Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: hIxLPoqI5nIs+q1Qh8GkT1mvQYjsuv0ldV73Ek8g4+A=
Subject key identifier: 08:B4:71:96:5D:FF:AA:83:9B:87:7C:88:AF:85:42:B3:9B:EF:73:1B
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 01A02054EF56589502542596DB47139D4683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:00:32 +0000
Manifest this update: Thu 20 Aug 2026 18:00:32 +0000
Manifest next update: Fri 21 Aug 2026 18:00:32 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: Ylf7beiuI4hlD4mQbpJ68UMDFM6Fq7pJLl3S+zVGPAQ=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:54:ef:56:58:95:02:54:25:96:db:47:13:9d:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Aug 20 18:00:32 2026 GMT
Not After : Aug 21 18:00:32 2026 GMT
Subject: CN=08b471965dffaa839b877c88af8542b39bef731b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:bc:3f:b5:18:5d:ea:e9:88:01:65:b1:1b:
6d:50:92:27:3d:e6:56:c0:2a:f6:41:e5:7e:2d:bd:
2c:6d:15:f6:a3:59:b6:b3:b6:ec:b6:05:b5:b4:f9:
71:33:7f:6c:68:10:4c:bf:c7:35:b7:a7:f8:57:8d:
a5:0d:15:8e:a6:e4:6c:88:aa:b5:7b:e1:66:03:66:
13:00:36:b1:17:55:b2:5b:e3:84:41:08:0e:e7:04:
70:8b:72:93:83:71:40:cc:4f:c0:ff:3f:f2:80:46:
2f:e6:be:96:a9:6b:c0:60:a6:55:0d:68:64:46:d0:
8d:59:ad:d9:83:80:9b:98:e1:80:ac:49:91:87:8e:
c0:74:7a:ec:d2:c9:9c:28:25:cf:a4:1c:fb:50:74:
f8:2b:04:9f:91:04:12:37:0d:30:44:48:13:96:11:
28:53:25:73:82:8e:0c:fe:54:26:80:07:8c:1f:c0:
47:10:c0:af:73:bc:16:0f:ed:f5:57:70:b6:b9:42:
26:82:6f:f1:ce:1c:76:b5:0b:27:f5:f8:d4:64:70:
e8:ab:23:d5:05:c4:2d:a4:79:52:7d:a4:3d:bb:09:
cb:55:0d:d7:d3:cd:bc:95:12:3d:0a:ac:63:b7:f1:
12:fb:ef:af:a9:a0:90:a2:8e:2c:52:8a:e2:2d:f8:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:71:96:5D:FF:AA:83:9B:87:7C:88:AF:85:42:B3:9B:EF:73:1B
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:45:e8:84:db:1f:6d:ff:fe:f1:aa:3e:e8:40:2b:34:d7:
e8:47:6a:5c:b0:d5:67:c5:01:98:14:cc:8e:59:7c:f0:c0:ae:
4c:41:15:2b:48:a7:b2:73:d2:f7:14:e8:0a:0e:84:bb:f1:4c:
1c:ca:16:4e:6c:3d:42:16:9c:db:55:c2:5b:54:32:df:93:e2:
60:27:14:b1:6f:2e:f5:d6:80:92:a1:c2:1f:7d:11:ef:1d:d1:
09:bb:6c:f6:c7:ff:8d:02:31:5a:cb:a9:cc:03:67:75:4f:11:
42:5d:9b:ad:51:4e:6a:3e:96:60:00:c8:32:33:e3:9a:f1:9c:
ab:df:a7:67:25:de:89:69:3e:f7:fa:54:61:a0:22:06:ab:6e:
82:73:8b:c3:ff:d0:ad:e7:ea:85:d8:63:db:96:15:60:cf:6d:
ac:fb:6f:6f:f3:07:ea:96:48:65:5f:2b:78:02:8f:18:51:17:
91:89:48:2f:df:8e:20:0d:e7:e3:ea:bd:bc:48:5e:7b:2c:78:
1f:6b:e3:e4:69:33:19:25:6d:ca:49:ae:04:2c:10:9d:a2:18:
85:88:4a:4c:b7:d3:6b:2f:d8:cf:dc:8d:a9:fb:72:34:a7:f2:
3e:63:43:ee:13:2b:b9:d2:fe:08:ec:50:c0:e6:70:19:bb:a6:
a2:99:7c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVO9WWJUCVCWW20cTnUaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzViNDE2NWRiMmQ2ZDZjMWUxOGUzOTVmMDlmMzI4NzQw
NzI0MmMwHhcNMjYwODIwMTgwMDMyWhcNMjYwODIxMTgwMDMyWjAzMTEwLwYDVQQD
EygwOGI0NzE5NjVkZmZhYTgzOWI4NzdjODhhZjg1NDJiMzliZWY3MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSi8P7UYXerpiAFlsRttUJInPeZW
wCr2QeV+Lb0sbRX2o1m2s7bstgW1tPlxM39saBBMv8c1t6f4V42lDRWOpuRsiKq1
e+FmA2YTADaxF1WyW+OEQQgO5wRwi3KTg3FAzE/A/z/ygEYv5r6WqWvAYKZVDWhk
RtCNWa3Zg4CbmOGArEmRh47AdHrs0smcKCXPpBz7UHT4KwSfkQQSNw0wREgTlhEo
UyVzgo4M/lQmgAeMH8BHEMCvc7wWD+31V3C2uUImgm/xzhx2tQsn9fjUZHDoqyPV
BcQtpHlSfaQ9uwnLVQ3X0828lRI9Cqxjt/ES+++vqaCQoo4sUoriLfgVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi0cZZd/6qDm4d8iK+FQrOb73MbMB8GA1UdIwQY
MBaAFGDFtBZdstbWweGOOV8J8yh0ByQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1XMEZsMnkxdGJCNFk0NVh3bnpLSFFISkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct
NGJlYjVkZmYxNzAxLzEvWU1XMEZsMnkxdGJCNFk0NVh3bnpLSFFISkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx
LzEvWU1XMEZsMnkxdGJCNFk0NVh3bnpLSFFISkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhtF6ITb
H23//vGqPuhAKzTX6EdqXLDVZ8UBmBTMjll88MCuTEEVK0insnPS9xToCg6Eu/FM
HMoWTmw9Qhac21XCW1Qy35PiYCcUsW8u9daAkqHCH30R7x3RCbts9sf/jQIxWsup
zANndU8RQl2brVFOaj6WYADIMjPjmvGcq9+nZyXeiWk+9/pUYaAiBqtugnOLw//Q
refqhdhj25YVYM9trPtvb/MH6pZIZV8reAKPGFEXkYlIL9+OIA3n4+q9vEheeyx4
H2vj5GkzGSVtykmuBCwQnaIYhYhKTLfTay/Yz9yNqftyNKfyPmND7hMrudL+COxQ
wOZwGbumopl8aA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:09 2026 by rpki-client