Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: JgQlakN+ZKtlVdgdiRanX8lYyxHkYWoS65XKfbwDCSY=
Subject key identifier: B0:62:5A:F4:A9:65:D6:D6:43:36:CF:6C:03:45:B4:8E:EC:F2:49:90
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 01A0E2BDB2D4E3B43073EB2870A8C20F7E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 04A0
Signing time: Sun 27 Sep 2026 12:01:17 +0000
Manifest this update: Sun 27 Sep 2026 12:01:17 +0000
Manifest next update: Mon 28 Sep 2026 12:01:17 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: m4qKcfAOh2FPKwZMMv5LfpDhBFFPzQ4VCtGL/GFIfSA=)
2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:b2:d4:e3:b4:30:73:eb:28:70:a8:c2:0f:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Sep 27 12:01:17 2026 GMT
Not After : Sep 28 12:01:17 2026 GMT
Subject: CN=b0625af4a965d6d64336cf6c0345b48eecf24990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:5f:a6:c4:82:89:73:ed:78:36:04:cb:30:
45:64:a7:eb:6b:3e:31:8f:37:6c:a1:97:f5:1f:3c:
aa:6f:07:bb:64:4c:af:a5:f2:d5:c7:2b:1a:d2:eb:
c9:27:52:08:c2:9d:6f:c6:4b:9a:db:88:1d:96:32:
97:21:ed:f2:3b:31:7b:d2:17:b5:8b:79:19:83:e0:
3b:ff:90:46:c4:d6:c7:07:92:28:25:4e:de:0c:39:
61:01:42:b0:ca:2e:c0:fe:e9:6a:1a:4a:33:a7:00:
d5:25:ad:1a:36:bd:d5:87:ac:84:5f:54:42:54:ba:
ac:29:4b:82:95:f2:fe:25:88:56:4a:a5:36:d2:b7:
32:4f:29:ba:a7:0d:a4:21:3f:32:91:67:d3:df:8b:
70:fb:67:b8:fb:02:98:69:49:10:3b:df:bd:7b:e9:
67:2a:46:78:87:f6:ac:0b:80:40:55:e3:03:a9:a1:
04:a8:91:2b:12:2c:59:76:9f:a8:f7:4e:e2:3b:68:
af:e4:ce:4a:e1:35:40:60:5d:58:a4:71:dd:cd:14:
40:38:72:76:e0:e4:1b:77:b6:18:58:e7:d1:b9:0b:
cb:ac:7f:98:97:d8:cd:6f:16:7b:c8:9a:d1:86:88:
14:ea:7e:5b:16:c6:d6:3d:3c:52:78:e7:d2:4c:a0:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:62:5A:F4:A9:65:D6:D6:43:36:CF:6C:03:45:B4:8E:EC:F2:49:90
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:da:af:8e:b7:37:ea:a2:43:f7:e4:b6:1e:c9:0f:b5:ba:
a1:89:99:36:67:7d:6e:0c:93:28:9e:80:ca:66:a7:62:10:a0:
c0:67:98:c3:d4:22:5e:4e:e6:e1:94:0c:b3:cf:10:b2:97:6b:
69:b7:86:55:fc:bb:1e:64:00:56:a6:4f:78:9b:4f:4f:f2:88:
35:4a:20:09:88:e2:e4:31:61:0d:a7:81:68:6c:89:d0:d8:1d:
f1:32:f1:b0:74:2e:59:b8:37:71:8a:ee:8e:18:67:87:56:3d:
4c:70:b8:14:fc:da:0c:97:88:b9:b5:b4:fd:bf:27:6d:c2:e7:
04:b6:b9:d5:d5:5d:09:61:05:9b:45:f8:6b:f2:ec:5b:b9:30:
2f:d1:c6:87:3e:4f:7b:52:46:5b:b3:ae:62:82:a1:64:1c:b7:
06:fd:65:c0:55:f3:71:d6:5e:c5:32:9b:3e:aa:58:fb:16:e7:
10:61:65:40:f4:1c:5c:12:3b:f3:ca:9b:b7:ed:fb:36:20:9e:
a3:68:9e:2a:07:0a:73:f1:05:71:5b:9f:1a:b3:03:db:23:2a:
ed:86:9f:ae:29:ac:fd:30:09:8f:46:89:77:30:77:6a:4c:dc:
ed:7f:ca:92:85:95:89:cf:b7:c4:b8:52:9b:1e:d0:38:87:83:
80:06:b8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDivbLU47Qwc+socKjCD36SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl
ZjJjNzcwHhcNMjYwOTI3MTIwMTE3WhcNMjYwOTI4MTIwMTE3WjAzMTEwLwYDVQQD
EyhiMDYyNWFmNGE5NjVkNmQ2NDMzNmNmNmMwMzQ1YjQ4ZWVjZjI0OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSZfpsSCiXPteDYEyzBFZKfraz4x
jzdsoZf1Hzyqbwe7ZEyvpfLVxysa0uvJJ1IIwp1vxkua24gdljKXIe3yOzF70he1
i3kZg+A7/5BGxNbHB5IoJU7eDDlhAUKwyi7A/ulqGkozpwDVJa0aNr3Vh6yEX1RC
VLqsKUuClfL+JYhWSqU20rcyTym6pw2kIT8ykWfT34tw+2e4+wKYaUkQO9+9e+ln
KkZ4h/asC4BAVeMDqaEEqJErEixZdp+o907iO2iv5M5K4TVAYF1YpHHdzRRAOHJ2
4OQbd7YYWOfRuQvLrH+Yl9jNbxZ7yJrRhogU6n5bFsbWPTxSeOfSTKDicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBiWvSpZdbWQzbPbANFtI7s8kmQMB8GA1UdIwQY
MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt
MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5
LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWLar463
N+qiQ/fkth7JD7W6oYmZNmd9bgyTKJ6AymanYhCgwGeYw9QiXk7m4ZQMs88Qspdr
abeGVfy7HmQAVqZPeJtPT/KINUogCYji5DFhDaeBaGyJ0Ngd8TLxsHQuWbg3cYru
jhhnh1Y9THC4FPzaDJeIubW0/b8nbcLnBLa51dVdCWEFm0X4a/LsW7kwL9HGhz5P
e1JGW7OuYoKhZBy3Bv1lwFXzcdZexTKbPqpY+xbnEGFlQPQcXBI788qbt+37NiCe
o2ieKgcKc/EFcVufGrMD2yMq7Yafrims/TAJj0aJdzB3akzc7X/KkoWVic+3xLhS
mx7QOIeDgAa4YQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:08:50 2026 by rpki-client