Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json)
Hash identifier: Gt7Vs3U9xle4x7j07oKGiunT96ljEX1Na9MPKRDR6ek=
Subject key identifier: CE:17:68:91:B2:C7:E1:E2:74:67:47:90:11:AB:BA:86:35:DD:20:B3
Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Certificate serial: 01A128432A0F8B4727C496CDDE6F7635CD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
Manifest number: 04C4
Signing time: Sun 11 Oct 2026 00:00:52 +0000
Manifest this update: Sun 11 Oct 2026 00:00:52 +0000
Manifest next update: Mon 12 Oct 2026 00:00:52 +0000
Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: hdK2wvDxXUpbLQUdQwhOPHt7YquENgj2oCSfp80FgQ4=)
2: otGdouxrN50G3K6_VfBD4sUjZsk.roa (hash: KaxlTsTV8jPWF44UBDhZygEc33e9Bf3O7Tb4YHBXJsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:2a:0f:8b:47:27:c4:96:cd:de:6f:76:35:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77
Validity
Not Before: Oct 11 00:00:52 2026 GMT
Not After : Oct 12 00:00:52 2026 GMT
Subject: CN=ce176891b2c7e1e27467479011abba8635dd20b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:6f:ed:e9:14:2a:ae:f0:4b:b8:c8:c4:1f:
2f:95:94:b9:84:d0:71:28:6f:d9:24:db:ac:8a:cd:
2c:db:e4:d1:5a:7c:f9:ea:b0:87:2f:12:f3:29:ea:
63:a7:cb:a4:87:a9:16:6f:49:66:a6:d1:3a:c0:1b:
e2:b4:37:ff:14:0b:bb:da:75:93:e9:20:59:87:06:
e9:08:dc:5d:db:b3:a5:ac:e4:a1:75:41:8a:52:b1:
6f:41:69:03:03:46:94:4f:74:fb:b8:db:42:74:80:
0a:ef:91:74:e0:ac:3a:c1:14:a6:ea:8b:80:48:7a:
53:b3:7e:0d:97:4e:a3:3e:48:94:7a:04:cd:e2:46:
a5:34:29:1b:2c:25:db:03:85:d4:43:f1:02:dd:cb:
7b:44:cf:e4:fe:67:b5:21:8c:46:69:c0:4b:21:27:
7b:4b:00:0b:34:d7:9f:fa:8a:b8:a3:b2:d8:3d:3c:
19:47:38:29:7e:a5:1a:aa:4e:d2:1b:c9:e4:88:59:
75:ca:b5:48:6b:f7:76:66:6f:90:d4:2e:9f:5f:04:
4f:4e:81:e2:73:d0:42:7f:75:48:31:d9:0e:e3:7a:
c3:98:4f:46:4e:e6:64:4e:41:bb:e9:8a:61:aa:98:
fe:90:2b:45:28:d0:83:bb:51:30:c7:87:11:d4:36:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:68:91:B2:C7:E1:E2:74:67:47:90:11:AB:BA:86:35:DD:20:B3
X509v3 Authority Key Identifier:
keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:50:fd:40:02:a8:1e:eb:57:d1:7a:8f:9c:25:b4:90:2e:
9a:14:b1:d1:14:55:a4:92:d7:77:e9:69:93:13:ce:c1:78:8f:
02:ba:3a:1c:90:fd:7e:96:8e:11:26:45:12:e3:9c:d4:aa:cd:
a6:24:22:56:53:80:e4:23:7f:a2:2d:dc:69:ae:55:b9:a5:c2:
43:33:c4:d9:d3:04:84:a3:5b:10:00:95:f6:18:c6:3c:fe:3b:
e2:27:61:6d:f1:e4:98:7b:c5:c9:76:31:de:34:94:90:03:3d:
ba:23:28:34:8b:91:fe:cf:1f:d4:25:6d:04:32:74:25:d9:86:
68:2f:9c:95:90:db:6d:bf:c2:b3:59:78:b6:34:49:25:c7:34:
b2:50:c9:58:7f:37:2b:5d:f3:fb:a3:73:b3:70:07:fe:1c:6e:
f9:cb:30:91:b2:12:bb:de:a7:6d:26:62:40:c2:36:c2:a1:ab:
48:3f:ee:45:cb:6c:d2:e6:d5:77:e1:8f:77:87:76:56:0f:b2:
e4:bc:80:24:1e:b3:73:ab:29:03:06:c8:34:7a:94:bb:af:7b:
05:9f:5d:52:dc:45:4a:12:eb:3e:86:78:60:e6:78:d6:55:2d:
a1:8c:b5:a9:aa:e1:bc:db:fe:75:bc:23:aa:8d:36:2c:de:7e:
46:1e:b8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQyoPi0cnxJbN3m92Nc0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl
ZjJjNzcwHhcNMjYxMDExMDAwMDUyWhcNMjYxMDEyMDAwMDUyWjAzMTEwLwYDVQQD
EyhjZTE3Njg5MWIyYzdlMWUyNzQ2NzQ3OTAxMWFiYmE4NjM1ZGQyMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp1v7ekUKq7wS7jIxB8vlZS5hNBx
KG/ZJNusis0s2+TRWnz56rCHLxLzKepjp8ukh6kWb0lmptE6wBvitDf/FAu72nWT
6SBZhwbpCNxd27OlrOShdUGKUrFvQWkDA0aUT3T7uNtCdIAK75F04Kw6wRSm6ouA
SHpTs34Nl06jPkiUegTN4kalNCkbLCXbA4XUQ/EC3ct7RM/k/me1IYxGacBLISd7
SwALNNef+oq4o7LYPTwZRzgpfqUaqk7SG8nkiFl1yrVIa/d2Zm+Q1C6fXwRPToHi
c9BCf3VIMdkO43rDmE9GTuZkTkG76Yphqpj+kCtFKNCDu1Ewx4cR1DYM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4XaJGyx+HidGdHkBGruoY13SCzMB8GA1UdIwQY
MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt
MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5
LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczJQ/UAC
qB7rV9F6j5wltJAumhSx0RRVpJLXd+lpkxPOwXiPAro6HJD9fpaOESZFEuOc1KrN
piQiVlOA5CN/oi3caa5VuaXCQzPE2dMEhKNbEACV9hjGPP474idhbfHkmHvFyXYx
3jSUkAM9uiMoNIuR/s8f1CVtBDJ0JdmGaC+clZDbbb/Cs1l4tjRJJcc0slDJWH83
K13z+6Nzs3AH/hxu+cswkbISu96nbSZiQMI2wqGrSD/uRcts0ubVd+GPd4d2Vg+y
5LyAJB6zc6spAwbINHqUu697BZ9dUtxFShLrPoZ4YOZ41lUtoYy1qarhvNv+dbwj
qo02LN5+Rh64OA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:52:39 2026 by rpki-client