00:01:77:02:66:
06:19:2f:dc:c5:7d:25:6a:98:8b:00:a0:a3:79:3b:0e:09:a0:
9a:06:bb:31:e2:43:69:90:b3:87:40:a5:0e:3c:a5:f8:be:07:
70:d0:13:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPuOQFY7c6SkOj/BkAkldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMWJiNmUzMWVlZTNiNzJhZGU3YjFhNTkwZTJlNjJhYWY1
YzNlYjAwHhcNMjYwNzI5MDUwMDMwWhcNMjYwNzMwMDUwMDMwWjAzMTEwLwYDVQQD
Eyg1ZDI2MTM5MmUwNzBlMzg3Y2Y5ZGY4OWQyYmVhOGU0YWI2MTU0ODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyyURYHS1T4KQVZX/LK+IBAacZ/d
riPvUq0UaPyn+JMab3dhUhPYLM2naoqySYnesUAvzdRh4aw3hiBKcTcUJJoM1M2v
T0dbZFXLajSQobfu7Ben2TfB3jPH3s7Hu2NcXiJ3lhVDHGAaIp1vqTzu4nIoYb23
kKccoUN2j98+pJKzOVqfoRPmplhrKe0nEnFmt61/OD1xzQ7nOb4UO2a+vh5FTTft
h2Y4B2OkiqltZiWUr1gZ0+YZ/gkk9RwvHrDcuWNp1n83JFvHiDgi147M7sZJXiFT
VZsDQHyWxbIv21If9OjZJW2LfbwgeB4A54mqqA+GAlJz6f3bnWNhHufclwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0mE5LgcOOHz534nSvqjkq2FUicMB8GA1UdIwQY
MBaAFGEbtuMe7jtyreexpZDi5iqvXD6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMt
NjNlZWI5ODFhM2JkLzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMtNjNlZWI5ODFhM2Jk
LzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2bSOMn2
tLaWCyFZtiu31zfZZG5nfl1+Dbn60kEmC7YT1NKO6WR6wsTdwA0vtZJN1VU7oWfw
TdNhY9dDhlJ4OTMH77dkCois9eP0q0qP4zeHOoV01d6MEalcLkjFaKtwL/+YK4yH
IGdQttA0pb7aBee8RYkdGsgtjskIKpaMBUbbeFbxe9nKkRBb5v1AZZqI44lw4QFN
vh/HmnYcsusT0Ym6tx4yjkq4smRMSZIwjWP9F8A57ThweUcQ6GrCWSF+Q5cZlYhZ
liduhNCUTPQx+3miMgABdwJmBhkv3MV9JWqYiwCgo3k7Dgmgmga7MeJDaZCzh0Cl
Djyl+L4HcNATEQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:26 2026 by rpki-client