Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
File: YRSXyDvpVCTDE4UHT-DRrwLvO30.mft (raw, json)
Hash identifier: vNzkRe+zS6dVWI5HGDJhzVPPXSwhESsl46qV+LOGi8A=
Subject key identifier: 4C:0E:27:2D:F1:5F:F2:50:BC:E6:7C:F2:58:54:91:29:EB:5D:52:69
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Certificate issuer: /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial: 01A0EB1CCEE320E0CFBE48F27FD12DAE6196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
Manifest number: 013C
Signing time: Tue 29 Sep 2026 03:02:08 +0000
Manifest this update: Tue 29 Sep 2026 03:02:08 +0000
Manifest next update: Wed 30 Sep 2026 03:02:08 +0000
Files and hashes: 1: YRSXyDvpVCTDE4UHT-DRrwLvO30.crl (hash: 9rUePr1bEqrusFUCC0hu31DJBnQZfwyESTYGELIvyHE=)
2: ZpQ5PR503LhgL2fOAz1VIBSTRQg.asa (hash: GZ8rnejIMG7nINyfruWNAMyWLZCCtxCe7KO/TPF2TSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:ce:e3:20:e0:cf:be:48:f2:7f:d1:2d:ae:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
Validity
Not Before: Sep 29 03:02:08 2026 GMT
Not After : Sep 30 03:02:08 2026 GMT
Subject: CN=4c0e272df15ff250bce67cf258549129eb5d5269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:9a:a7:7e:a0:a0:a4:d7:c6:08:e6:83:fd:
83:2e:42:2f:29:0e:e6:ef:cc:14:ea:82:03:ba:ea:
b9:1f:3e:fe:97:3a:54:30:a2:81:89:00:6d:dd:57:
36:16:b9:62:a6:a7:a1:0c:54:60:a0:91:99:ff:8b:
9f:9e:50:f3:2c:3f:ac:c1:44:d0:b2:dd:6d:f0:4a:
aa:7d:43:66:65:8d:66:1a:7f:6f:dc:bb:78:c1:3a:
80:c8:2d:1d:65:64:33:a4:d8:60:39:fe:06:0f:79:
0c:f5:f1:db:22:3d:91:71:47:99:7d:0c:f7:96:91:
11:99:f8:bb:27:e3:ce:46:b6:48:f8:7d:16:4e:0e:
0d:4d:c9:5c:4f:7f:8a:8b:25:28:b1:1e:1e:e3:05:
74:42:c4:e1:62:cb:90:8f:cc:ea:ad:87:64:f3:db:
24:c5:ae:13:07:b9:d8:fd:75:fa:45:2e:5c:3b:ca:
16:62:0c:9f:db:5a:08:98:10:cb:c2:be:73:5c:f6:
6f:68:74:30:e6:d1:ac:12:c8:6e:b8:ce:52:8d:a6:
2d:77:0a:36:6b:dc:51:c2:d9:74:98:6e:8b:cd:41:
56:2e:a2:61:3a:11:d5:ac:ea:03:62:97:b2:38:98:
60:6c:0e:94:a6:3e:47:3e:8b:7c:e5:42:46:3f:38:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:27:2D:F1:5F:F2:50:BC:E6:7C:F2:58:54:91:29:EB:5D:52:69
X509v3 Authority Key Identifier:
keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:2e:da:3c:ce:7d:bb:90:26:b9:68:18:49:93:b9:cf:68:
1f:3a:19:42:3e:06:23:e3:63:88:b4:97:50:c8:65:bf:4c:c6:
07:8f:05:a7:0c:7b:3a:10:28:ca:38:db:dc:ed:15:a7:c0:ca:
a7:65:1b:93:a8:af:b0:45:a1:a2:ff:f1:f9:6e:81:66:84:33:
fb:9f:e0:1f:42:6f:5a:5f:a3:d3:3d:87:ee:da:cd:56:5e:b0:
19:12:e8:ff:3a:25:8b:ac:33:3c:b9:7b:36:30:4f:79:f4:f7:
b8:f6:dd:58:3a:07:90:e4:95:52:d4:d9:f7:af:a6:21:10:d7:
91:b2:cd:92:16:3f:73:17:ba:3f:bf:ab:86:ef:c9:77:b9:b5:
ed:0d:fa:5b:d5:c6:2e:52:98:63:d9:ac:6d:14:c6:2f:7f:78:
1e:4e:32:38:18:2b:4b:c3:7d:40:25:22:34:82:81:d8:58:5d:
b5:50:b9:d5:fe:18:40:24:ed:98:cd:e3:86:32:3a:32:dc:f8:
be:2f:37:7d:c1:88:d6:20:6e:22:d5:0f:dd:cc:e6:91:26:61:
2f:a1:63:b5:1f:2b:28:cb:6d:c3:d6:ff:de:a5:fe:dd:55:53:
53:92:61:6b:01:23:64:a0:63:94:ef:3e:f4:01:fe:57:40:86:
ba:0d:5f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHM7jIODPvkjyf9EtrmGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTQ5N2M4M2JlOTU0MjRjMzEzODUwNzRmZTBkMWFmMDJl
ZjNiN2QwHhcNMjYwOTI5MDMwMjA4WhcNMjYwOTMwMDMwMjA4WjAzMTEwLwYDVQQD
Eyg0YzBlMjcyZGYxNWZmMjUwYmNlNjdjZjI1ODU0OTEyOWViNWQ1MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Wap36goKTXxgjmg/2DLkIvKQ7m
78wU6oIDuuq5Hz7+lzpUMKKBiQBt3Vc2FrlipqehDFRgoJGZ/4ufnlDzLD+swUTQ
st1t8EqqfUNmZY1mGn9v3Lt4wTqAyC0dZWQzpNhgOf4GD3kM9fHbIj2RcUeZfQz3
lpERmfi7J+PORrZI+H0WTg4NTclcT3+KiyUosR4e4wV0QsThYsuQj8zqrYdk89sk
xa4TB7nY/XX6RS5cO8oWYgyf21oImBDLwr5zXPZvaHQw5tGsEshuuM5SjaYtdwo2
a9xRwtl0mG6LzUFWLqJhOhHVrOoDYpeyOJhgbA6Upj5HPot85UJGPzia6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwOJy3xX/JQvOZ88lhUkSnrXVJpMB8GA1UdIwQY
MBaAFGEUl8g76VQkwxOFB0/g0a8C7zt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ODMxZTgtNDY5MS00MGEzLWE0ZGMt
MmFlZjgxMWI2MWVlLzEvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ODMxZTgtNDY5MS00MGEzLWE0ZGMtMmFlZjgxMWI2MWVl
LzEvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRku2jzO
fbuQJrloGEmTuc9oHzoZQj4GI+NjiLSXUMhlv0zGB48Fpwx7OhAoyjjb3O0Vp8DK
p2Ubk6ivsEWhov/x+W6BZoQz+5/gH0JvWl+j0z2H7trNVl6wGRLo/zoli6wzPLl7
NjBPefT3uPbdWDoHkOSVUtTZ96+mIRDXkbLNkhY/cxe6P7+rhu/Jd7m17Q36W9XG
LlKYY9msbRTGL394Hk4yOBgrS8N9QCUiNIKB2FhdtVC51f4YQCTtmM3jhjI6Mtz4
vi83fcGI1iBuItUP3czmkSZhL6FjtR8rKMttw9b/3qX+3VVTU5JhawEjZKBjlO8+
9AH+V0CGug1fJg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:37 2026 by rpki-client