Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: kvTnGcRkBrSmNd7IvPqswcthjhqX07/rpBgJ7fUjYXY=
Subject key identifier: 43:9F:CA:A1:E7:3D:78:50:A8:6A:E5:92:9E:92:87:ED:F0:0D:87:C5
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 01A17C29611CBF4B08628FEEE31D1EA612FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 033A
Signing time: Tue 27 Oct 2026 07:00:48 +0000
Manifest this update: Tue 27 Oct 2026 07:00:48 +0000
Manifest next update: Wed 28 Oct 2026 07:00:48 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: MMXQ0EGtMCIls9UF9xcjjB/wLgdKnaFTBozR3+5X6PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:61:1c:bf:4b:08:62:8f:ee:e3:1d:1e:a6:12:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Oct 27 07:00:48 2026 GMT
Not After : Oct 28 07:00:48 2026 GMT
Subject: CN=439fcaa1e73d7850a86ae5929e9287edf00d87c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:ea:34:fa:51:6b:f5:a2:05:cc:06:29:f4:
9d:17:74:8f:be:1d:59:f7:72:be:a4:fd:48:2b:17:
ae:eb:34:ea:37:e8:22:71:0d:15:e9:18:12:5a:b5:
52:ab:4d:eb:b4:25:e8:e6:4e:f2:b6:4b:7d:7d:9d:
7e:5f:40:f2:a1:47:00:79:12:f7:be:0b:fa:1f:30:
1f:78:04:5f:18:b1:f7:06:cd:2d:e9:f8:99:5d:d0:
c8:20:be:84:d5:25:68:b2:66:2f:ef:64:bf:de:dc:
1c:35:49:4e:ed:68:ba:3e:27:d6:04:db:2c:a0:51:
36:bf:82:8f:0f:cc:1f:f5:40:26:88:0b:08:53:2d:
b1:05:6c:32:f8:85:a4:05:67:88:74:d2:a6:0c:f8:
d6:45:9f:70:6b:1b:94:02:93:a8:47:de:2a:07:a8:
b4:5d:32:11:e5:34:8c:68:e0:f3:02:7c:7c:48:46:
20:d9:82:c9:30:f2:5b:df:91:c7:4b:35:45:cf:e2:
d1:3e:37:89:b2:89:77:2f:7f:94:e8:fe:bb:05:77:
ed:71:64:d2:1d:0a:54:7d:d2:ea:3b:b7:79:eb:b7:
22:08:ce:0c:e9:17:99:11:d6:7d:04:28:b4:17:47:
0f:bf:89:9b:21:af:51:20:8a:b5:6b:4c:e3:08:19:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:CA:A1:E7:3D:78:50:A8:6A:E5:92:9E:92:87:ED:F0:0D:87:C5
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:cc:01:b6:39:e0:2b:12:e5:00:a8:0f:0d:3a:ef:1a:4f:
a9:a1:55:49:e4:7a:16:66:bf:e6:61:9c:fd:d9:7e:f4:18:e8:
a7:13:4f:4d:bc:0b:d7:f1:ee:14:30:78:1c:8a:43:d7:58:88:
e1:fa:c3:1f:0f:d5:a7:9d:b7:82:e0:da:51:50:96:5e:66:cd:
bb:b0:be:05:a0:6f:bd:7e:5f:a4:00:65:c4:dc:eb:b2:76:0e:
e1:bc:3f:ef:e8:83:26:a7:c1:e3:ad:1f:3a:dd:0b:2f:0e:b1:
81:0d:73:00:6f:15:8c:19:75:4c:34:41:f0:7f:b0:29:6b:86:
40:2d:55:ec:66:ee:dd:64:68:fa:74:6d:41:9b:72:1a:76:ec:
33:61:cb:92:8d:d3:ef:52:ab:32:b6:f1:dd:85:7c:08:c3:8c:
d8:e5:99:2b:0d:79:a1:d5:12:cc:ef:67:eb:03:02:c5:82:83:
dc:28:78:a4:9b:c4:ec:48:c3:de:a9:e4:1f:6e:88:84:1d:5d:
67:7f:0f:d8:e9:9e:d5:61:5a:54:ab:57:7b:c8:d9:7c:e4:53:
b0:b4:08:aa:d9:8c:fb:eb:5d:24:6b:b9:f8:6d:3f:60:9e:12:
e3:fd:41:e0:a1:9d:56:48:9c:69:17:fe:5c:5f:38:bf:7b:71:
12:83:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 10:57:16 2026 by rpki-client