
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
File: YRu24x7uO3Kt57GlkOLmKq9cPrA.mft (raw, json)
Hash identifier: Go4W6xqHHhtNcGC5iegVpx//+nFnV9T+NoYvMIYcoIk=
Subject key identifier: D4:A2:FD:CD:A8:4D:9B:85:08:82:AF:62:53:FF:59:77:1E:AF:3E:71
Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Certificate serial: 019DCF3E097B008746DA44CBE3262AA66885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
Manifest number: 015E
Signing time: Mon 27 Apr 2026 14:00:42 +0000
Manifest this update: Mon 27 Apr 2026 14:00:42 +0000
Manifest next update: Tue 28 Apr 2026 14:00:42 +0000
Files and hashes: 1: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (hash: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic=)
2: TzNDKIgnXyebc98shaF_lgOCi6s.roa (hash: xrJNMYFkTQ1dfaAgHt3UvZimA9Jq6mAdGz+xSeudcNA=)
3: YRu24x7uO3Kt57GlkOLmKq9cPrA.crl (hash: ayilcRfAwL1SIiEak+1L/qdJCXWAm59zz3NCgzt+iVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:09:7b:00:87:46:da:44:cb:e3:26:2a:a6:68:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0
Validity
Not Before: Apr 27 14:00:42 2026 GMT
Not After : Apr 28 14:00:42 2026 GMT
Subject: CN=d4a2fdcda84d9b850882af6253ff59771eaf3e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:47:2f:13:9f:b8:27:15:1c:29:ea:83:9d:
cb:56:88:e0:02:9e:5d:3b:bf:ff:5d:3d:eb:55:4d:
d0:a9:d8:96:e3:d3:a6:82:bc:8e:0e:fe:f8:13:83:
43:4f:34:ad:70:1f:13:80:cf:f9:6a:cd:d7:b4:97:
a3:f9:48:18:cd:a0:ee:02:39:eb:51:cf:c3:e1:e0:
da:49:fd:d9:75:3f:67:15:63:ce:58:40:c5:62:68:
00:8c:b9:5f:bc:39:40:7a:9a:4d:4a:1b:17:73:cd:
ec:33:35:82:48:21:7e:85:47:7f:23:76:bd:8e:8b:
c0:0a:b8:84:02:d0:56:35:e4:70:85:3f:3d:0b:a0:
e6:2e:a1:7f:9d:48:2f:fb:b6:ce:7e:41:22:5f:d3:
b6:29:78:13:21:d6:88:0c:d7:ea:0c:78:e4:02:01:
6f:3e:d3:09:ac:73:d1:07:09:3f:5b:34:46:11:a8:
fc:e2:a8:eb:d4:ba:8f:61:2a:ac:68:15:ff:5d:cd:
dc:15:2f:e8:0b:01:e7:de:79:b0:b9:58:95:22:54:
d0:d2:28:27:a5:c3:c8:61:51:16:89:e6:5c:02:c9:
ff:ca:51:79:ea:75:e7:c5:5e:6e:a0:20:d9:a9:50:
7b:c6:81:37:6f:84:f8:99:83:62:75:4e:b7:ed:ea:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:FD:CD:A8:4D:9B:85:08:82:AF:62:53:FF:59:77:1E:AF:3E:71
X509v3 Authority Key Identifier:
keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:51:e7:a4:f1:23:9b:80:79:18:17:48:1f:d1:0f:59:16:ba:
53:13:77:0e:3d:35:c5:ce:ca:84:e0:bf:91:39:13:a6:e1:88:
25:20:0a:df:39:a8:1f:ed:f9:35:69:66:0b:d0:1d:8e:29:35:
bf:ac:01:d3:34:7e:c1:77:b6:96:8a:35:94:b8:27:6d:69:ce:
bb:57:7d:96:83:cd:d9:48:83:19:66:81:c1:a9:24:6e:81:4a:
95:14:e5:30:3c:2f:e0:0b:49:30:99:7e:64:2f:c7:10:c0:72:
b6:7f:dc:4e:a1:7c:40:8b:99:66:65:e8:2c:99:a2:4a:1d:40:
58:b0:83:3b:f1:58:c3:a4:c1:e1:c4:0e:c5:b1:c6:37:bc:c3:
e3:ac:52:29:60:28:7b:75:9f:f0:ec:fe:d0:8a:e6:5a:61:a3:
89:6e:0d:df:78:7b:49:2f:24:51:ff:e9:f6:1d:5d:d2:37:93:
31:3b:53:3a:d8:e7:a5:3b:f0:40:b4:ba:98:be:9e:60:91:39:
69:50:c9:5c:f8:a0:d6:4d:4e:d0:9d:2f:31:92:7e:78:e6:c7:
b0:74:29:4c:82:af:f9:e8:96:e8:d7:39:5f:f6:74:7c:e2:74:
95:0a:d4:7c:9e:ba:9f:d7:54:98:a7:d6:0d:55:e5:77:d9:ea:
a7:42:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:08 2026 by rpki-client