Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: de8piqsK+WXkcHlWkYMpWs4mRXhcVhBmWA8zelTF6mA=
Subject key identifier: B8:3F:5D:18:68:4C:25:DC:19:FC:4B:2A:D2:B2:63:A1:26:15:A1:C0
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019E3F7840B9CECB3F46A7EFE1ADFA273A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0FFA
Signing time: Tue 19 May 2026 09:01:45 +0000
Manifest this update: Tue 19 May 2026 09:01:45 +0000
Manifest next update: Wed 20 May 2026 09:01:45 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 6KOe6yTIKN4CGQJWqzmgnkgafQcx8dpafpx5r6ihDio=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:78:40:b9:ce:cb:3f:46:a7:ef:e1:ad:fa:27:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: May 19 09:01:45 2026 GMT
Not After : May 20 09:01:45 2026 GMT
Subject: CN=b83f5d18684c25dc19fc4b2ad2b263a12615a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:15:96:79:83:57:17:64:43:9a:5c:4b:ca:
4b:65:6c:a4:da:fa:9f:83:12:03:32:f7:7d:46:c3:
a1:05:24:1f:c1:76:7e:2a:58:2d:2f:5b:ad:cb:a4:
e0:2e:4a:fd:ea:ee:44:a7:96:5a:c1:c0:3e:43:07:
54:97:dd:a5:33:b1:db:9f:da:d3:62:c3:fa:ed:ac:
3d:77:1d:89:91:7f:c9:a3:98:81:18:47:a1:a3:ab:
1c:9c:b5:4c:56:ae:45:27:c7:26:ff:59:21:d3:c6:
39:27:b5:8e:ea:6f:90:ed:d2:f9:d6:2d:f7:cf:dd:
d2:3d:9e:8a:25:71:81:39:90:62:54:f5:e0:ac:0c:
35:f2:78:07:8f:04:35:07:0d:6f:90:e9:a8:a9:62:
cc:0f:62:f9:e1:75:94:3b:e9:96:d6:86:66:89:b7:
d7:28:b4:df:6b:a4:90:ed:64:f4:b9:52:b1:91:14:
10:58:f7:39:a1:c0:c8:e6:b3:80:a1:9d:db:bb:ed:
cb:f2:97:96:7f:62:99:bc:30:81:03:05:4f:9d:72:
d3:e8:7d:00:b0:71:5e:9e:61:d5:04:0f:1e:cc:a4:
b7:ba:29:20:00:a6:e3:4d:a7:9b:42:8e:8e:d5:df:
13:0c:1e:ef:fa:7c:3e:5d:f0:34:2b:2d:25:ea:7f:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:5D:18:68:4C:25:DC:19:FC:4B:2A:D2:B2:63:A1:26:15:A1:C0
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:24:ab:c8:66:78:47:3c:a1:e8:92:1f:01:27:4c:b9:6b:0e:
c5:14:fa:69:51:e1:3f:de:f1:c8:bf:19:e9:52:70:98:1f:17:
cb:d9:2a:78:87:20:15:29:4d:f0:1e:b3:dc:6b:3b:a3:a4:a1:
7e:ae:a2:11:71:7f:f5:29:76:d9:34:ca:db:aa:de:f6:8a:a6:
bd:b5:7d:51:ba:57:1c:ab:9d:88:bf:71:ed:ea:88:15:a3:92:
b6:ba:6d:67:3e:88:c9:2d:f7:80:89:fe:c9:27:a7:33:9e:c2:
01:34:6f:48:a5:10:53:77:85:2d:91:ab:f4:61:eb:10:83:5f:
13:02:63:cb:34:81:1e:24:46:a0:5c:77:ec:40:00:ec:3d:ed:
7e:53:c2:bb:c9:4f:90:6b:bf:5f:24:7c:cc:b1:43:57:51:ce:
9f:75:81:54:bc:31:17:24:57:60:46:50:f0:5a:bd:17:4a:1f:
2e:9b:de:40:57:a4:74:00:4a:f8:ea:cf:0d:74:9f:cd:06:8c:
ca:f6:a9:7d:63:98:a0:22:ad:1c:79:67:5e:aa:9e:ab:9d:11:
ca:8f:83:a3:92:11:b7:3c:e2:1d:ee:26:f1:b1:a2:7a:2f:e8:
83:a3:a1:9e:91:c5:42:d3:17:69:ff:c8:a2:86:7a:37:9a:b8:
26:6f:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 16:01:17 2026 by rpki-client