Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: JvNdWhpZSCfBe2pcyNwAXSN0pE62bWR4LeMIL5z9ons=
Subject key identifier: F2:FE:59:51:AB:C6:4C:C3:34:51:38:F2:F5:C7:94:B3:DB:FB:02:33
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019EE9A0FE55302692E8536188345BA28951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 01E5
Signing time: Sun 21 Jun 2026 10:01:42 +0000
Manifest this update: Sun 21 Jun 2026 10:01:42 +0000
Manifest next update: Mon 22 Jun 2026 10:01:42 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: xpYNsoUnB1x8Sw2FiTIBpo9xpTj0Rl4ucSMSv4O0lls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 09:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:a0:fe:55:30:26:92:e8:53:61:88:34:5b:a2:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Jun 21 10:01:42 2026 GMT
Not After : Jun 22 10:01:42 2026 GMT
Subject: CN=f2fe5951abc64cc3345138f2f5c794b3dbfb0233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:49:8c:9a:d3:36:32:14:2c:e5:65:97:0a:
c7:48:9a:f2:de:44:ce:11:db:75:fd:e4:8a:4c:ff:
a8:f0:4f:4b:a8:f4:ac:1d:d2:26:84:80:1b:b3:af:
a0:b6:40:8b:d7:b4:d0:71:64:d4:4f:25:97:f7:ec:
71:1d:f2:b1:a8:20:09:a0:14:80:a5:a6:6f:7e:83:
bf:12:bd:61:9c:db:62:78:a8:7a:4a:6f:96:87:f9:
b2:e6:1b:de:9a:36:06:72:d4:44:62:ff:74:e2:5c:
de:96:59:23:28:97:00:21:3f:e6:b7:8d:46:34:f0:
cf:2b:1f:a6:9a:09:3f:9d:10:9f:04:58:31:1b:d7:
1c:2c:4e:c4:53:3e:c5:37:45:79:0d:c2:6f:d6:2c:
cf:b0:9c:2a:70:f2:a6:a2:87:89:dd:84:1c:ed:3a:
47:2f:4a:ac:b7:23:c0:12:1d:66:99:98:2d:93:1d:
22:13:e5:93:b0:44:97:44:0f:96:39:3c:35:2d:3c:
fd:c6:1e:0b:b2:82:68:e4:9a:83:8d:31:ed:63:7c:
06:1a:47:c0:2a:1c:39:b7:38:6f:ab:4e:6b:19:aa:
40:c0:cb:81:44:d2:cb:d9:9c:b1:86:87:43:c9:9f:
37:59:19:b9:8b:03:ec:e0:ec:1d:91:5c:4e:77:f9:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:59:51:AB:C6:4C:C3:34:51:38:F2:F5:C7:94:B3:DB:FB:02:33
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f1:8d:0d:06:ba:ca:cc:29:ce:a3:d7:21:6e:7b:ac:d9:66:
8c:83:13:76:22:cc:5e:67:04:14:b5:e8:af:16:ec:38:67:02:
00:0a:0c:09:38:40:d4:13:b3:b7:03:4a:54:12:13:0c:c6:7b:
c9:79:a9:db:0e:f0:74:3a:42:14:5e:60:52:04:d8:6f:49:0f:
80:17:84:b7:e7:8a:bd:ed:fd:18:5c:d5:fc:e2:c7:44:ee:ac:
75:e9:57:47:47:fa:fb:b9:3e:64:ef:a8:b8:da:dc:59:8e:cd:
04:8c:fd:e1:a4:a2:44:b7:e3:28:30:bd:f6:4f:fb:20:49:e9:
20:f0:0f:54:88:b0:86:60:f6:34:9c:14:10:ea:12:55:a4:5a:
fb:41:ac:4c:6a:44:ec:5f:9c:92:93:a1:a6:6e:f8:9d:4f:ef:
48:15:1e:c3:58:a0:bc:dc:62:48:3c:3a:9c:d1:28:39:28:86:
52:22:ce:bc:46:e3:3e:0c:fc:1e:91:2a:2f:8f:4d:b0:1d:03:
72:19:dd:7b:5c:6a:19:e2:56:f8:fb:8e:1b:65:43:87:15:33:
e5:c2:fa:c3:b9:8f:05:16:f4:e3:c8:81:74:b7:0f:72:a7:fd:
5a:9c:9c:e7:8d:45:7f:e5:ba:a8:4f:37:b6:b4:b0:f1:0a:dd:
07:c9:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:32:33 2026 by rpki-client