Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File: Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier: KYgLiotW1+Zw25kuRrn16IIvdiU4rcdaqx4Ecglqy7I=
Subject key identifier: 7B:D4:48:EB:52:D2:47:F3:64:3B:36:9E:0C:CF:D0:2C:95:EF:08:C9
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01A0CFDAB2E596915C2C519A631EA5DC5C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number: 1A75
Signing time: Wed 23 Sep 2026 20:00:11 +0000
Manifest this update: Wed 23 Sep 2026 20:00:11 +0000
Manifest next update: Thu 24 Sep 2026 20:00:11 +0000
Files and hashes: 1: 2dU_Wx7maoKES4uWBmISrFThyIU.roa (hash: ffH0TAg9XSxzOXt+6AV+6sDEvW+c8igbg9XX2e6NJUY=)
2: HZb22Oio0r0dOkO7Ylc22UNpmkI.roa (hash: 4bxPJ8gmL9NMrQNM+ipouVsdrPbO9cdpsR6HkCC+6eM=)
3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: uF4GgFka4OfJXOoQvhI3dqIzXCx7ZNSd2QM6h+5WmYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:b2:e5:96:91:5c:2c:51:9a:63:1e:a5:dc:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Sep 23 20:00:11 2026 GMT
Not After : Sep 24 20:00:11 2026 GMT
Subject: CN=7bd448eb52d247f3643b369e0ccfd02c95ef08c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:2c:02:5b:1e:08:10:68:c9:4f:ed:7a:04:
d6:2b:eb:a3:e9:0e:6e:a6:7b:85:ec:12:76:8a:9a:
25:70:7d:96:17:c8:c8:96:9e:23:ab:64:2c:56:e6:
7c:de:63:37:43:73:8a:62:5d:fd:3c:eb:5b:c0:50:
6b:d9:51:fd:16:b8:5d:53:c9:7e:a0:f3:5a:6f:fb:
b5:3b:68:1f:15:d3:0a:97:de:20:f7:d1:74:fa:77:
d4:c3:50:2d:0b:f9:b7:9a:de:54:23:7e:c2:8f:74:
df:41:02:98:7d:b0:02:a6:5f:63:4c:b1:c7:96:d4:
16:85:58:15:4a:c6:c6:dc:82:d7:11:12:c3:93:35:
ca:9e:e3:f6:20:5b:dc:fc:de:fa:23:18:a4:24:9b:
aa:bc:45:e0:e5:21:8e:d8:8c:20:1c:60:68:77:8c:
f9:08:c3:68:41:13:3f:70:68:c9:71:29:36:ba:18:
66:72:45:56:b7:b1:a9:75:1f:7b:b9:62:35:fb:b3:
8f:fc:3a:a0:63:fb:63:be:29:99:3d:62:1d:e1:fa:
4a:32:d8:b5:d6:39:5f:ad:5b:dd:1a:57:47:a8:ad:
42:c8:89:f0:84:d8:08:b9:3b:f2:92:40:bd:6c:bc:
bf:25:7b:0d:b2:00:21:63:fa:33:75:5e:df:e3:47:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:48:EB:52:D2:47:F3:64:3B:36:9E:0C:CF:D0:2C:95:EF:08:C9
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:d7:9f:9d:ca:c4:be:c2:82:72:cd:2d:68:d3:8c:db:e1:
cb:41:34:6c:65:b9:af:1b:0f:80:95:12:77:e2:77:02:1e:d2:
63:cd:dc:c2:9f:7c:61:36:c4:15:a3:be:58:54:9c:d9:f9:eb:
f2:6a:bc:e5:d0:f8:df:c3:27:17:ee:f4:b1:a2:6a:1f:46:26:
b6:68:3d:ec:dd:40:f1:d9:23:67:a4:77:31:a3:61:7c:5c:82:
06:33:8f:3b:c6:93:8d:6d:e7:96:b5:0f:68:be:9b:36:9c:25:
de:dd:fc:82:ee:17:e8:30:10:51:61:e8:38:f1:87:e0:fd:83:
bd:5d:4c:48:50:77:bb:be:07:25:9e:6f:6d:fc:18:bf:9c:53:
a1:72:3f:55:f3:78:9c:20:04:70:9b:b1:58:68:14:2f:4e:0b:
ac:07:62:45:cb:38:ba:c9:11:c7:89:9d:5b:e6:a7:df:0b:b0:
15:bf:3d:78:95:e2:48:5d:15:6f:22:f8:44:cb:09:9b:1f:01:
57:b6:d7:34:87:49:31:44:ac:57:7e:f2:3e:67:d9:a2:73:65:
6e:ca:8d:5e:07:85:42:22:7e:a2:c9:2b:0d:cb:56:41:4a:87:
df:b8:42:38:00:91:d7:6b:6a:a0:f1:f5:88:fc:2d:e8:9f:da:
8d:0b:a8:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2rLllpFcLFGaYx6l3FyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh
OGM5OTMwHhcNMjYwOTIzMjAwMDExWhcNMjYwOTI0MjAwMDExWjAzMTEwLwYDVQQD
Eyg3YmQ0NDhlYjUyZDI0N2YzNjQzYjM2OWUwY2NmZDAyYzk1ZWYwOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcYsAlseCBBoyU/tegTWK+uj6Q5u
pnuF7BJ2ipolcH2WF8jIlp4jq2QsVuZ83mM3Q3OKYl39POtbwFBr2VH9FrhdU8l+
oPNab/u1O2gfFdMKl94g99F0+nfUw1AtC/m3mt5UI37Cj3TfQQKYfbACpl9jTLHH
ltQWhVgVSsbG3ILXERLDkzXKnuP2IFvc/N76IxikJJuqvEXg5SGO2IwgHGBod4z5
CMNoQRM/cGjJcSk2uhhmckVWt7GpdR97uWI1+7OP/DqgY/tjvimZPWId4fpKMti1
1jlfrVvdGldHqK1CyInwhNgIuTvykkC9bLy/JXsNsgAhY/ozdV7f40ch4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvUSOtS0kfzZDs2ngzP0CyV7wjJMB8GA1UdIwQY
MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt
MzNjYzNhZGIxZTc4LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4
LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX3Xn53K
xL7CgnLNLWjTjNvhy0E0bGW5rxsPgJUSd+J3Ah7SY83cwp98YTbEFaO+WFSc2fnr
8mq85dD438MnF+70saJqH0Ymtmg97N1A8dkjZ6R3MaNhfFyCBjOPO8aTjW3nlrUP
aL6bNpwl3t38gu4X6DAQUWHoOPGH4P2DvV1MSFB3u74HJZ5vbfwYv5xToXI/VfN4
nCAEcJuxWGgUL04LrAdiRcs4uskRx4mdW+an3wuwFb89eJXiSF0VbyL4RMsJmx8B
V7bXNIdJMUSsV37yPmfZonNlbsqNXgeFQiJ+oskrDctWQUqH37hCOACR12tqoPH1
iPwt6J/ajQuotg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:21:01 2026 by rpki-client