Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
File: YRSXyDvpVCTDE4UHT-DRrwLvO30.mft (raw, json)
Hash identifier: APQVYMMY5gR5D3UmRTMcNXueHJReb0fgx5xcdddlZ/U=
Subject key identifier: C7:65:2C:0A:FC:36:D9:F2:63:D1:77:11:9F:EF:76:D1:35:B3:30:8A
Authority key identifier: 61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
Certificate issuer: /CN=611497c83be95424c31385074fe0d1af02ef3b7d
Certificate serial: 01A1065C30506A59BCBE236D61BC77B52DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
Manifest number: 014B
Signing time: Sun 04 Oct 2026 10:01:07 +0000
Manifest this update: Sun 04 Oct 2026 10:01:07 +0000
Manifest next update: Mon 05 Oct 2026 10:01:07 +0000
Files and hashes: 1: YRSXyDvpVCTDE4UHT-DRrwLvO30.crl (hash: mz764kBaGxOvqASsuZIMBGN7c6USEp8FwrOr+iodp14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:30:50:6a:59:bc:be:23:6d:61:bc:77:b5:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611497c83be95424c31385074fe0d1af02ef3b7d
Validity
Not Before: Oct 4 10:01:07 2026 GMT
Not After : Oct 5 10:01:07 2026 GMT
Subject: CN=c7652c0afc36d9f263d177119fef76d135b3308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:58:d5:d2:0c:ca:31:ac:f0:a2:9e:74:22:
84:6d:60:bd:82:22:b5:78:fa:46:c8:40:4b:f1:e3:
41:f6:d2:ef:24:4b:9f:4f:69:8d:e6:31:ac:ee:0d:
9f:dc:24:ae:fb:35:d5:ea:14:8a:60:1b:eb:cb:f3:
e6:ab:14:10:2f:6f:9e:21:5e:32:03:bf:72:98:86:
40:09:63:9a:ff:26:62:51:15:3d:db:99:f7:51:cb:
85:09:2a:c1:e8:b2:4d:77:6c:a4:2b:6b:54:64:87:
0c:82:3f:46:21:14:ce:07:72:13:e4:35:97:3d:2c:
73:3c:fa:1b:77:7f:0e:f9:fb:d8:0a:ee:6e:b0:a7:
3d:c9:6a:d4:89:9d:cb:68:b1:40:d5:34:df:4a:87:
06:8f:b3:e2:24:8b:26:2e:83:f8:37:cb:72:d0:cc:
64:48:e5:77:cc:35:9a:53:39:f8:46:6a:c6:ef:67:
48:4a:e8:8e:83:20:dc:5b:53:1a:3f:cf:a1:20:fd:
48:6c:7e:53:e1:c0:b2:e8:0d:a2:ad:9b:57:1d:73:
c4:06:fb:b3:e6:70:5f:12:df:c2:a4:7d:1f:90:16:
a7:ad:43:2f:98:8b:2e:6e:10:62:de:43:f2:17:3c:
b1:03:4d:02:5c:b0:99:0f:fc:63:1b:02:33:a6:0d:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:2C:0A:FC:36:D9:F2:63:D1:77:11:9F:EF:76:D1:35:B3:30:8A
X509v3 Authority Key Identifier:
keyid:61:14:97:C8:3B:E9:54:24:C3:13:85:07:4F:E0:D1:AF:02:EF:3B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRSXyDvpVCTDE4UHT-DRrwLvO30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9831e8-4691-40a3-a4dc-2aef811b61ee/1/YRSXyDvpVCTDE4UHT-DRrwLvO30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:73:e5:1c:30:2d:6e:5b:a1:9b:63:6a:a1:cf:2f:fa:72:d1:
