Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
File: YlDmLARIEp9jWJGKccM0TiWoLZs.mft (raw, json)
Hash identifier: UD6MK+9h92sILqfow9GPgRshk4HKW+VUusVvCj8gdT8=
Subject key identifier: 05:73:30:E8:6A:39:E1:3E:85:53:F6:1A:78:37:15:DE:68:A4:41:F3
Authority key identifier: 62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
Certificate issuer: /CN=6250e62c0448129f6358918a71c3344e25a82d9b
Certificate serial: 01A0D0EE3C7EDAF730743BF8C199AD7B95D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
Manifest number: 0419
Signing time: Thu 24 Sep 2026 01:01:08 +0000
Manifest this update: Thu 24 Sep 2026 01:01:08 +0000
Manifest next update: Fri 25 Sep 2026 01:01:08 +0000
Files and hashes: 1: DRO3tCTePWIvKHPgw6pmaXwU0JU.roa (hash: nsXU89cmKGMuchI2BpERlyONOF3QYxV+4FYWi2CIuFY=)
2: YlDmLARIEp9jWJGKccM0TiWoLZs.crl (hash: D+n3BEPPgyLEcmwyV9+vDT6WjpJ+diRwBshyAupHwNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:3c:7e:da:f7:30:74:3b:f8:c1:99:ad:7b:95:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6250e62c0448129f6358918a71c3344e25a82d9b
Validity
Not Before: Sep 24 01:01:08 2026 GMT
Not After : Sep 25 01:01:08 2026 GMT
Subject: CN=057330e86a39e13e8553f61a783715de68a441f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:2c:ae:52:28:45:d2:dd:a9:94:27:99:85:
b8:c8:5f:65:35:a1:0d:47:77:2d:ae:e3:8c:38:16:
cc:8d:62:58:86:49:39:1d:84:3f:51:82:35:b6:bf:
a0:38:10:cd:e0:2e:17:c8:a7:88:bd:9d:dc:11:61:
52:51:e4:14:6e:01:64:e1:57:c8:ce:15:33:49:37:
fb:14:e8:16:3d:f8:cb:b2:87:a9:30:7c:c4:be:5d:
bc:66:83:3e:dd:13:d7:0c:f3:9c:97:46:10:6b:b7:
d2:45:5e:96:b2:e0:07:e4:6e:61:0d:bb:d8:ad:b7:
1b:71:a2:62:e8:00:34:a8:78:f9:d6:bd:2f:0e:c3:
07:a6:86:b9:60:3e:67:28:80:e5:0e:80:9f:f8:75:
7a:17:e0:aa:92:70:40:66:62:cf:ba:cd:04:a2:fa:
57:e5:1f:a8:3b:1d:80:d8:c6:ab:c2:cc:a9:9e:1d:
9b:f5:48:fe:fa:92:7a:7d:20:cc:eb:7f:23:55:cb:
f0:43:65:79:22:c6:81:fe:1b:8b:9b:d2:b8:a2:93:
3b:98:74:86:8e:83:a1:26:80:cc:e6:a4:58:a2:93:
77:99:e1:b2:5e:c9:b8:77:75:2a:85:de:22:ca:1e:
b5:fb:b2:89:ed:ad:16:5c:75:11:03:a3:b9:5c:e2:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:30:E8:6A:39:E1:3E:85:53:F6:1A:78:37:15:DE:68:A4:41:F3
X509v3 Authority Key Identifier:
keyid:62:50:E6:2C:04:48:12:9F:63:58:91:8A:71:C3:34:4E:25:A8:2D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlDmLARIEp9jWJGKccM0TiWoLZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0186a2-f8aa-41d8-9a4e-8726dd88f529/1/YlDmLARIEp9jWJGKccM0TiWoLZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:31:78:09:f3:39:35:38:9b:2f:6a:ba:ed:9c:d2:69:23:5e:
