Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: XPHteYrlLGLPep0nKdGu1fHWA+uyMWq7uX+iJ3pKFzw=
Subject key identifier: 3A:2A:7D:49:41:0E:76:7E:55:88:3D:33:9A:25:CD:A2:BA:F5:6F:C0
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 019D3A8AC9CF20DBD39A560083762AD9283C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 17:01:07 +0000
Manifest this update: Sun 29 Mar 2026 17:01:07 +0000
Manifest next update: Mon 30 Mar 2026 17:01:07 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: 3fFoUkjuVe/BKpRk75p2SUa4t/+It4tSzkANOiOatTM=)
2: bi5rESVj86GmUsAdmL-jFDYQj7Q.roa (hash: OC/uMHVwkkjFxo7Q7u2D9vo2U1CM0p48Ycc2AmRTk6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:c9:cf:20:db:d3:9a:56:00:83:76:2a:d9:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Mar 29 17:01:07 2026 GMT
Not After : Mar 30 17:01:07 2026 GMT
Subject: CN=3a2a7d49410e767e55883d339a25cda2baf56fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:e2:82:2a:de:72:53:4c:1b:12:94:50:2f:
c8:c9:f9:8e:ad:4f:54:1e:7b:24:c9:3d:1a:4d:24:
c2:64:ac:40:40:e6:1d:34:72:b9:3e:87:9a:32:cb:
f1:a2:12:fe:ef:23:02:87:9a:90:1d:e0:c3:b8:f5:
4d:af:89:d9:b0:47:b3:a9:e6:83:76:6a:29:53:28:
21:25:8b:82:ff:12:c0:08:73:92:9b:e3:41:e9:7f:
0b:79:07:7a:c0:be:ff:89:e5:0d:90:8d:69:89:c3:
c2:a6:21:dd:ce:cd:ba:44:7b:07:55:a8:b7:8d:f2:
a0:a1:83:1e:0e:f8:8b:2f:4c:b2:b2:da:51:21:87:
ab:49:62:24:e1:9a:34:d9:de:20:53:6d:f0:43:d6:
44:58:80:37:42:3c:9b:f6:0d:04:f6:de:00:c8:cc:
24:54:35:65:c7:20:3c:a5:52:b6:c0:f3:84:5a:28:
ee:95:5e:29:ca:db:5e:a6:f2:18:c0:7d:2a:72:d3:
7b:f9:d0:f0:a6:00:62:cb:30:a8:59:e6:c2:dd:68:
5e:03:8b:1b:bf:ed:d7:12:0b:39:3a:13:3d:38:55:
64:39:7a:5b:34:33:a0:43:90:73:db:02:ca:89:c0:
91:26:0c:7d:60:b9:78:b6:4d:ef:93:13:e7:28:20:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:7D:49:41:0E:76:7E:55:88:3D:33:9A:25:CD:A2:BA:F5:6F:C0
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:54:de:35:01:95:7d:b5:1f:4e:03:22:6b:3f:8a:c5:25:28:
4e:5c:46:f5:02:ef:ac:73:df:79:34:20:69:58:40:53:6b:d1:
3e:b6:72:85:d1:fb:eb:18:be:e8:62:51:a9:c3:f7:30:bf:65:
85:55:b4:43:92:17:d6:c3:88:a3:07:0e:93:42:c0:16:24:73:
f4:71:a3:69:26:55:2b:e3:e3:36:98:21:6f:01:74:12:fb:c3:
ab:3f:a4:49:79:01:dc:e8:13:e6:4d:df:96:09:ff:19:ef:e7:
96:c3:f1:41:3a:71:ed:9a:0d:ba:b2:92:53:f8:06:0f:5d:c6:
31:91:9b:94:1e:74:35:55:34:92:92:f9:eb:5f:0b:89:cf:28:
c2:e9:7c:6e:2f:13:3a:56:a6:f3:f9:87:83:07:63:09:85:c9:
4f:1a:04:1b:1a:8d:84:24:2b:f4:90:ee:76:59:9c:b8:b2:9e:
21:18:e8:db:7d:35:2b:58:71:a1:36:4d:61:d5:51:ff:84:f1:
aa:90:6a:b7:0b:ac:d2:fa:bd:ef:e4:be:dc:7e:16:53:59:29:
66:52:e5:fb:17:e2:ea:e6:8a:ac:7c:80:0b:c9:5e:37:3b:85:
e2:2d:28:cc:c2:0f:20:34:09:b7:c9:14:0c:40:9c:54:73:4f:
6e:45:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:18 2026 by rpki-client