Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: VyPjoNX3nptLYA14wVRCO8ZguepRYzI49PK4+sxc6kM=
Subject key identifier: CD:0E:F3:94:48:86:5F:33:49:8D:FD:E8:EE:A3:A1:1E:95:54:89:7B
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 01A111F265A871DCEE39D5864C3C8985360C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 0303
Signing time: Tue 06 Oct 2026 16:01:00 +0000
Manifest this update: Tue 06 Oct 2026 16:01:00 +0000
Manifest next update: Wed 07 Oct 2026 16:01:00 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: 3ubmlN2iHgbYIBPxfQiF++Yn2ZTPCdlW9/B/snneCcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:65:a8:71:dc:ee:39:d5:86:4c:3c:89:85:36:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Oct 6 16:01:00 2026 GMT
Not After : Oct 7 16:01:00 2026 GMT
Subject: CN=cd0ef39448865f33498dfde8eea3a11e9554897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:0c:1e:08:01:39:98:1c:86:39:b0:cd:d3:
1c:8d:07:9a:2f:61:e7:d9:41:25:31:60:40:d3:92:
7d:23:65:98:d2:29:4d:b0:b5:13:51:52:3a:c1:03:
90:82:ff:96:07:28:a9:23:ac:28:4c:e9:8d:ab:05:
da:ba:6f:3a:42:57:92:83:55:3b:ed:fb:46:86:d7:
50:4a:06:f4:9f:90:5c:02:38:0b:1a:88:6d:15:bc:
e0:d7:d4:f6:8b:79:be:1b:1a:05:55:fb:c9:1e:af:
51:da:d7:97:8d:dc:01:d6:e9:5c:a6:61:50:a2:b7:
94:7a:da:37:9d:3b:69:e1:90:f3:0e:92:bf:65:96:
9e:5a:96:4b:d0:92:6a:8f:23:0e:81:e1:20:fd:0b:
da:a0:08:b2:e9:7a:56:ad:08:55:2f:63:73:c1:e1:
dd:5e:09:bb:1f:d0:b0:10:db:a2:35:7e:f3:f5:c7:
22:3f:41:a6:74:44:ae:aa:f3:c1:d0:56:9f:0e:46:
ed:dd:6a:05:4d:90:e5:a1:67:21:bb:ba:3e:2c:89:
a1:ea:2e:54:e2:a7:e2:42:a2:76:9d:5e:81:f8:e2:
a1:fc:2f:d2:6f:e1:d3:93:aa:02:76:96:8a:87:9f:
a0:ed:fe:69:b4:92:e0:8a:07:f6:44:86:35:6d:94:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:F3:94:48:86:5F:33:49:8D:FD:E8:EE:A3:A1:1E:95:54:89:7B
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9b:4f:4b:b4:9d:0f:7d:65:2d:80:5f:c6:1b:72:6e:1d:6e:
01:e7:b2:33:cc:0f:3e:64:e1:9a:ed:9c:2e:19:70:74:ee:57:
80:8f:3d:f9:d3:ce:15:92:39:8b:44:ae:95:11:c1:22:de:44:
9f:89:a5:a3:bf:b6:88:7d:44:0c:36:c1:b6:b5:8c:95:eb:62:
c3:be:10:20:87:1f:96:62:78:bf:cf:c5:8f:61:b1:b4:80:95:
58:e5:39:71:b0:1b:81:57:6a:e3:f1:31:8d:69:01:c8:c0:a8:
af:a6:a3:00:3a:c2:72:9d:03:22:4f:35:46:82:c7:34:1d:76:
f3:c1:c9:f2:54:ca:ee:94:f1:7a:cd:ac:67:35:19:f6:dc:1d:
3a:cb:fc:4b:4d:0d:3e:c6:d5:40:b3:2d:0b:7d:80:2e:86:3d:
39:2a:4c:dc:0a:e0:0c:8b:24:59:8f:d4:f5:52:a4:b4:b1:1f:
d3:e9:7a:d2:62:29:bf:44:bd:6a:0a:73:fb:26:ab:6b:88:bc:
72:31:16:53:b4:2f:cc:7f:46:ab:02:19:f3:75:0e:88:c3:33:
2a:07:71:e2:f3:45:76:8c:b5:25:c2:31:12:73:54:49:4f:91:
21:79:d4:4a:4c:c2:05:56:9c:88:cd:0b:c6:6d:af:91:44:85:
41:78:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:43 2026 by rpki-client