Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: a45DLFAmhNDPz8npWNuSONoBel1v0ODisab6O5JmMXc=
Subject key identifier: 66:C4:8B:73:D7:61:1A:46:69:38:C7:7E:C1:AF:7B:A9:A5:ED:15:02
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019D9B87D13D9A290DB71550ACDF0F291319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 0138
Signing time: Fri 17 Apr 2026 13:01:02 +0000
Manifest this update: Fri 17 Apr 2026 13:01:02 +0000
Manifest next update: Sat 18 Apr 2026 13:01:02 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: 6uLPYoONrw/i5z3j7ZiwuKclobmWiXFDq2ij+2GuJ68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d1:3d:9a:29:0d:b7:15:50:ac:df:0f:29:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Apr 17 13:01:02 2026 GMT
Not After : Apr 18 13:01:02 2026 GMT
Subject: CN=66c48b73d7611a466938c77ec1af7ba9a5ed1502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:66:8b:5b:71:4d:8f:f1:ac:b8:ff:f9:3a:
af:d5:a1:a9:ab:fb:08:a1:4c:e6:24:39:5a:97:90:
45:9b:34:04:bf:1e:7e:4f:3f:cf:92:d4:8e:33:9b:
8c:8c:ba:50:b7:66:aa:d1:11:51:ad:19:72:a1:14:
2f:9a:ee:55:45:7d:32:8c:5e:db:bf:00:3c:6b:42:
7f:96:0a:e9:be:a3:db:72:28:d0:96:7c:7e:89:a0:
75:49:95:8d:de:87:ac:b8:69:77:ca:ce:5e:15:45:
1a:b9:85:c5:7f:dd:1f:21:19:ad:86:83:a0:96:7e:
b8:50:a6:d4:45:6c:d0:5b:6a:4f:e6:4c:b1:9f:e6:
9b:fd:38:1e:59:9f:7b:28:02:ba:62:e1:c8:28:98:
ba:3c:ff:0d:9e:ef:10:d5:0c:44:29:90:8f:89:2c:
b3:88:00:c7:36:fe:01:c9:a3:aa:81:c9:5b:11:f1:
bb:dc:05:f5:1c:c7:fa:18:5e:36:0e:a4:87:53:84:
be:b8:5a:30:de:da:05:bb:09:e1:00:44:cc:22:a0:
83:11:8a:20:34:a8:d4:ed:38:e8:c8:06:ec:f8:49:
fe:d8:b6:f1:a9:fd:eb:21:62:9a:d6:4b:6e:25:6c:
62:1c:ce:16:a2:85:db:18:21:67:fd:c5:e3:16:b7:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:8B:73:D7:61:1A:46:69:38:C7:7E:C1:AF:7B:A9:A5:ED:15:02
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:ee:2e:a4:81:f2:21:b6:53:8b:0f:ca:39:b5:88:97:84:
9b:0e:68:ba:71:3f:7a:84:44:1b:46:21:9b:a0:2f:88:25:c2:
81:e5:14:d6:53:4d:df:b8:83:5c:74:43:04:75:49:bd:96:e3:
81:e4:01:3c:2c:df:30:fa:ca:be:3e:a1:cf:6e:f9:48:d8:1e:
c0:c1:a1:db:c0:44:e4:68:6f:5d:af:da:53:c0:d5:d4:d4:62:
72:98:b0:26:bf:0f:42:e4:d9:f9:29:dc:8e:0f:cc:ae:7a:1f:
74:11:5d:a5:ba:4b:e8:a4:99:a0:a9:2d:06:b2:3c:b2:1a:21:
30:16:93:c3:b6:91:44:12:35:66:74:3a:96:1d:22:40:fb:22:
81:b6:39:2e:5a:94:ee:a2:f6:71:49:d0:b2:5a:e1:48:ec:05:
87:2a:cd:3e:c8:63:93:1f:86:43:1a:bb:9e:d4:d0:4c:1e:90:
89:47:63:60:b7:88:75:0c:0c:61:28:8c:83:41:5c:76:37:8e:
8e:e5:79:f8:b6:ed:0d:89:21:d1:93:85:3c:fe:b5:9d:d7:65:
45:5f:cc:05:66:3c:16:1a:b4:21:a4:d6:06:a0:a8:93:7b:10:
58:0e:67:69:cc:b7:19:23:e1:96:69:79:ab:0b:60:a3:be:43:
e2:23:d8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh9E9mikNtxVQrN8PKRMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTM0M2E4ZWU5MmFlYzM2NTEwZGU5NzM4MmRjNmE0MjA4
ODhlZmUwHhcNMjYwNDE3MTMwMTAyWhcNMjYwNDE4MTMwMTAyWjAzMTEwLwYDVQQD
Eyg2NmM0OGI3M2Q3NjExYTQ2NjkzOGM3N2VjMWFmN2JhOWE1ZWQxNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs5mi1txTY/xrLj/+Tqv1aGpq/sI
oUzmJDlal5BFmzQEvx5+Tz/PktSOM5uMjLpQt2aq0RFRrRlyoRQvmu5VRX0yjF7b
vwA8a0J/lgrpvqPbcijQlnx+iaB1SZWN3oesuGl3ys5eFUUauYXFf90fIRmthoOg
ln64UKbURWzQW2pP5kyxn+ab/TgeWZ97KAK6YuHIKJi6PP8Nnu8Q1QxEKZCPiSyz
iADHNv4ByaOqgclbEfG73AX1HMf6GF42DqSHU4S+uFow3toFuwnhAETMIqCDEYog
NKjU7TjoyAbs+En+2Lbxqf3rIWKa1ktuJWxiHM4WooXbGCFn/cXjFrdcawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbEi3PXYRpGaTjHfsGve6ml7RUCMB8GA1UdIwQY
MBaAFGETQ6jukq7DZRDelzgtxqQgiI7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUt
NzBiOTc3ZTc0YTU3LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUtNzBiOTc3ZTc0YTU3
LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasnuLqSB
8iG2U4sPyjm1iJeEmw5ounE/eoREG0Yhm6AviCXCgeUU1lNN37iDXHRDBHVJvZbj
geQBPCzfMPrKvj6hz275SNgewMGh28BE5GhvXa/aU8DV1NRicpiwJr8PQuTZ+Snc
jg/MrnofdBFdpbpL6KSZoKktBrI8shohMBaTw7aRRBI1ZnQ6lh0iQPsigbY5LlqU
7qL2cUnQslrhSOwFhyrNPshjkx+GQxq7ntTQTB6QiUdjYLeIdQwMYSiMg0FcdjeO
juV5+LbtDYkh0ZOFPP61nddlRV/MBWY8Fhq0IaTWBqCok3sQWA5nacy3GSPhlml5
qwtgo75D4iPYjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:50:54 2026 by rpki-client