Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
File: YYRce2CqISgFuetE6qCMSJI6oxg.mft (raw, json)
Hash identifier: t+T9Oysot4MZ/e1kJ/rIU45j8S3U1HeZbVfa+26gCao=
Subject key identifier: 28:3A:2E:22:E1:96:DA:13:0E:F6:A0:F8:39:8F:9B:A1:49:84:33:68
Authority key identifier: 61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
Certificate issuer: /CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Certificate serial: 01A0CFDAD26F72AECEE22532786B6645931A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
Manifest number: FA
Signing time: Wed 23 Sep 2026 20:00:19 +0000
Manifest this update: Wed 23 Sep 2026 20:00:19 +0000
Manifest next update: Thu 24 Sep 2026 20:00:19 +0000
Files and hashes: 1: HV2CsrLzF-S1qWZ8J3VTBgO48nw.roa (hash: JHxkLJgnelaG3bki3cyYxVvS6B7h4MLCjzZfELjOxNs=)
2: YYRce2CqISgFuetE6qCMSJI6oxg.crl (hash: s31nFTreJN0QcSblqsh3mxmbuSCQet2EVH9nh7PKxLM=)
3: gPKYb1y3p90DD8s9LQ44ZKdg_4c.roa (hash: rXUw5uswj+GLfE3zjLQScTc804q2vCvOdnuuFsFGwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:d2:6f:72:ae:ce:e2:25:32:78:6b:66:45:93:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61845c7b60aa212805b9eb44eaa08c48923aa318
Validity
Not Before: Sep 23 20:00:19 2026 GMT
Not After : Sep 24 20:00:19 2026 GMT
Subject: CN=283a2e22e196da130ef6a0f8398f9ba149843368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:01:21:b2:92:40:cc:5f:79:fd:41:02:0f:
b4:1c:be:eb:23:c8:d1:35:78:25:d7:b6:b2:c3:0c:
b9:cd:91:8e:bf:2f:a8:e1:81:c7:b1:95:c0:1c:b5:
08:57:14:c4:d5:3b:40:d8:5b:bf:a3:55:97:a7:9d:
04:2c:c2:18:68:20:12:0e:f8:de:4c:13:87:97:d6:
d4:8c:b8:b4:99:3b:ea:3e:6a:0d:21:23:8f:12:cf:
07:63:1e:4e:01:ac:d6:b0:be:fd:80:7c:0a:83:5a:
c6:c0:57:06:cf:b2:88:19:92:05:50:48:0c:19:dc:
6d:9f:9a:80:d9:4c:3f:a9:e0:4e:95:83:92:ff:f8:
e1:3b:a7:f9:77:1d:48:33:ec:8a:a1:23:6e:0c:90:
d1:11:ad:2c:f2:1b:9d:68:fe:ea:9e:12:fe:5d:af:
2d:4e:bc:a5:d9:bf:53:65:0f:3f:55:eb:70:86:02:
6e:44:ac:ec:41:e3:6e:74:5e:aa:41:d6:39:07:0e:
5c:ed:e2:d8:4a:df:9a:7f:04:8b:a6:05:24:f2:89:
66:e3:46:2f:d7:17:5c:f6:64:4d:09:bd:ec:de:42:
2c:88:b6:34:a7:31:c0:b9:a3:ca:db:b1:b7:8c:20:
63:d1:41:9c:d1:68:ce:2e:bf:0e:93:07:f2:5c:fb:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:2E:22:E1:96:DA:13:0E:F6:A0:F8:39:8F:9B:A1:49:84:33:68
X509v3 Authority Key Identifier:
keyid:61:84:5C:7B:60:AA:21:28:05:B9:EB:44:EA:A0:8C:48:92:3A:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYRce2CqISgFuetE6qCMSJI6oxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/96665b-cbd2-4039-bbb1-7872a0d0bc1c/1/YYRce2CqISgFuetE6qCMSJI6oxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b0:74:6a:4b:18:d6:63:3a:d3:4a:ea:e3:4e:92:b3:27:31:
