Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: XTynLBIB4q62h8BGUQWk2je8Ov701fvIuY03S0v4hcA=
Subject key identifier: 5C:DF:87:85:04:00:19:C6:D7:DA:CC:77:1E:F8:55:93:81:5E:31:56
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 01A13891C346FD8D9DE48C9DD2BEEC90890F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 0317
Signing time: Wed 14 Oct 2026 04:00:39 +0000
Manifest this update: Wed 14 Oct 2026 04:00:39 +0000
Manifest next update: Thu 15 Oct 2026 04:00:39 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: BvgkC/2+3V1EzzI76wygtsXfYdUCfB0VxWke56p1tqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:91:c3:46:fd:8d:9d:e4:8c:9d:d2:be:ec:90:89:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Oct 14 04:00:39 2026 GMT
Not After : Oct 15 04:00:39 2026 GMT
Subject: CN=5cdf8785040019c6d7dacc771ef85593815e3156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:7a:bb:28:8a:e6:07:e2:76:da:7c:42:50:
c0:94:e6:24:d2:7b:08:5c:54:9e:d5:a2:08:5c:13:
a3:98:ad:8a:c3:37:0c:88:71:16:94:6a:12:27:74:
6c:7c:ee:d1:6d:5c:97:1b:a3:80:dd:52:38:20:28:
1f:8b:66:a4:6d:3d:de:2f:39:45:78:c4:fe:2c:05:
d5:1b:af:68:56:ae:8d:1e:32:54:a8:16:71:b2:22:
08:19:e5:78:16:b9:93:7b:9b:f6:6d:65:e4:6f:7a:
91:20:6e:6f:8b:d0:c5:cb:fe:c2:11:46:67:bc:1e:
e7:f1:19:48:4a:df:e2:f8:3e:6b:a4:d2:79:74:de:
fc:f5:03:65:be:44:bf:50:0e:90:dd:38:39:de:da:
05:6f:65:a9:a1:2d:aa:ad:4b:de:21:cb:ef:d3:ce:
dc:aa:61:79:11:56:05:22:ae:53:5e:72:da:ae:5a:
57:13:cd:a1:e8:77:32:e6:01:6c:bb:56:59:20:11:
32:ba:6a:e8:1d:7b:85:74:98:64:c4:da:5e:52:04:
07:8a:15:be:60:79:25:45:26:13:1f:2a:93:0d:c2:
78:0b:50:5e:a7:d0:33:3c:7f:f5:0c:5c:1a:63:39:
cc:a9:ca:1e:2f:4b:a9:6c:0e:0f:b6:50:ae:d9:49:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:87:85:04:00:19:C6:D7:DA:CC:77:1E:F8:55:93:81:5E:31:56
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:27:79:f9:32:69:8b:7f:2b:41:94:49:0b:d3:0e:53:9f:a2:
d4:2b:33:93:d9:9e:32:3d:8a:47:f1:2c:a2:47:82:0a:cf:ae:
a0:a4:f8:33:d7:44:68:62:71:06:2a:bf:f5:76:06:fb:28:d5:
06:ca:8b:21:0d:0a:0c:73:09:39:be:6f:b4:91:c3:b5:6d:3b:
59:6d:4a:de:30:a4:83:f6:cc:c8:d8:d3:69:5e:aa:d9:1a:08:
fa:d3:5a:97:96:43:f5:8e:5f:d7:7f:9b:80:3b:1d:25:00:bc:
cf:ba:c0:66:fb:f0:09:a6:f7:99:fc:dd:45:43:ed:0e:a1:68:
b1:8a:75:a2:2b:18:56:1b:c1:77:25:b8:fe:07:5e:50:34:2c:
16:d5:c5:1a:08:d4:78:f5:41:d8:f2:7b:c2:52:d4:a2:fe:ee:
cc:0c:e3:fc:b5:77:7c:34:40:26:36:56:18:72:4d:ff:b4:b1:
86:f3:8e:d9:7a:e1:53:c6:ed:dd:b7:a5:6c:92:c8:d0:01:0d:
4d:dd:d3:3b:3b:23:dd:2e:22:86:fd:33:e9:ac:bb:ad:ed:1b:
26:13:a1:6d:d4:47:fa:43:aa:e8:22:7d:16:c9:81:bc:62:80:
88:5c:f2:ce:75:bb:d6:41:46:d6:01:cc:5b:10:ab:d9:4f:d9:
43:fc:13:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4kcNG/Y2d5Iyd0r7skIkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTM0M2E4ZWU5MmFlYzM2NTEwZGU5NzM4MmRjNmE0MjA4
ODhlZmUwHhcNMjYxMDE0MDQwMDM5WhcNMjYxMDE1MDQwMDM5WjAzMTEwLwYDVQQD
Eyg1Y2RmODc4NTA0MDAxOWM2ZDdkYWNjNzcxZWY4NTU5MzgxNWUzMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bl6uyiK5gfidtp8QlDAlOYk0nsI
XFSe1aIIXBOjmK2KwzcMiHEWlGoSJ3RsfO7RbVyXG6OA3VI4ICgfi2akbT3eLzlF
eMT+LAXVG69oVq6NHjJUqBZxsiIIGeV4FrmTe5v2bWXkb3qRIG5vi9DFy/7CEUZn
vB7n8RlISt/i+D5rpNJ5dN789QNlvkS/UA6Q3Tg53toFb2WpoS2qrUveIcvv087c
qmF5EVYFIq5TXnLarlpXE82h6Hcy5gFsu1ZZIBEyumroHXuFdJhkxNpeUgQHihW+
YHklRSYTHyqTDcJ4C1Bep9AzPH/1DFwaYznMqcoeL0upbA4PtlCu2UlKvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzfh4UEABnG19rMdx74VZOBXjFWMB8GA1UdIwQY
MBaAFGETQ6jukq7DZRDelzgtxqQgiI7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUt
NzBiOTc3ZTc0YTU3LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUtNzBiOTc3ZTc0YTU3
LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSd5+TJp
i38rQZRJC9MOU5+i1Cszk9meMj2KR/EsokeCCs+uoKT4M9dEaGJxBiq/9XYG+yjV
BsqLIQ0KDHMJOb5vtJHDtW07WW1K3jCkg/bMyNjTaV6q2RoI+tNal5ZD9Y5f13+b
gDsdJQC8z7rAZvvwCab3mfzdRUPtDqFosYp1oisYVhvBdyW4/gdeUDQsFtXFGgjU
ePVB2PJ7wlLUov7uzAzj/LV3fDRAJjZWGHJN/7SxhvOO2XrhU8bt3belbJLI0AEN
Td3TOzsj3S4ihv0z6ay7re0bJhOhbdRH+kOq6CJ9FsmBvGKAiFzyznW71kFG1gHM
WxCr2U/ZQ/wTIQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:32:38 2026 by rpki-client