Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: S2qZ7lmtQ8FIMpv6/rDcjeuaYOOQnsvEVupLB3yZr+g=
Subject key identifier: 25:D7:37:AA:06:94:6E:A1:D1:70:0D:B4:F5:EE:A3:12:62:66:78:C9
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 01A089B14024D77BD260FA1315E35B66EC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 05:01:29 +0000
Manifest this update: Thu 10 Sep 2026 05:01:29 +0000
Manifest next update: Fri 11 Sep 2026 05:01:29 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: HmHFgPM2ACYouvgbXjVtTmw9rzm5dZL+Q9T39JjFaJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:40:24:d7:7b:d2:60:fa:13:15:e3:5b:66:ec:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Sep 10 05:01:29 2026 GMT
Not After : Sep 11 05:01:29 2026 GMT
Subject: CN=25d737aa06946ea1d1700db4f5eea312626678c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:d3:2d:9c:30:cd:b9:3c:2a:f5:47:e6:59:
d7:0d:8a:fe:62:46:f9:b0:44:14:f9:13:63:1a:fc:
41:6f:38:e5:5b:da:09:cd:88:39:16:9e:2a:87:15:
13:cf:49:57:73:81:69:46:8a:6f:db:17:d0:ce:fb:
63:2d:c6:81:84:3d:8c:57:89:c2:d4:9c:60:17:d5:
4b:fc:90:73:4e:21:64:6e:17:31:8f:2b:a4:e1:ed:
e7:52:78:70:b5:74:45:6d:7b:56:f0:5e:cb:75:31:
82:51:69:68:e3:e6:dc:c4:e8:94:e2:c7:65:97:b5:
60:66:37:82:5c:6e:60:48:11:4e:82:d2:55:e9:4e:
58:81:de:8d:c9:87:ca:b2:0e:46:f0:be:5a:06:62:
dd:24:df:78:15:f2:b1:82:97:00:cb:64:a5:eb:05:
b4:e3:c5:63:57:a6:34:93:f9:c7:6d:5a:3b:a1:59:
37:19:86:48:27:b7:bf:a3:0d:39:61:4e:f4:39:0a:
57:63:cd:88:dd:c9:ac:ab:b1:ef:7e:d1:c3:c0:80:
df:fe:89:80:2c:fe:77:92:eb:a7:0c:4c:ad:77:82:
b8:a9:33:f2:78:30:55:df:c9:a0:69:17:b4:24:2d:
b2:eb:04:44:ee:98:e2:d4:00:67:7d:82:ba:b5:cd:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:37:AA:06:94:6E:A1:D1:70:0D:B4:F5:EE:A3:12:62:66:78:C9
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:02:be:dc:39:4d:c7:27:f4:45:d2:b7:16:1e:db:be:29:
49:f8:b4:05:5b:16:91:ff:8f:d1:95:c5:f9:99:f1:cf:3b:ad:
37:83:11:75:71:51:64:79:9b:b1:05:8c:c7:3b:bb:26:28:a8:
4a:ca:ca:9e:df:23:fb:4e:45:06:38:86:8f:ad:e6:72:ad:1f:
6a:3f:b7:84:57:a4:76:72:8c:30:38:75:12:b8:77:10:0e:7c:
54:82:4a:8f:a4:f5:fc:68:56:a0:99:b8:85:b9:75:f2:a5:94:
76:97:f4:9e:77:52:c0:92:92:55:2f:9f:42:ab:06:2a:1f:b3:
09:14:51:a0:15:3d:f6:67:d9:42:66:02:1b:57:93:b2:11:f1:
e3:a2:55:f8:06:6a:66:5b:1c:af:06:0a:cc:6c:30:48:6d:11:
7e:9b:c1:7d:99:94:14:f5:b8:d1:b0:56:d0:31:96:31:00:80:
8c:1f:16:db:13:01:38:52:18:3f:76:47:f4:d9:81:28:e9:09:
81:50:7f:63:a5:dc:74:6f:87:c5:9b:2b:21:8f:be:f3:1f:81:
ca:23:19:a5:3a:ca:0d:d1:f5:13:e0:09:69:0f:e2:d4:17:af:
a4:12:41:c6:5b:a5:9d:b6:78:b0:d3:62:3a:e8:7b:0e:db:47:
19:5d:71:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsUAk13vSYPoTFeNbZux5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl
YTM4NWUwHhcNMjYwOTEwMDUwMTI5WhcNMjYwOTExMDUwMTI5WjAzMTEwLwYDVQQD
EygyNWQ3MzdhYTA2OTQ2ZWExZDE3MDBkYjRmNWVlYTMxMjYyNjY3OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsznTLZwwzbk8KvVH5lnXDYr+Ykb5
sEQU+RNjGvxBbzjlW9oJzYg5Fp4qhxUTz0lXc4FpRopv2xfQzvtjLcaBhD2MV4nC
1JxgF9VL/JBzTiFkbhcxjyuk4e3nUnhwtXRFbXtW8F7LdTGCUWlo4+bcxOiU4sdl
l7VgZjeCXG5gSBFOgtJV6U5Ygd6NyYfKsg5G8L5aBmLdJN94FfKxgpcAy2Sl6wW0
48VjV6Y0k/nHbVo7oVk3GYZIJ7e/ow05YU70OQpXY82I3cmsq7HvftHDwIDf/omA
LP53kuunDEytd4K4qTPyeDBV38mgaRe0JC2y6wRE7pji1ABnfYK6tc3vDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXXN6oGlG6h0XANtPXuoxJiZnjJMB8GA1UdIwQY
MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt
YTIwN2M3YTE5ZWQyLzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy
LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2kCvtw5
Tccn9EXStxYe274pSfi0BVsWkf+P0ZXF+ZnxzzutN4MRdXFRZHmbsQWMxzu7Jiio
SsrKnt8j+05FBjiGj63mcq0faj+3hFekdnKMMDh1Erh3EA58VIJKj6T1/GhWoJm4
hbl18qWUdpf0nndSwJKSVS+fQqsGKh+zCRRRoBU99mfZQmYCG1eTshHx46JV+AZq
ZlscrwYKzGwwSG0RfpvBfZmUFPW40bBW0DGWMQCAjB8W2xMBOFIYP3ZH9NmBKOkJ
gVB/Y6XcdG+HxZsrIY++8x+ByiMZpTrKDdH1E+AJaQ/i1BevpBJBxlulnbZ4sNNi
Ouh7DttHGV1xDw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:02:59 2026 by rpki-client