Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: t8l+t8G+s0Irocpv4FkhJ4OAkqUQJrvciLcJ9xboxeE=
Subject key identifier: 6E:E8:AB:54:29:E7:20:91:1F:1A:CA:1E:B3:33:6B:35:06:7E:FB:EC
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019FACAC9CB5D75171E75028AD8FD789E7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 024A
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: Z0njtmVKQBbcUuigvdw3nFWsF6/n4wHKxV82o4r2TaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9c:b5:d7:51:71:e7:50:28:ad:8f:d7:89:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=6ee8ab5429e720911f1aca1eb3336b35067efbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:ce:6c:78:69:3a:ee:77:ac:de:8e:d2:9a:
88:d8:c1:03:18:52:87:1a:e2:06:18:9a:01:ea:db:
0a:c2:8d:1c:12:22:ad:19:36:1c:99:f1:89:c1:9e:
1f:6f:f6:a4:87:49:4e:a2:1a:ef:58:dd:18:3c:15:
58:40:f0:2f:73:b6:07:15:7b:0b:ab:2c:d3:3d:67:
b9:21:41:3e:f8:80:b4:49:77:95:c9:e8:b6:5b:34:
14:a7:3e:b5:c5:45:da:c8:8f:b7:74:ea:57:0f:30:
59:7d:ca:14:de:e7:3d:a6:c1:e1:5a:83:10:f0:8a:
02:3b:e2:bb:70:c8:01:5a:05:19:c8:87:9b:a3:39:
7b:99:3c:49:f8:d4:a8:68:df:c1:9f:a8:d9:c4:b8:
98:86:fd:77:f4:87:8a:5d:87:cb:38:28:81:23:94:
0e:67:07:85:82:a2:c1:25:10:a1:97:36:90:9b:96:
11:66:81:38:e9:d6:0a:5e:48:13:19:e1:9a:e6:7c:
01:ae:3a:8c:72:55:ae:5b:8d:2d:0f:06:1c:88:70:
13:47:b1:00:92:b0:8c:8c:90:1d:9f:aa:c8:c2:76:
e5:68:de:fc:ce:cf:c0:c1:22:f0:b8:df:cd:cd:96:
8a:5f:fd:47:17:b1:c1:d6:97:41:dd:78:0a:1e:aa:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:AB:54:29:E7:20:91:1F:1A:CA:1E:B3:33:6B:35:06:7E:FB:EC
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a5:3a:a6:78:7b:af:c7:87:0f:73:11:d4:54:7e:4b:3d:26:
d1:89:89:83:0e:0d:24:6a:42:ce:13:56:ca:3f:b5:6d:d1:aa:
48:40:52:84:2d:2d:e8:9c:4a:f9:d7:71:68:1d:3c:ed:dd:fc:
7b:a0:29:7c:a5:04:05:61:bf:3d:69:d2:83:3f:2d:f7:c9:2d:
28:49:2d:06:ee:d1:54:ab:ab:5d:79:67:0a:27:b1:ff:43:ac:
86:dd:44:9f:62:90:36:21:8d:a2:47:69:30:c8:ab:60:c0:65:
d8:c8:f3:fd:64:0f:bb:0b:00:d8:4a:bd:93:d9:4e:a2:76:17:
84:34:55:4b:51:3c:f7:cf:d7:2e:0c:58:d3:43:55:db:ff:8b:
8a:54:b0:fe:d0:5c:8a:b5:d3:04:e7:73:f3:64:a4:1b:f8:96:
c9:69:b9:79:f4:3f:35:2c:91:f1:23:37:e2:64:23:2e:f1:45:
1a:a9:bf:79:46:a3:5f:23:d8:97:c0:24:5b:13:9a:a9:f8:bf:
10:30:56:d7:1b:10:6b:47:4e:1e:93:42:5e:62:fb:4e:e4:39:
7e:df:b4:07:44:88:28:57:9d:d4:f5:7a:14:ea:bc:3c:97:fc:
9e:e1:74:81:5a:1a:30:a1:11:5f:70:53:c0:a7:18:93:60:85:
39:4f:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:27 2026 by rpki-client