78:94:5f:9b:2e:da:93:45:7c:ec:b9:3d:64:f7:22:b5:eb:b9:
9c:29:4e:37:17:8e:ae:1b:93:3e:db:82:b1:5a:9a:e7:e2:aa:
50:a3:94:75:17:02:d0:93:d5:33:fc:dc:96:e3:00:2a:c9:11:
5e:90:8a:46:54:c5:6b:8d:86:5a:4e:8b:84:ed:12:97:e5:22:
5b:e3:81:81:4d:4a:da:c6:a5:2a:7b:18:c5:aa:78:89:d4:82:
80:ea:3e:12:ae:91:95:a9:7c:85:e2:aa:e7:4e:94:74:32:fd:
c3:f0:1a:0a:60:2b:4a:2d:e1:2c:7a:05:0c:80:74:4f:4d:89:
e5:a8:70:d7:96:62:69:89:9a:0e:4d:23:65:c5:87:66:f2:20:
63:8e:9f:b5:62:79:2d:0e:8a:fe:8f:64:68:20:91:64:ee:7d:
e4:fa:8b:74:51:f0:e9:ef:9a:25:4e:3b:f3:36:6d:c3:85:5b:
6a:88:cf:41:a8:2b:09:59:13:d6:3c:22:7f:45:62:de:52:d1:
96:e0:15:0e:54:9d:91:4a:6c:c3:80:50:ae:5e:39:ff:fe:f6:
28:15:60:08:ff:1d:c2:e5:2c:cb:b6:52:8d:29:e9:06:07:8c:
3f:87:33:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXDBQalm8viNtYbx3tS31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMTQ5N2M4M2JlOTU0MjRjMzEzODUwNzRmZTBkMWFmMDJl
ZjNiN2QwHhcNMjYxMDA0MTAwMTA3WhcNMjYxMDA1MTAwMTA3WjAzMTEwLwYDVQQD
EyhjNzY1MmMwYWZjMzZkOWYyNjNkMTc3MTE5ZmVmNzZkMTM1YjMzMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5RY1dIMyjGs8KKedCKEbWC9giK1
ePpGyEBL8eNB9tLvJEufT2mN5jGs7g2f3CSu+zXV6hSKYBvry/PmqxQQL2+eIV4y
A79ymIZACWOa/yZiURU925n3UcuFCSrB6LJNd2ykK2tUZIcMgj9GIRTOB3IT5DWX
PSxzPPobd38O+fvYCu5usKc9yWrUiZ3LaLFA1TTfSocGj7PiJIsmLoP4N8ty0Mxk
SOV3zDWaUzn4RmrG72dISuiOgyDcW1MaP8+hIP1IbH5T4cCy6A2irZtXHXPEBvuz
5nBfEt/CpH0fkBanrUMvmIsubhBi3kPyFzyxA00CXLCZD/xjGwIzpg1RUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdlLAr8NtnyY9F3EZ/vdtE1szCKMB8GA1UdIwQY
MBaAFGEUl8g76VQkwxOFB0/g0a8C7zt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ODMxZTgtNDY5MS00MGEzLWE0ZGMt
MmFlZjgxMWI2MWVlLzEvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi85ODMxZTgtNDY5MS00MGEzLWE0ZGMtMmFlZjgxMWI2MWVl
LzEvWVJTWHlEdnBWQ1RERTRVSFQtRFJyd0x2TzMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXPlHDAt
bluhm2Nqoc8v+nLReJRfmy7ak0V87Lk9ZPciteu5nClONxeOrhuTPtuCsVqa5+Kq
UKOUdRcC0JPVM/zcluMAKskRXpCKRlTFa42GWk6LhO0Sl+UiW+OBgU1K2salKnsY
xap4idSCgOo+Eq6Rlal8heKq506UdDL9w/AaCmArSi3hLHoFDIB0T02J5ahw15Zi
aYmaDk0jZcWHZvIgY46ftWJ5LQ6K/o9kaCCRZO595PqLdFHw6e+aJU478zZtw4Vb
aojPQagrCVkT1jwif0Vi3lLRluAVDlSdkUpsw4BQrl45//72KBVgCP8dwuUsy7ZS
jSnpBgeMP4czZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:17 2026 by rpki-client