Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
File: YYYvsG8cKTBFdgzpj10gAuNd6zg.mft (raw, json)
Hash identifier: fnUq1t2ieYncuSFUbMNLkeGueHWgCVjptoNVUWNiU3I=
Subject key identifier: 5F:87:08:35:15:38:1D:DD:22:5B:8B:E9:57:3B:BD:49:70:52:4A:E6
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Certificate issuer: /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial: 01A08BD5F0F8014305166044AA508A04FEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
Manifest number: 0107
Signing time: Thu 10 Sep 2026 15:00:48 +0000
Manifest this update: Thu 10 Sep 2026 15:00:48 +0000
Manifest next update: Fri 11 Sep 2026 15:00:48 +0000
Files and hashes: 1: YYYvsG8cKTBFdgzpj10gAuNd6zg.crl (hash: 8911IBXIq7KyR9OJDjhb8KK+1aQR8QY/6uWDtymw2Kw=)
2: qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa (hash: 7b7QR3OS+ILGRcJ7amN0EllvwZEFj+J1VkU+kfBrkF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:f0:f8:01:43:05:16:60:44:aa:50:8a:04:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
Validity
Not Before: Sep 10 15:00:48 2026 GMT
Not After : Sep 11 15:00:48 2026 GMT
Subject: CN=5f87083515381ddd225b8be9573bbd4970524ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:75:5f:7c:92:9a:75:5b:0a:32:d1:1e:b8:
47:d6:53:e1:bd:04:1a:97:ae:43:a1:e7:f4:8e:82:
f3:4c:9f:62:35:92:73:8b:c2:64:e5:02:b5:de:ac:
0f:05:56:cd:44:cc:d2:be:31:3f:c9:e8:71:91:5e:
71:e4:b5:eb:47:06:4f:3c:1e:15:d6:a5:67:fb:44:
16:63:b7:73:4a:20:eb:6f:f4:89:8f:e4:b4:65:b7:
8d:5a:64:ab:f2:25:2b:3f:c4:8b:63:d9:19:cf:a0:
30:54:96:ac:18:87:2b:cc:bd:cf:85:f2:1f:8f:1a:
a2:22:6b:3b:99:eb:b3:9a:75:79:fa:b8:60:a8:44:
6d:3a:1d:e8:bf:b4:11:ef:0d:87:d4:6b:22:3e:f5:
fc:8a:64:04:4d:02:a6:53:c8:80:35:d7:1d:d0:53:
f2:b1:dd:8d:90:01:39:6f:92:49:fe:9d:e0:a1:aa:
73:07:22:1a:fa:6f:8c:fe:51:f1:2c:d7:38:30:75:
df:dd:7c:d2:b9:a8:93:50:76:cb:fa:e3:0a:d5:88:
a0:79:af:74:22:1f:29:c1:a0:66:e1:3c:21:05:eb:
ad:ba:4d:4e:82:0d:3e:49:81:38:9b:de:00:a1:ac:
0c:9d:ab:c6:5d:e2:02:bc:1b:5f:77:0a:f5:9d:45:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:87:08:35:15:38:1D:DD:22:5B:8B:E9:57:3B:BD:49:70:52:4A:E6
X509v3 Authority Key Identifier:
keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:3f:2a:41:42:d4:fb:76:f1:48:f3:db:1d:55:5f:71:6d:
9e:c7:16:da:4d:b9:db:1b:6b:69:10:19:6e:50:da:4a:6f:5d:
ae:31:8a:fe:aa:65:8a:ea:6e:bd:e4:e8:c0:5c:e8:65:6a:c7:
37:08:0d:81:61:af:a1:2e:25:66:18:d4:58:e9:67:28:dd:ff:
98:a3:fb:60:99:af:4c:ae:38:c1:44:b9:37:aa:e5:a4:66:a9:
e0:97:b2:d4:e9:f7:7f:11:82:cd:25:b0:c4:c9:04:d0:84:0b:
e5:48:5a:1d:48:ad:17:91:96:1b:2b:de:dc:55:02:6d:fb:60:
4f:a2:7c:b5:c1:78:b1:7e:68:08:c3:fc:69:c5:f3:a1:39:b1:
9c:7e:60:61:38:b3:47:2a:1d:1a:b1:05:f2:ff:f3:4a:a4:1e:
89:87:7b:d1:36:dc:0c:50:ee:1a:d6:e3:6e:80:5e:5d:40:94:
c7:8b:03:1e:a1:7a:06:f1:35:21:73:fc:f2:99:da:63:e3:18:
5a:71:70:16:09:89:a2:16:35:68:4a:b9:16:1b:2c:d8:0d:3c:
a6:f6:7b:0b:f0:04:13:89:41:74:2b:dc:e5:11:3b:ea:ca:70:
04:03:87:ed:50:e5:ea:fb:50:59:ce:10:74:ab:3c:6a:75:29:
8c:b8:68:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1fD4AUMFFmBEqlCKBP73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODYyZmIwNmYxYzI5MzA0NTc2MGNlOThmNWQyMDAyZTM1
ZGViMzgwHhcNMjYwOTEwMTUwMDQ4WhcNMjYwOTExMTUwMDQ4WjAzMTEwLwYDVQQD
Eyg1Zjg3MDgzNTE1MzgxZGRkMjI1YjhiZTk1NzNiYmQ0OTcwNTI0YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApal1X3ySmnVbCjLRHrhH1lPhvQQa
l65Doef0joLzTJ9iNZJzi8Jk5QK13qwPBVbNRMzSvjE/yehxkV5x5LXrRwZPPB4V
1qVn+0QWY7dzSiDrb/SJj+S0ZbeNWmSr8iUrP8SLY9kZz6AwVJasGIcrzL3PhfIf
jxqiIms7meuzmnV5+rhgqERtOh3ov7QR7w2H1GsiPvX8imQETQKmU8iANdcd0FPy
sd2NkAE5b5JJ/p3goapzByIa+m+M/lHxLNc4MHXf3XzSuaiTUHbL+uMK1Yigea90
Ih8pwaBm4TwhBeutuk1Ogg0+SYE4m94AoawMnavGXeICvBtfdwr1nUX1CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+HCDUVOB3dIluL6Vc7vUlwUkrmMB8GA1UdIwQY
MBaAFGGGL7BvHCkwRXYM6Y9dIALjXes4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82YjgyODUtNmU2My00ZTc4LWEyYzMt
Y2UwMTBkMzc2MGM2LzEvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82YjgyODUtNmU2My00ZTc4LWEyYzMtY2UwMTBkMzc2MGM2
LzEvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGc/KkFC
1Pt28Ujz2x1VX3FtnscW2k252xtraRAZblDaSm9drjGK/qpliupuveTowFzoZWrH
NwgNgWGvoS4lZhjUWOlnKN3/mKP7YJmvTK44wUS5N6rlpGap4Jey1On3fxGCzSWw
xMkE0IQL5UhaHUitF5GWGyve3FUCbftgT6J8tcF4sX5oCMP8acXzoTmxnH5gYTiz
RyodGrEF8v/zSqQeiYd70TbcDFDuGtbjboBeXUCUx4sDHqF6BvE1IXP88pnaY+MY
WnFwFgmJohY1aEq5Fhss2A08pvZ7C/AEE4lBdCvc5RE76spwBAOH7VDl6vtQWc4Q
dKs8anUpjLhonw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:41 2026 by rpki-client