Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
File: YET26nnk4qPgKos47QzTpAWROKw.mft (raw, json)
Hash identifier: EPfLuZsvP2fG5E4OHSUKmEbU4zDyvFRm6VhonVDPV7w=
Subject key identifier: 25:7C:D5:F7:40:94:CA:18:14:FB:0A:91:FB:48:BC:09:3D:D7:41:44
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 01A0CFDB177353654612A3C0F983569912E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 20:00:37 +0000
Manifest this update: Wed 23 Sep 2026 20:00:37 +0000
Manifest next update: Thu 24 Sep 2026 20:00:37 +0000
Files and hashes: 1: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (hash: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=)
2: YET26nnk4qPgKos47QzTpAWROKw.crl (hash: MNCMApqLI4JuSquPk0I2kww2XHEpDA7V0OqJs+6LlnA=)
3: vNHV1DYtOsfUinz5gwCFoBzKiIg.roa (hash: OIxUV31cdJf2l/w+qSDbXSkKEcQlTRfi/zGOENFvc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:17:73:53:65:46:12:a3:c0:f9:83:56:99:12:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Sep 23 20:00:37 2026 GMT
Not After : Sep 24 20:00:37 2026 GMT
Subject: CN=257cd5f74094ca1814fb0a91fb48bc093dd74144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:e1:e5:b9:ff:65:5d:bb:8c:fd:44:71:14:
fa:f9:45:b8:53:79:6a:a4:b5:4d:f5:08:10:6f:5e:
23:36:78:bf:6a:9e:1b:97:2a:8f:f9:86:2c:93:ca:
e9:70:40:69:be:df:f9:2a:c6:cb:4f:32:31:48:20:
5c:e3:a8:b2:e8:f8:51:5e:53:9e:97:c7:8c:9d:53:
f2:b0:e8:22:d5:f0:78:63:14:39:7e:d6:f1:6d:91:
0b:c1:6d:d3:62:03:7a:18:da:cd:0d:2f:c4:d4:64:
3e:49:a5:96:c4:7a:00:18:9c:df:0a:ef:28:a9:14:
38:39:1c:58:af:4c:7a:2b:f0:3b:9a:fa:18:01:f3:
da:e5:8e:13:95:78:ad:d4:25:fd:b9:a9:11:b3:02:
1c:f9:c9:4c:63:68:6d:48:c7:07:13:db:e7:ed:8f:
29:a5:63:ae:78:98:b8:73:e6:12:43:20:f5:45:3e:
b2:39:ec:a2:dd:d5:fb:6d:60:7e:a5:06:12:b0:fb:
fd:3c:c4:17:2f:49:43:01:e4:53:2f:c1:fb:6f:78:
38:ec:72:f9:de:cc:c6:ce:ae:6a:85:e1:4b:f0:26:
e5:9d:11:ea:b4:4a:5e:73:19:22:87:63:aa:2a:d3:
5c:bf:7b:47:76:03:49:5b:fa:7f:e6:63:d5:a3:eb:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:D5:F7:40:94:CA:18:14:FB:0A:91:FB:48:BC:09:3D:D7:41:44
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:49:6d:e3:53:d9:ef:51:fa:01:35:e2:a8:87:76:05:72:
73:86:a8:95:18:4a:24:52:7e:4b:fe:1a:05:2e:12:06:2b:7e:
43:19:2e:e1:c8:cc:99:51:05:57:d6:e0:57:4a:0f:d7:79:af:
51:96:35:39:ea:95:f6:78:06:84:f5:56:86:e1:52:82:92:82:
df:ff:d6:7c:a6:8b:a7:a2:a0:d5:38:d5:47:62:70:8f:39:02:
0d:47:a8:e6:a3:a2:fe:08:0d:83:e8:d0:55:70:38:f6:69:29:
17:31:22:2f:07:14:9a:f7:73:85:e8:3e:97:8e:f5:c1:64:d0:
83:6c:31:16:5d:dc:95:2f:f2:6b:f7:95:48:93:49:3d:30:0a:
51:4a:95:de:d5:95:e8:30:94:36:67:d5:39:48:87:78:71:09:
a7:7d:1d:ab:e4:4d:dd:4b:93:73:cf:ae:b7:e4:6e:57:f2:97:
d5:e9:ab:e7:a1:df:b5:4f:bf:8f:b1:8d:4e:f6:3a:8b:a4:46:
7c:65:50:d6:f3:ff:88:66:34:13:a9:17:1e:70:1f:f2:0a:66:
87:ac:78:71:49:79:76:95:27:7f:86:0d:1c:76:97:bb:75:fe:
12:a9:6e:59:83:cb:77:85:1d:4f:55:71:ea:5c:b3:0e:5c:9c:
12:10:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:14:31 2026 by rpki-client