Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File: YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier: 4RfIrlh8fDEyifNAB+LLKOfm7jDVhYowNv4L8wHWNLc=
Subject key identifier: 61:D4:80:71:4E:45:B9:C5:CF:D1:C2:73:EB:48:E7:92:44:3B:B1:85
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer: /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial: 01A102B72B2BA0D13A649FEAC3484BA01E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number: 0936
Signing time: Sat 03 Oct 2026 17:02:00 +0000
Manifest this update: Sat 03 Oct 2026 17:02:00 +0000
Manifest next update: Sun 04 Oct 2026 17:02:00 +0000
Files and hashes: 1: PUDvpR_aiNzuJCBLk51UIXHyhYI.roa (hash: Sq53LfucALVr4BVz660/k9ccPDQx9/Vh4c8LAplhshQ=)
2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: pPt97zxXBy0VgOZeEaKf6yp9S+TQFmvSbiM+WvGJFt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b7:2b:2b:a0:d1:3a:64:9f:ea:c3:48:4b:a0:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
Validity
Not Before: Oct 3 17:02:00 2026 GMT
Not After : Oct 4 17:02:00 2026 GMT
Subject: CN=61d480714e45b9c5cfd1c273eb48e792443bb185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:10:b2:0c:b2:3a:6c:82:e1:c0:f9:0b:11:
82:ec:6c:ed:19:59:fb:5a:74:05:6e:81:11:88:d1:
46:9c:12:73:91:cd:80:d8:ee:03:a2:db:c2:a4:08:
c8:47:45:14:91:be:14:06:f9:98:7e:dc:7e:b6:7a:
d4:7a:9d:30:5c:05:9a:c8:06:95:bd:ec:6c:53:e4:
1f:d3:14:01:54:7b:31:66:2d:85:93:c5:12:c2:7f:
2f:53:74:02:75:5c:8b:d1:31:86:ed:bc:62:5a:b5:
1b:dd:c9:f4:af:bf:a3:10:ae:c8:72:00:0f:f6:d0:
e2:ca:fc:fc:4e:7e:34:a6:ef:67:f7:20:36:40:b4:
ed:8b:1c:f3:5f:09:35:df:cd:8d:d3:ee:ce:89:40:
15:c0:4f:ec:88:94:3e:d2:5b:44:28:27:ee:0e:c2:
c6:45:9d:15:4d:4f:74:7d:16:f9:81:73:65:44:cc:
48:a3:a8:52:71:a2:27:61:47:4a:7d:b2:8a:0c:be:
62:2f:4b:55:7c:34:fa:de:0e:cb:d1:f9:61:9e:58:
e5:ab:18:f8:c1:aa:04:6b:0f:06:9d:05:c7:10:16:
8f:51:d7:ba:7d:32:11:89:e1:9a:26:aa:0d:2d:e8:
65:7f:67:b9:2b:5e:8a:48:14:2e:34:80:a8:a2:39:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:80:71:4E:45:B9:C5:CF:D1:C2:73:EB:48:E7:92:44:3B:B1:85
X509v3 Authority Key Identifier:
keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:81:46:78:80:b0:1f:44:5e:a4:e2:83:94:86:a8:78:27:ea:
41:ad:2b:d6:53:5d:39:25:78:4a:27:ae:20:4c:59:c9:88:fc:
a4:f0:75:8a:ce:95:15:1e:bc:d7:db:e7:f9:16:87:c3:09:67:
e7:32:bc:64:e3:50:0b:6f:34:57:2a:c3:e0:1c:87:1d:30:f9:
f8:ab:12:cb:4d:b1:75:47:5d:75:b3:8a:fb:d0:b9:d3:dc:2e:
18:1a:d3:66:fb:a6:22:44:53:e5:65:5d:d2:d9:82:6d:70:13:
e2:a8:f6:b9:53:df:3d:17:c6:83:fb:96:5a:fa:d0:f0:55:3a:
7a:e0:ba:62:36:6d:c1:69:a4:aa:0b:30:e0:b6:b2:ed:e6:23:
3f:8e:b9:57:1b:94:f5:49:ac:6f:2b:e9:01:1a:0c:6d:4d:2b:
cb:d3:4b:6a:b4:25:35:f5:c4:d4:63:6e:26:80:8f:a3:a8:29:
db:71:28:5e:9d:b3:48:93:1c:bd:d0:72:37:25:e2:7c:49:2a:
4b:8c:11:c6:52:6a:32:6d:ef:4c:34:47:ec:c7:8d:fb:4d:6f:
55:bd:cc:c9:7d:30:5d:95:0b:29:94:f3:41:f4:1f:6f:16:b1:
ef:75:87:37:2b:f7:b6:fc:d4:e6:48:0d:16:59:7c:d1:f1:8e:
d8:ca:6c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECtysroNE6ZJ/qw0hLoB5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjYxMDAzMTcwMjAwWhcNMjYxMDA0MTcwMjAwWjAzMTEwLwYDVQQD
Eyg2MWQ0ODA3MTRlNDViOWM1Y2ZkMWMyNzNlYjQ4ZTc5MjQ0M2JiMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wQsgyyOmyC4cD5CxGC7GztGVn7
WnQFboERiNFGnBJzkc2A2O4DotvCpAjIR0UUkb4UBvmYftx+tnrUep0wXAWayAaV
vexsU+Qf0xQBVHsxZi2Fk8USwn8vU3QCdVyL0TGG7bxiWrUb3cn0r7+jEK7IcgAP
9tDiyvz8Tn40pu9n9yA2QLTtixzzXwk1382N0+7OiUAVwE/siJQ+0ltEKCfuDsLG
RZ0VTU90fRb5gXNlRMxIo6hScaInYUdKfbKKDL5iL0tVfDT63g7L0flhnljlqxj4
waoEaw8GnQXHEBaPUde6fTIRieGaJqoNLehlf2e5K16KSBQuNICoojl1aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHUgHFORbnFz9HCc+tI55JEO7GFMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoFGeICw
H0RepOKDlIaoeCfqQa0r1lNdOSV4SieuIExZyYj8pPB1is6VFR6819vn+RaHwwln
5zK8ZONQC280VyrD4ByHHTD5+KsSy02xdUdddbOK+9C509wuGBrTZvumIkRT5WVd
0tmCbXAT4qj2uVPfPRfGg/uWWvrQ8FU6euC6YjZtwWmkqgsw4Lay7eYjP465VxuU
9UmsbyvpARoMbU0ry9NLarQlNfXE1GNuJoCPo6gp23EoXp2zSJMcvdByNyXifEkq
S4wRxlJqMm3vTDRH7MeN+01vVb3MyX0wXZULKZTzQfQfbxax73WHNyv3tvzU5kgN
Fll80fGO2MpsdA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:13:37 2026 by rpki-client