Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: PbJpUPfjTsEBQYeh+JwyT6XgSTDdvfkpTSWfWNC3npc=
Subject key identifier: D6:A3:75:F2:70:5E:40:51:20:50:DF:37:F7:D1:5A:CF:DD:73:3A:F7
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019F83438FBDC62EBD4D33A9C17937C67417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1952
Signing time: Tue 21 Jul 2026 06:01:10 +0000
Manifest this update: Tue 21 Jul 2026 06:01:10 +0000
Manifest next update: Wed 22 Jul 2026 06:01:10 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: eCa5RbxQRJqW0Xh01Ju5gOYTT7oGF3qzvv8ruH5yCbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:8f:bd:c6:2e:bd:4d:33:a9:c1:79:37:c6:74:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jul 21 06:01:10 2026 GMT
Not After : Jul 22 06:01:10 2026 GMT
Subject: CN=d6a375f2705e40512050df37f7d15acfdd733af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:fd:13:5a:36:01:5d:1a:51:e4:f0:87:62:
13:ef:3d:99:59:00:e3:62:d8:07:b4:6d:01:14:fc:
0e:5e:03:bb:19:28:82:f5:77:7d:2c:6b:c2:42:75:
cb:bf:95:7e:a7:54:35:a3:85:f0:3e:7f:0a:ee:96:
35:8e:7a:01:72:29:d6:6a:bc:cf:5c:f6:9b:23:0d:
85:12:72:13:79:3c:6b:69:6c:de:9e:1c:95:31:2f:
f3:05:c3:aa:a3:26:4f:08:1c:13:31:f7:ce:c1:58:
5c:22:3f:f4:91:f0:a0:70:3b:22:9a:41:99:82:e0:
40:40:c6:fe:ce:6b:ff:07:b2:19:f3:55:3f:67:c1:
99:fe:49:d1:47:6a:65:00:67:da:cc:82:4e:3c:bd:
4d:a2:80:49:63:c0:44:dd:e1:09:7e:88:ba:2f:7a:
6e:80:fa:19:fd:97:72:9c:32:c4:ff:38:e8:4c:8f:
64:c4:15:4d:61:b9:d1:a5:c7:72:89:67:4d:72:48:
97:e9:23:11:6d:98:58:cd:92:30:e9:32:51:57:e6:
d9:49:96:0c:43:59:da:3e:0d:f9:80:da:c3:bc:73:
0e:24:61:08:a0:85:52:9d:1b:e0:bf:0f:83:b7:c1:
aa:e1:94:2d:d3:54:a9:85:3a:b8:19:88:ee:f3:24:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:75:F2:70:5E:40:51:20:50:DF:37:F7:D1:5A:CF:DD:73:3A:F7
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7e:9c:6e:7c:f0:4a:aa:08:c0:6d:16:e9:d0:d8:e5:24:57:
5c:b8:cd:bd:5a:40:41:28:84:04:bb:11:e2:f2:6a:db:33:16:
2f:fe:d0:1d:4c:8b:36:59:75:a5:67:a3:cd:50:cd:20:7f:f1:
25:a1:e6:23:84:e5:56:6b:76:2e:9f:8f:1b:b7:cb:6b:14:01:
ec:d1:71:96:04:70:83:a4:cb:15:27:e8:49:92:f0:52:42:81:
af:aa:7e:a8:1b:90:b4:ee:03:fb:de:fa:f4:ec:6c:de:a3:63:
37:cf:b5:ec:5a:28:0b:32:b2:d1:36:c0:aa:b8:cf:07:34:63:
0e:81:6e:d5:82:7b:f6:a7:0f:2d:76:df:72:70:e7:02:0c:27:
9d:ed:6f:60:98:79:e8:f1:4c:d8:db:0d:10:72:a6:ee:c4:88:
b8:a2:92:55:70:f4:8b:e7:24:11:3d:88:19:bf:14:87:4a:7c:
fb:39:f5:0c:ef:5d:d0:4a:60:f2:3a:2f:07:ab:20:10:97:34:
4b:11:40:5f:d0:c0:f6:9d:76:5d:d3:49:57:0e:6b:92:61:48:
c6:dc:a3:a7:d5:9f:a2:95:21:18:de:f6:8a:5b:aa:4e:93:5a:
b6:fd:f1:fd:2b:9f:27:da:2d:1a:04:7b:84:ea:2f:b3:60:84:
16:64:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:36:59 2026 by rpki-client