Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: GOP5zeTte58S2gOJ06X0/xPrsQrwAf2QQ+paj170ENQ=
Subject key identifier: 57:70:AE:6C:2B:D5:DC:D1:5F:44:AA:BF:66:3B:3D:C9:84:0C:75:EC
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 01A08A55E009CBA775D235936A5CB893A6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 02C8
Signing time: Thu 10 Sep 2026 08:01:18 +0000
Manifest this update: Thu 10 Sep 2026 08:01:18 +0000
Manifest next update: Fri 11 Sep 2026 08:01:18 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: GAtEIfQH9nrZo2hZFkQ7tF2l4LYgvL+AKv7XxCnS82w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:e0:09:cb:a7:75:d2:35:93:6a:5c:b8:93:a6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Sep 10 08:01:18 2026 GMT
Not After : Sep 11 08:01:18 2026 GMT
Subject: CN=5770ae6c2bd5dcd15f44aabf663b3dc9840c75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:c2:41:37:0a:00:30:80:32:3c:be:aa:c0:
9d:75:a7:33:83:39:07:08:26:d8:25:20:c7:48:87:
61:16:fb:b5:30:3e:99:53:2a:7c:5e:ec:01:63:9a:
30:91:8a:28:eb:c8:b8:16:d9:bb:ca:30:fa:ee:ac:
14:4e:56:bc:18:10:52:67:88:50:e9:08:93:76:81:
9b:1a:28:12:28:e6:46:5f:2b:30:71:c3:17:b5:d9:
8c:bd:aa:25:95:ce:e2:cc:21:23:11:81:14:6b:00:
16:e9:d7:6d:9d:91:f9:69:d7:59:37:2e:76:95:80:
e1:b5:8e:92:90:29:10:7f:27:98:11:80:18:f8:f0:
9d:4a:39:ee:77:f2:71:06:73:08:36:8b:c9:52:2c:
3e:e7:a6:5a:de:ca:36:00:72:7c:97:18:90:ac:88:
fd:c5:11:20:9c:39:93:f4:23:ee:60:dc:17:ae:6b:
d5:18:71:f3:5d:6b:f4:94:51:53:4b:fe:1d:cd:0e:
fe:86:bb:01:16:21:ff:2e:01:17:4d:ce:dc:4c:8f:
32:f6:2e:91:09:ef:55:ae:06:e3:e1:65:f2:28:a9:
df:30:56:66:bf:07:1e:af:66:a1:51:39:54:98:1d:
77:1c:ae:f0:60:71:61:07:0d:72:2a:be:70:33:94:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:70:AE:6C:2B:D5:DC:D1:5F:44:AA:BF:66:3B:3D:C9:84:0C:75:EC
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:96:df:36:3b:02:58:d7:88:85:7b:37:78:d1:c4:66:3d:f8:
a1:89:57:ac:7f:42:d5:8b:92:62:ae:fd:be:dc:1c:01:dd:9b:
67:32:51:7e:8d:d7:b7:c1:5b:8d:85:04:dc:d9:0d:7f:43:0c:
ec:b8:91:1b:2f:f0:6f:70:56:ab:5b:9f:5a:e7:6f:cf:52:96:
d2:29:b0:61:d4:c0:ba:62:45:88:a1:ad:f9:79:4e:18:7a:f4:
ce:92:e2:1e:69:1e:a7:3e:5d:f1:6e:1f:9d:a1:51:4c:d8:67:
e3:d3:74:b2:68:88:b4:60:bc:52:df:3d:69:eb:80:a8:3a:a3:
e9:3a:71:0d:90:b3:71:e1:ba:42:4e:71:a3:41:29:f6:c0:59:
e1:bc:cc:7e:11:af:d9:b7:1b:93:18:2f:d4:8b:a5:92:9f:77:
d4:7c:f6:0a:32:ee:dd:ee:aa:c9:8f:9d:42:37:74:6d:f2:42:
3d:7f:11:33:1d:97:ea:d4:7b:43:aa:9a:ba:f1:65:21:48:0f:
df:ea:65:1e:46:01:61:96:a5:3d:6e:3c:8c:5d:67:38:15:82:
52:99:70:9e:81:70:9e:ad:5b:57:36:de:92:f7:4f:bc:d9:09:
4c:03:e7:d3:7f:27:64:46:4b:57:4a:28:0b:e1:58:e0:7e:c5:
32:c8:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:11 2026 by rpki-client