bd:5f:54:c0:12:a4:3b:05:6d:c6:17:07:22:db:81:4a:1f:35:
84:83:ad:bb:56:38:4c:03:dd:98:db:e9:a7:bd:78:8d:88:48:
ba:0e:a6:40:ec:2c:f4:cc:11:b3:d1:ef:96:67:73:12:f0:d2:
fe:6b:d4:11:d4:aa:ea:a5:8f:32:59:59:58:b6:28:4c:a1:74:
44:a5:d5:ad:f2:91:71:04:32:ea:7d:77:98:94:b1:21:b7:14:
66:1d:0d:a0:ea:e1:c3:61:93:cd:d0:02:b9:90:b2:34:05:bf:
f8:8c:ef:6a:1c:43:aa:a9:45:ee:21:97:c8:5e:0d:04:49:14:
ba:19:b6:df:57:07:ac:83:1a:55:e2:34:3f:74:e3:89:81:f1:
c6:5f:17:4b:af:50:eb:bb:6f:53:30:49:ab:1f:07:4d:88:fd:
07:55:ca:2f:83:1e:27:77:23:8e:52:87:54:0f:ca:35:77:8b:
2b:a6:0c:82:0c:13:ba:0e:0a:6b:07:88:66:bb:47:ed:dc:1c:
a3:40:a0:4c:fd:29:dd:6d:2d:cc:73:7c:91:6a:3b:00:68:a0:
32:e4:cc:01:59:36:7b:a5:50:d5:39:a8:dc:0a:b3:05:d7:e7:
18:4e:0f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7jx+2vcwdDv4wZmte5XUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNTBlNjJjMDQ0ODEyOWY2MzU4OTE4YTcxYzMzNDRlMjVh
ODJkOWIwHhcNMjYwOTI0MDEwMTA4WhcNMjYwOTI1MDEwMTA4WjAzMTEwLwYDVQQD
EygwNTczMzBlODZhMzllMTNlODU1M2Y2MWE3ODM3MTVkZTY4YTQ0MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIQsrlIoRdLdqZQnmYW4yF9lNaEN
R3ctruOMOBbMjWJYhkk5HYQ/UYI1tr+gOBDN4C4XyKeIvZ3cEWFSUeQUbgFk4VfI
zhUzSTf7FOgWPfjLsoepMHzEvl28ZoM+3RPXDPOcl0YQa7fSRV6WsuAH5G5hDbvY
rbcbcaJi6AA0qHj51r0vDsMHpoa5YD5nKIDlDoCf+HV6F+CqknBAZmLPus0EovpX
5R+oOx2A2Marwsypnh2b9Uj++pJ6fSDM638jVcvwQ2V5IsaB/huLm9K4opM7mHSG
joOhJoDM5qRYopN3meGyXsm4d3Uqhd4iyh61+7KJ7a0WXHURA6O5XOIofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVzMOhqOeE+hVP2Gng3Fd5opEHzMB8GA1UdIwQY
MBaAFGJQ5iwESBKfY1iRinHDNE4lqC2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUt
ODcyNmRkODhmNTI5LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wMTg2YTItZjhhYS00MWQ4LTlhNGUtODcyNmRkODhmNTI5
LzEvWWxEbUxBUklFcDlqV0pHS2NjTTBUaVdvTFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDF4CfM5
NTibL2q67ZzSaSNevV9UwBKkOwVtxhcHItuBSh81hIOtu1Y4TAPdmNvpp714jYhI
ug6mQOws9MwRs9HvlmdzEvDS/mvUEdSq6qWPMllZWLYoTKF0RKXVrfKRcQQy6n13
mJSxIbcUZh0NoOrhw2GTzdACuZCyNAW/+IzvahxDqqlF7iGXyF4NBEkUuhm231cH
rIMaVeI0P3TjiYHxxl8XS69Q67tvUzBJqx8HTYj9B1XKL4MeJ3cjjlKHVA/KNXeL
K6YMggwTug4KaweIZrtH7dwco0CgTP0p3W0tzHN8kWo7AGigMuTMAVk2e6VQ1Tmo
3AqzBdfnGE4Ppg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:07:51 2026 by rpki-client