7d:b6:3b:b1:0f:10:b0:07:e7:aa:30:b3:77:85:0a:07:46:98:
66:fb:aa:a0:6a:fd:71:aa:d2:bb:96:2d:99:42:9d:8a:55:db:
6f:6e:cc:4d:75:7e:26:df:b0:b3:65:db:ac:fc:c3:77:46:cd:
77:a1:86:a2:ac:16:2e:0f:f1:6e:1e:6b:01:23:f3:d7:92:7e:
99:b1:88:24:c2:25:78:70:03:74:03:8d:ec:70:3a:3a:92:de:
14:ec:7a:f7:6b:0b:15:fa:db:59:f4:7d:2d:46:08:80:49:43:
30:f6:0f:10:04:83:8d:a3:bf:f5:67:7e:bb:6b:4f:f9:6c:3c:
9e:d7:f2:e7:7b:d7:f7:00:b0:2d:1d:df:2e:65:8e:b7:df:30:
d4:59:8f:8f:d6:aa:35:79:a9:a4:62:b7:ba:ae:a2:c4:a7:33:
c6:d2:30:57:f5:4a:b5:a5:ed:11:45:30:6a:83:2c:b2:c3:8e:
ae:c9:fa:bb:d8:99:13:40:e9:9e:b1:a5:ee:9f:0c:9a:9e:25:
8b:ec:93:88:85:0a:ee:80:b2:75:b1:1b:43:30:cb:03:ad:69:
e5:90:e8:13:47:b8:3a:c5:ef:cf:07:16:96:c8:6f:79:b4:18:
2c:92:10:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2tJvcq7O4iUyeGtmRZMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ1YzdiNjBhYTIxMjgwNWI5ZWI0NGVhYTA4YzQ4OTIz
YWEzMTgwHhcNMjYwOTIzMjAwMDE5WhcNMjYwOTI0MjAwMDE5WjAzMTEwLwYDVQQD
EygyODNhMmUyMmUxOTZkYTEzMGVmNmEwZjgzOThmOWJhMTQ5ODQzMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WwBIbKSQMxfef1BAg+0HL7rI8jR
NXgl17aywwy5zZGOvy+o4YHHsZXAHLUIVxTE1TtA2Fu/o1WXp50ELMIYaCASDvje
TBOHl9bUjLi0mTvqPmoNISOPEs8HYx5OAazWsL79gHwKg1rGwFcGz7KIGZIFUEgM
Gdxtn5qA2Uw/qeBOlYOS//jhO6f5dx1IM+yKoSNuDJDREa0s8hudaP7qnhL+Xa8t
Tryl2b9TZQ8/VetwhgJuRKzsQeNudF6qQdY5Bw5c7eLYSt+afwSLpgUk8olm40Yv
1xdc9mRNCb3s3kIsiLY0pzHAuaPK27G3jCBj0UGc0WjOLr8OkwfyXPtOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg6LiLhltoTDvag+DmPm6FJhDNoMB8GA1UdIwQY
MBaAFGGEXHtgqiEoBbnrROqgjEiSOqMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSY2UyQ3FJU2dGdWV0RTZxQ01TSkk2b3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85NjY2NWItY2JkMi00MDM5LWJiYjEt
Nzg3MmEwZDBiYzFjLzEvWVlSY2UyQ3FJU2dGdWV0RTZxQ01TSkk2b3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85NjY2NWItY2JkMi00MDM5LWJiYjEtNzg3MmEwZDBiYzFj
LzEvWVlSY2UyQ3FJU2dGdWV0RTZxQ01TSkk2b3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrB0aksY
1mM600rq406SsycxfbY7sQ8QsAfnqjCzd4UKB0aYZvuqoGr9carSu5YtmUKdilXb
b27MTXV+Jt+ws2XbrPzDd0bNd6GGoqwWLg/xbh5rASPz15J+mbGIJMIleHADdAON
7HA6OpLeFOx692sLFfrbWfR9LUYIgElDMPYPEASDjaO/9Wd+u2tP+Ww8ntfy53vX
9wCwLR3fLmWOt98w1FmPj9aqNXmppGK3uq6ixKczxtIwV/VKtaXtEUUwaoMsssOO
rsn6u9iZE0DpnrGl7p8Mmp4li+yTiIUK7oCydbEbQzDLA61p5ZDoE0e4OsXvzwcW
lshvebQYLJIQ4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:48:14 2026 by rpki-client