Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: 9iyakm4Ubqwo9fjOn9OFu191gT+Hhp0jsSN+/m9XZB0=
Subject key identifier: B6:86:B9:E3:42:ED:DB:0E:55:90:89:D6:BF:54:95:4D:B2:AE:C6:15
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 01A010E33F7A063EE14C1FDEC4D3F7DBC8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 10EB
Signing time: Mon 17 Aug 2026 18:02:03 +0000
Manifest this update: Mon 17 Aug 2026 18:02:03 +0000
Manifest next update: Tue 18 Aug 2026 18:02:03 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 0hhbaoJppLFBWxiUPnNVNxJh+0l63tvCIezoyvdKgo4=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:e3:3f:7a:06:3e:e1:4c:1f:de:c4:d3:f7:db:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Aug 17 18:02:03 2026 GMT
Not After : Aug 18 18:02:03 2026 GMT
Subject: CN=b686b9e342eddb0e559089d6bf54954db2aec615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:f0:58:0a:c6:1d:a0:d0:fa:f6:d1:c9:f0:
bd:1e:54:10:d3:c0:27:a1:01:54:49:a3:44:4b:34:
fa:48:bd:72:a7:8d:06:56:1c:ab:f8:30:6d:31:e5:
a4:4d:5f:6b:65:76:67:92:df:95:27:ff:5b:56:3d:
55:c3:32:5a:29:fb:bb:d8:eb:87:68:e3:22:81:9d:
71:05:9a:95:a4:53:a0:96:20:bf:0b:9f:ab:f4:12:
aa:f5:2e:e2:f9:ba:d9:84:4c:21:f0:1a:19:16:15:
d1:cf:31:13:d3:1c:26:87:2a:f0:6e:fb:de:e3:6b:
a9:0c:58:86:7a:85:bb:b3:5f:69:49:a2:c0:0d:8b:
fa:bd:04:53:20:d8:e9:0a:93:69:5a:1e:cd:32:28:
0a:09:99:c9:46:18:42:f1:fd:d8:92:54:28:18:25:
4c:d9:97:ab:a6:30:6d:7c:b6:a7:5b:91:1c:1e:fd:
49:29:9f:ea:bd:5c:f6:25:fb:3c:fe:37:23:be:14:
4d:ef:a0:a7:19:3d:c8:44:92:98:1f:1e:cc:a6:44:
ca:4a:a1:f0:c5:f5:8d:7e:92:2e:d9:1c:3e:f8:9b:
b5:a8:94:e1:27:d1:72:da:24:e5:26:d4:10:f6:18:
bf:64:bc:26:17:59:b4:28:47:0e:94:14:b1:f8:ee:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:B9:E3:42:ED:DB:0E:55:90:89:D6:BF:54:95:4D:B2:AE:C6:15
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:43:0a:87:32:d3:cd:05:3d:1e:42:76:a6:73:64:48:67:0c:
d9:97:4d:d5:8a:de:04:72:73:77:33:83:41:62:20:06:91:fc:
a4:9f:e5:72:8c:7a:a6:5f:a1:67:26:bf:5d:17:6c:3e:b2:61:
57:cb:a9:23:42:c1:71:ad:7f:0a:f1:b6:1e:de:38:3e:ab:4c:
c3:e5:52:2f:bf:50:32:5c:de:1d:aa:df:9c:a7:5d:e7:55:16:
2b:85:7c:0a:86:c2:27:62:9a:30:da:7c:97:a3:d4:81:75:14:
84:bd:3a:47:4b:ea:21:39:9b:31:fb:d9:eb:d2:e1:2b:3b:dd:
3c:ff:28:46:0a:dd:a2:7d:5a:63:e7:e4:14:0d:25:30:b7:6a:
8e:a9:fd:81:a5:f2:db:b3:c3:47:d6:f7:94:44:98:06:c8:9e:
cb:77:5d:be:f0:fd:2b:14:bb:4d:d1:1d:9c:10:7e:c7:49:8b:
ca:1e:fd:c6:b8:3f:cd:8b:29:e9:46:93:d9:91:53:38:93:c2:
01:43:fd:bb:b4:48:a8:d1:bd:d4:ac:7c:7e:d5:9c:ec:e7:bb:
2d:a8:b3:4a:8b:0e:71:61:65:f6:0e:5b:bd:0b:35:af:17:28:
b7:1b:5f:ce:1d:ad:a0:c1:94:6e:9c:34:4a:2f:2b:2f:0c:50:
a0:e1:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:15:59 2026 by rpki-client