Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: qCVoZTN0sC47Jreq4JSzn3xLHQE6HwQ3vI0CRN1QqMo=
Subject key identifier: 24:4E:4A:7B:89:AC:6E:F8:A6:55:95:20:63:A4:49:A4:06:4D:42:29
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 01A10DDF32C9C205F576565128AA3577630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: 0105
Signing time: Mon 05 Oct 2026 21:01:33 +0000
Manifest this update: Mon 05 Oct 2026 21:01:33 +0000
Manifest next update: Tue 06 Oct 2026 21:01:33 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: cLobWSPq7fV4dQVIXuY+tVOFBunEoLwa5cCDafqNUdc=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:df:32:c9:c2:05:f5:76:56:51:28:aa:35:77:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Oct 5 21:01:33 2026 GMT
Not After : Oct 6 21:01:33 2026 GMT
Subject: CN=244e4a7b89ac6ef8a655952063a449a4064d4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:c6:63:62:66:ed:0d:3b:1e:f2:29:49:20:
e7:36:68:03:0e:bc:91:bc:61:f2:c2:45:d6:10:d5:
9d:0c:37:e8:12:0a:9d:82:e9:a2:b9:ea:e7:35:90:
fa:68:d2:b7:34:56:b9:18:06:d1:63:82:ba:c4:34:
a0:3e:54:a8:98:c0:b3:1b:ef:b2:d0:77:9d:fa:da:
4a:f6:94:7e:8c:54:d7:ad:39:47:36:d0:a3:26:45:
17:06:d3:51:05:fe:cd:0a:28:de:6f:74:eb:54:b7:
ec:ac:4d:3a:99:db:c0:2c:de:ec:39:4e:3b:9c:dc:
45:46:28:92:6d:72:c5:91:9d:c8:6f:4f:1e:ef:bd:
42:61:11:57:d1:99:02:d5:7a:7a:4a:a2:25:dd:05:
d0:a4:68:85:50:43:83:b1:09:db:0a:f1:0b:9e:32:
f8:c8:f8:04:cc:57:67:bb:30:6a:9b:ac:c3:b5:91:
47:3b:d6:be:14:0b:80:ec:79:10:06:37:70:20:51:
3d:00:73:2f:74:3e:c5:47:3f:1b:fd:ab:b9:ab:72:
ec:c1:80:01:e8:19:b8:8f:5f:ef:f4:b4:f5:d6:02:
63:cd:45:8c:b2:73:68:ef:95:d1:ab:bb:ff:3d:d9:
63:d2:38:4a:12:30:64:cc:ad:39:cb:ea:47:7f:b4:
a4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:4A:7B:89:AC:6E:F8:A6:55:95:20:63:A4:49:A4:06:4D:42:29
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ec:fb:db:f2:3d:a8:90:09:1d:84:1a:7a:09:0a:5a:5f:b1:
af:7e:1d:f0:58:71:df:38:d8:ea:a8:3a:8b:c4:05:79:2d:a5:
7d:b5:21:37:65:f4:7e:33:1d:6d:dd:73:5b:9c:9c:d4:b9:84:
d6:87:d3:b8:89:09:f0:ec:56:f1:61:4b:d2:b8:9f:e5:4a:39:
3f:b3:2e:0a:26:4e:61:11:05:52:d7:c8:c6:0f:09:dc:03:58:
f8:8f:94:73:30:a9:ff:40:70:3d:5e:c1:bb:eb:a6:fc:39:be:
79:f4:0d:b8:41:11:e4:c1:10:1a:36:fa:6b:17:14:08:9b:f2:
93:8f:71:46:74:a5:10:cd:97:cb:8a:59:f0:b8:99:b8:92:0a:
c7:90:3c:e8:60:0c:98:c5:3e:c6:7c:8c:fc:de:77:0a:78:91:
4f:53:3f:63:9d:1d:ee:3f:3f:1f:ac:27:bb:b3:7f:09:1d:c5:
13:c1:34:a7:c6:b6:8c:14:86:3c:77:9b:66:ca:69:51:a8:a6:
72:82:40:9e:d4:b8:89:da:2b:b3:6c:a5:6c:c3:ff:48:e8:64:
40:f6:e6:45:26:b0:e3:92:32:e8:21:12:4e:4f:19:a6:e6:33:
79:9d:33:9f:17:43:c7:7a:29:a2:de:6f:56:9c:b4:88:65:15:
ad:c2:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:16 2026 by rpki-client