Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
File: YTdPxOqwDUHB7uR_37ABB4x0-oU.mft (raw, json)
Hash identifier: xwqxTz7dPSIPDsy9JN8aBsJakhlFr0/tlThdNLfu3U4=
Subject key identifier: 38:83:C3:61:C5:52:60:D4:17:1D:35:AE:A0:98:88:75:27:DE:18:2A
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 01A0D7CD266E5B2A9422B1151E13D76E4818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
Manifest number: 09BF
Signing time: Fri 25 Sep 2026 09:02:21 +0000
Manifest this update: Fri 25 Sep 2026 09:02:21 +0000
Manifest next update: Sat 26 Sep 2026 09:02:21 +0000
Files and hashes: 1: HT5OhOqJdYdBbXBwQ3VQ1GpVIFs.roa (hash: u6C6SIGOiLQCTdX2uMjNGg6NhfkwgvQOTMzRPzekqCs=)
2: YTdPxOqwDUHB7uR_37ABB4x0-oU.crl (hash: gaYItdx/dxZvTKyDN3nkYrxNjRO1380Eq2+sfIYilnI=)
3: fdeG7TbijoItYpXy1D7uc-AVK8Y.roa (hash: nS+LEhm0a6oObGQ8VDam0gU4Ac1dG0xV5Lvd6Flgfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:26:6e:5b:2a:94:22:b1:15:1e:13:d7:6e:48:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Sep 25 09:02:21 2026 GMT
Not After : Sep 26 09:02:21 2026 GMT
Subject: CN=3883c361c55260d4171d35aea098887527de182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:32:1a:ad:1f:ea:56:c5:8c:a0:2b:a2:04:
9d:02:e0:5e:d9:97:f5:41:da:ca:14:41:e6:a3:6b:
19:71:d6:6b:f7:15:20:8d:e2:05:c1:f1:97:44:eb:
1a:66:04:22:94:3b:ed:8c:85:bb:e4:9c:52:84:9c:
29:d7:28:3f:73:dc:d3:47:80:64:71:50:b8:f6:53:
5d:89:12:20:f7:23:eb:d5:ec:77:eb:89:f9:a4:ae:
2a:11:c1:6e:07:7f:4d:1c:13:1a:c4:92:83:f2:c8:
86:63:87:97:27:da:75:02:bb:31:60:65:95:cd:be:
5f:3f:d4:f1:9e:ff:f3:41:20:2b:3f:d9:a8:04:c1:
60:af:ee:73:4e:2b:46:f7:65:e6:8d:2e:59:fc:35:
9f:fc:a6:37:77:72:9b:16:64:60:57:81:04:c7:d2:
2a:7a:fb:a8:1d:56:0c:ae:d8:92:02:e4:fa:0b:aa:
9f:7d:49:ec:2b:1a:04:c4:40:55:30:a3:d4:6d:f7:
aa:31:e9:a7:4a:a2:7c:38:f3:1a:96:34:9f:0e:75:
46:52:b9:e2:3a:40:22:a3:b1:52:83:20:99:a2:9e:
23:57:c3:11:5e:70:16:0e:e8:d4:8e:57:d6:f0:9f:
0b:47:2b:86:4f:78:10:d5:48:5a:3f:c8:87:e9:5d:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:C3:61:C5:52:60:D4:17:1D:35:AE:A0:98:88:75:27:DE:18:2A
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:bb:67:91:22:86:f3:41:e5:70:ae:ae:08:6f:68:9d:bd:
90:d0:6e:24:ba:80:de:7a:c8:03:56:ce:5f:c2:8d:b4:ea:38:
f1:f4:24:55:d8:e9:39:07:54:c0:42:c9:28:eb:26:da:ff:fb:
bc:f8:e7:70:88:60:74:b6:8b:16:91:2d:4b:38:ed:4e:7c:de:
2f:73:da:9c:08:08:3a:fa:31:71:4f:61:4e:0e:d2:9b:51:86:
30:ef:8e:50:b4:d2:79:d5:be:96:0d:8c:d4:17:0f:bc:aa:16:
e0:4b:9c:e2:44:af:77:72:d2:58:14:a8:ea:a0:97:1c:16:fe:
2f:d1:c3:41:5e:db:08:7e:63:45:a7:93:66:41:0a:ce:0b:10:
4b:89:36:45:f9:05:86:9b:07:74:ac:98:32:d4:2e:ff:83:01:
9a:1a:a0:f3:55:36:3f:5b:3d:17:d8:f6:be:7f:ca:41:5a:a7:
f5:4a:f3:ad:d6:40:95:10:c6:3d:5a:9b:db:72:08:cb:cf:6d:
3d:74:3f:b9:88:a2:64:01:96:19:80:79:7b:2a:16:0f:ec:13:
17:a3:15:26:37:ba:90:3e:c0:65:e6:ce:09:07:03:b9:be:27:
e0:52:05:cb:30:3e:3c:d8:30:18:11:64:f7:52:93:6c:7a:95:
0c:e2:76:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzSZuWyqUIrEVHhPXbkgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3
NGZhODUwHhcNMjYwOTI1MDkwMjIxWhcNMjYwOTI2MDkwMjIxWjAzMTEwLwYDVQQD
EygzODgzYzM2MWM1NTI2MGQ0MTcxZDM1YWVhMDk4ODg3NTI3ZGUxODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvQyGq0f6lbFjKArogSdAuBe2Zf1
QdrKFEHmo2sZcdZr9xUgjeIFwfGXROsaZgQilDvtjIW75JxShJwp1yg/c9zTR4Bk
cVC49lNdiRIg9yPr1ex364n5pK4qEcFuB39NHBMaxJKD8siGY4eXJ9p1ArsxYGWV
zb5fP9Txnv/zQSArP9moBMFgr+5zTitG92XmjS5Z/DWf/KY3d3KbFmRgV4EEx9Iq
evuoHVYMrtiSAuT6C6qffUnsKxoExEBVMKPUbfeqMemnSqJ8OPMaljSfDnVGUrni
OkAio7FSgyCZop4jV8MRXnAWDujUjlfW8J8LRyuGT3gQ1UhaP8iH6V1r0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiDw2HFUmDUFx01rqCYiHUn3hgqMB8GA1UdIwQY
MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt
MWZjMjU5YmI3ZGUyLzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy
LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYS7Z5Ei
hvNB5XCurghvaJ29kNBuJLqA3nrIA1bOX8KNtOo48fQkVdjpOQdUwELJKOsm2v/7
vPjncIhgdLaLFpEtSzjtTnzeL3PanAgIOvoxcU9hTg7Sm1GGMO+OULTSedW+lg2M
1BcPvKoW4Euc4kSvd3LSWBSo6qCXHBb+L9HDQV7bCH5jRaeTZkEKzgsQS4k2RfkF
hpsHdKyYMtQu/4MBmhqg81U2P1s9F9j2vn/KQVqn9UrzrdZAlRDGPVqb23IIy89t
PXQ/uYiiZAGWGYB5eyoWD+wTF6MVJje6kD7AZebOCQcDub4n4FIFyzA+PNgwGBFk
91KTbHqVDOJ2Uw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:56:59 2026 by rpki-client