Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: buxWiwE4bdEZxEkNVKKZnYYYGaFqRuaHLFiHZC6dHK0=
Subject key identifier: 5C:1B:7B:4A:45:49:58:1E:59:F4:13:2F:01:91:63:24:63:A7:A1:1C
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 019D273AAC35C928E86C3F3837620CA8A22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 0107
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: QFkuk/P07XRCiKk599ZPptJSP8xEaKnLKPt4pGlK5FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:35:c9:28:e8:6c:3f:38:37:62:0c:a8:a2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=5c1b7b4a4549581e59f4132f0191632463a7a11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:d4:a6:c4:30:7c:b5:45:0a:05:8f:75:29:
1d:af:c1:e6:c5:bc:d3:95:9b:c7:a8:55:57:3a:99:
23:4a:cc:35:29:21:c2:db:5c:0f:9f:4b:58:fa:54:
b3:fa:dc:4d:43:f1:0f:fa:62:99:ca:72:94:d4:aa:
d6:70:bc:96:67:0a:4f:6d:96:6c:20:8e:95:96:32:
bb:01:37:32:cb:96:46:77:ae:9f:cc:8b:06:55:e5:
0c:44:24:d1:ec:9c:d9:44:0a:27:98:e5:2e:bd:ec:
f7:0c:f5:ed:24:fc:d7:fd:18:97:e4:21:32:d0:22:
98:b0:ea:62:fc:32:1a:36:f8:34:66:13:27:cc:13:
4e:35:91:bf:6a:fe:0f:42:57:c1:2b:d0:22:61:cc:
6b:39:c5:bf:75:f3:2a:f4:45:39:74:86:94:ba:06:
99:9d:9c:dc:0f:a0:fd:db:1a:2b:e2:7b:51:80:2d:
b3:b6:39:37:f2:45:a6:01:bb:33:be:b5:78:05:ec:
d0:bc:d0:5a:0d:8f:e7:a9:a1:c6:9d:f0:e1:9d:9b:
19:4d:a6:ea:62:91:5b:73:66:01:3a:dc:3b:e5:50:
78:8e:ce:7f:6c:28:99:69:34:12:82:ce:3c:25:95:
4d:b2:49:0f:1d:d7:e1:d7:63:42:d3:b6:16:ff:ff:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:7B:4A:45:49:58:1E:59:F4:13:2F:01:91:63:24:63:A7:A1:1C
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2e:a4:14:b5:b5:86:3c:e0:00:b2:76:58:e2:88:48:72:41:
63:8b:08:ff:36:e8:7e:11:52:78:d8:f7:83:d7:fb:d4:77:be:
3a:f8:6a:80:50:24:4f:89:0a:69:02:d9:d7:0b:eb:1d:48:38:
41:40:34:fe:56:b4:4c:f3:3d:a0:1f:04:84:30:e9:10:80:63:
19:5a:e0:af:d0:46:29:30:f0:d2:83:56:65:f7:c7:e5:5e:98:
e2:70:4a:21:3c:03:dd:f3:59:fe:38:c8:41:13:d1:bd:f2:24:
c2:07:c5:aa:45:ef:3e:8b:f5:ab:51:93:9f:c9:e3:24:27:20:
a4:2a:a9:71:a3:99:40:a7:ef:68:79:f6:53:6d:7f:ed:88:67:
1e:ec:dd:c8:12:d5:90:c2:58:90:96:a9:70:6d:44:88:7b:17:
22:6c:72:cf:a4:cf:a8:a6:df:db:44:3c:d4:c9:d8:e0:9b:38:
b4:3d:ee:f1:49:ef:b5:64:a0:ad:17:35:17:e4:f8:99:41:33:
0a:36:f3:8e:ad:63:68:a2:e9:50:18:0f:1f:7a:5f:b0:cd:1a:
2b:e6:a0:ea:0d:98:42:c4:65:61:38:c1:d4:02:6e:24:a6:ec:
b5:75:e0:ef:c3:11:f7:36:11:10:5f:02:24:72:d8:71:ce:43:
76:8a:a5:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqw1ySjobD84N2IMqKIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMWJiNmUzMWVlZTNiNzJhZGU3YjFhNTkwZTJlNjJhYWY1
YzNlYjAwHhcNMjYwMzI1MjMwMDQ5WhcNMjYwMzI2MjMwMDQ5WjAzMTEwLwYDVQQD
Eyg1YzFiN2I0YTQ1NDk1ODFlNTlmNDEzMmYwMTkxNjMyNDYzYTdhMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qfUpsQwfLVFCgWPdSkdr8HmxbzT
lZvHqFVXOpkjSsw1KSHC21wPn0tY+lSz+txNQ/EP+mKZynKU1KrWcLyWZwpPbZZs
II6VljK7ATcyy5ZGd66fzIsGVeUMRCTR7JzZRAonmOUuvez3DPXtJPzX/RiX5CEy
0CKYsOpi/DIaNvg0ZhMnzBNONZG/av4PQlfBK9AiYcxrOcW/dfMq9EU5dIaUugaZ
nZzcD6D92xor4ntRgC2ztjk38kWmAbszvrV4BezQvNBaDY/nqaHGnfDhnZsZTabq
YpFbc2YBOtw75VB4js5/bCiZaTQSgs48JZVNskkPHdfh12NC07YW//+iDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwbe0pFSVgeWfQTLwGRYyRjp6EcMB8GA1UdIwQY
MBaAFGEbtuMe7jtyreexpZDi5iqvXD6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMt
NjNlZWI5ODFhM2JkLzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMtNjNlZWI5ODFhM2Jk
LzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi6kFLW1
hjzgALJ2WOKISHJBY4sI/zbofhFSeNj3g9f71He+OvhqgFAkT4kKaQLZ1wvrHUg4
QUA0/la0TPM9oB8EhDDpEIBjGVrgr9BGKTDw0oNWZffH5V6Y4nBKITwD3fNZ/jjI
QRPRvfIkwgfFqkXvPov1q1GTn8njJCcgpCqpcaOZQKfvaHn2U21/7YhnHuzdyBLV
kMJYkJapcG1EiHsXImxyz6TPqKbf20Q81MnY4Js4tD3u8UnvtWSgrRc1F+T4mUEz
Cjbzjq1jaKLpUBgPH3pfsM0aK+ag6g2YQsRlYTjB1AJuJKbstXXg78MR9zYREF8C
JHLYcc5Ddoqlxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:32 2026 by rpki-client