Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: ggQ8F3q1H3vHqXWwyrQXB06/lmQH9keG1LHmg4RZfyg=
Subject key identifier: DF:25:EE:18:3C:37:39:39:73:C7:AB:E2:20:4B:A7:1C:C0:6F:44:FC
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 01A0DC84D321B5BCAB7C22990BE77FB1CC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 07:01:27 +0000
Manifest this update: Sat 26 Sep 2026 07:01:27 +0000
Manifest next update: Sun 27 Sep 2026 07:01:27 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: 4qfhvYKSwAsFx1+9tF3L+EoHIsQ7Z+o7OgfwpKtaVPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:d3:21:b5:bc:ab:7c:22:99:0b:e7:7f:b1:cc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Sep 26 07:01:27 2026 GMT
Not After : Sep 27 07:01:27 2026 GMT
Subject: CN=df25ee183c37393973c7abe2204ba71cc06f44fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:1d:77:64:3b:77:ae:c2:af:12:07:71:d9:
26:53:f2:05:58:37:63:e9:54:95:2b:a0:56:63:1f:
e6:6c:38:30:a2:eb:c4:e5:b0:f5:0a:11:f3:21:e9:
bb:0d:f3:7d:8c:07:52:10:73:a1:dc:e6:1e:d4:cb:
8d:a1:ed:e8:62:b0:0e:b1:06:1b:c3:71:d8:b8:e7:
aa:1c:99:cb:af:dc:71:9f:e3:ca:b5:8f:ce:4b:b0:
57:38:97:fc:b5:1d:20:33:61:62:07:04:4a:0e:5e:
db:4d:82:ef:9e:f3:5c:9c:a2:b9:df:37:e1:cb:91:
af:32:0d:21:b2:fe:87:f8:e6:05:5c:a2:39:ac:77:
ef:f9:25:79:8e:4d:69:d3:b8:6d:31:26:10:10:84:
88:70:26:74:51:3f:82:97:03:97:0d:65:3e:b5:c4:
85:bf:c3:97:ff:a5:42:6e:9d:f5:16:6f:5a:ad:27:
91:2e:62:ae:99:95:82:71:54:fb:f7:f2:75:82:7d:
20:a5:0d:75:9a:35:c4:9c:19:09:3b:c8:62:8a:09:
01:c1:39:b2:66:b3:c0:9f:99:52:70:60:78:23:7d:
ca:0b:a4:35:10:6c:e3:65:ea:ef:7a:bb:5a:71:85:
e8:5d:c6:77:f1:83:d7:16:15:94:8e:4a:29:3b:f4:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:EE:18:3C:37:39:39:73:C7:AB:E2:20:4B:A7:1C:C0:6F:44:FC
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:82:01:53:32:f3:dc:b4:52:af:09:89:92:31:67:75:34:
68:ef:86:12:c7:41:5f:84:3f:ab:68:17:11:b5:64:5a:fa:05:
5a:d7:c4:3b:a2:07:da:33:a6:50:e2:be:93:8f:54:d7:93:d0:
51:ec:88:19:fe:dc:ee:35:a9:5c:cd:8d:30:03:f4:b0:01:91:
2c:a1:9d:e2:ae:fa:1f:ea:d5:9f:5a:c2:f1:b5:5c:14:b3:82:
7b:3d:85:ce:19:77:02:21:8b:b4:bd:f5:16:db:b5:e8:f3:be:
f8:cf:82:cc:d6:11:0a:aa:fe:83:af:3b:5e:d0:ab:0d:eb:39:
5d:54:24:76:08:97:d7:31:4e:f7:c2:86:41:74:f4:fc:d6:ca:
ab:01:13:1d:a5:f0:fd:14:4d:25:34:a8:69:ea:96:7b:8d:38:
79:41:3a:28:19:c8:9e:c4:53:81:0d:aa:6b:17:a0:0a:cd:70:
95:36:74:bd:af:40:61:2e:fb:68:b0:37:7c:6a:24:f9:cc:ad:
c0:19:07:7f:49:66:7f:7e:e6:13:c8:41:2b:30:87:86:83:30:
a8:b5:be:8f:56:75:6b:93:47:ab:6c:ee:15:38:ac:48:93:f9:
47:6f:9c:df:49:a5:87:ed:bf:80:55:90:64:88:d6:dc:e4:05:
c1:b8:36:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchNMhtbyrfCKZC+d/scwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjYwOTI2MDcwMTI3WhcNMjYwOTI3MDcwMTI3WjAzMTEwLwYDVQQD
EyhkZjI1ZWUxODNjMzczOTM5NzNjN2FiZTIyMDRiYTcxY2MwNmY0NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIYdd2Q7d67CrxIHcdkmU/IFWDdj
6VSVK6BWYx/mbDgwouvE5bD1ChHzIem7DfN9jAdSEHOh3OYe1MuNoe3oYrAOsQYb
w3HYuOeqHJnLr9xxn+PKtY/OS7BXOJf8tR0gM2FiBwRKDl7bTYLvnvNcnKK53zfh
y5GvMg0hsv6H+OYFXKI5rHfv+SV5jk1p07htMSYQEISIcCZ0UT+ClwOXDWU+tcSF
v8OX/6VCbp31Fm9arSeRLmKumZWCcVT79/J1gn0gpQ11mjXEnBkJO8hiigkBwTmy
ZrPAn5lScGB4I33KC6Q1EGzjZervertacYXoXcZ38YPXFhWUjkopO/Tf0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8l7hg8Nzk5c8er4iBLpxzAb0T8MB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqSCAVMy
89y0Uq8JiZIxZ3U0aO+GEsdBX4Q/q2gXEbVkWvoFWtfEO6IH2jOmUOK+k49U15PQ
UeyIGf7c7jWpXM2NMAP0sAGRLKGd4q76H+rVn1rC8bVcFLOCez2Fzhl3AiGLtL31
Ftu16PO++M+CzNYRCqr+g687XtCrDes5XVQkdgiX1zFO98KGQXT0/NbKqwETHaXw
/RRNJTSoaeqWe404eUE6KBnInsRTgQ2qaxegCs1wlTZ0va9AYS77aLA3fGok+cyt
wBkHf0lmf37mE8hBKzCHhoMwqLW+j1Z1a5NHq2zuFTisSJP5R2+c30mlh+2/gFWQ
ZIjW3OQFwbg2jA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:39:20 2026 by rpki-client