Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: t2g1nMFxTpnE2W4TWHfC5Ttene1typ+s6DCK0d0eq2Y=
Subject key identifier: 0B:E1:AD:0D:52:67:3F:BB:F4:2B:A1:CD:26:38:18:55:35:2F:15:BB
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 01A0D1C914362F206401F39B55AD6B405A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 02ED
Signing time: Thu 24 Sep 2026 05:00:11 +0000
Manifest this update: Thu 24 Sep 2026 05:00:11 +0000
Manifest next update: Fri 25 Sep 2026 05:00:11 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: y+3gBeTLVRwps5NwCVJc53kP5ogtP5gSu5kPst/NkJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:14:36:2f:20:64:01:f3:9b:55:ad:6b:40:5a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Sep 24 05:00:11 2026 GMT
Not After : Sep 25 05:00:11 2026 GMT
Subject: CN=0be1ad0d52673fbbf42ba1cd26381855352f15bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:c7:72:87:9d:e2:3f:91:de:da:24:b3:1c:
75:95:7a:9c:5e:ed:72:0a:2d:56:57:73:19:30:d6:
56:3f:10:f7:3b:73:0f:f9:c5:2d:e4:33:f2:38:5f:
76:9a:68:e3:f2:3e:38:25:73:45:b8:71:a6:dc:58:
6c:5e:d6:da:ce:4b:70:1b:3e:19:0d:0d:2d:d4:4b:
c6:89:46:61:9d:0e:2e:83:1a:fc:d6:a1:6d:8d:51:
ca:3a:85:3c:6a:06:47:f6:e4:1e:04:e7:51:86:a3:
0b:37:a0:3d:57:cd:06:27:61:7a:96:3f:ae:3c:c3:
ae:88:5c:16:04:7f:ac:45:af:0f:b1:d4:f9:8b:c7:
55:87:3d:e5:e5:6d:fb:e0:a9:86:42:dc:b8:8c:6c:
53:a0:c5:17:65:13:4c:05:c5:b0:99:48:97:93:1b:
5f:f5:b4:1f:7a:49:6c:1d:c0:2f:5e:ef:62:d6:86:
65:8c:7c:20:ca:d7:99:21:ce:63:f6:06:5a:46:0f:
21:c0:4e:5e:71:02:b2:d1:04:ac:cd:e2:d5:dc:77:
39:7b:0d:53:9e:43:bf:e3:00:49:4b:d9:c2:0f:e7:
20:ac:1e:be:f6:7c:fd:ce:3d:19:09:fc:52:23:ae:
c2:4c:ca:a8:63:c4:ce:b8:b8:90:13:42:76:3a:4c:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:AD:0D:52:67:3F:BB:F4:2B:A1:CD:26:38:18:55:35:2F:15:BB
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e6:1f:12:87:e1:cc:ed:c6:9c:88:39:39:63:f3:d7:fd:c5:
1e:d5:d7:40:c8:d6:19:16:1b:c2:5e:3d:11:71:e5:d4:51:74:
01:4d:c7:f5:3d:be:24:34:b3:f0:31:60:47:aa:77:07:5e:e5:
7a:8e:13:f3:af:f3:41:78:69:af:d0:1d:2d:d0:22:65:cf:70:
38:71:9e:54:29:69:48:26:c8:61:5a:5a:c3:c9:45:be:42:72:
ba:85:1a:f1:17:54:d9:43:46:8d:71:aa:20:6a:f0:a5:3c:e5:
e0:cd:86:2c:c5:e8:47:1e:c4:92:43:ed:27:67:c0:0e:f5:7a:
de:e1:c7:3d:e3:c4:4b:d3:be:ca:c0:12:41:fb:78:c3:80:1b:
ba:02:1a:f9:d5:6a:fe:71:7d:93:2c:e7:52:d8:78:f5:84:33:
75:f7:f2:bf:89:63:89:5c:12:3e:13:07:0f:b7:7b:72:01:5e:
03:9a:c9:c7:30:eb:74:55:99:9b:48:06:40:03:6e:25:95:0b:
67:b7:24:af:1b:3e:45:15:93:72:00:49:be:c3:fa:51:5f:ab:
78:bc:3a:23:72:34:43:bc:7a:72:ed:63:ef:79:e5:13:76:57:
ec:93:6b:f9:50:4c:e3:f1:ac:7e:c5:59:0d:47:5f:c9:0f:7c:
41:67:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:49:09 2026 by rpki-client