Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: OSOo9e6Z/x07Ab4OvQ8DjvxyQzgQewpYRQmoHRspE0g=
Subject key identifier: 54:F2:70:C1:AC:DA:BD:26:B7:3C:95:D3:0E:F8:0B:92:6B:E8:1D:F5
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 019F36A9D0E9939298BD89758AEFCFDEE5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:06 +0000
Manifest this update: Mon 06 Jul 2026 09:02:06 +0000
Manifest next update: Tue 07 Jul 2026 09:02:06 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: o5kafwgfBdSeWvupj+OwuZk0eW3af3pgOrcC9+rxqpg=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:d0:e9:93:92:98:bd:89:75:8a:ef:cf:de:e5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Jul 6 09:02:06 2026 GMT
Not After : Jul 7 09:02:06 2026 GMT
Subject: CN=54f270c1acdabd26b73c95d30ef80b926be81df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:c7:c2:c8:3c:21:0a:bd:31:68:77:b8:00:
01:1e:8e:6d:39:3e:d9:5e:4f:46:4e:eb:30:b8:b2:
a9:81:4a:d9:12:b7:75:49:39:b7:ac:d0:f0:ca:88:
6a:e1:8b:cb:a0:b9:c9:3f:de:cf:73:a2:92:d5:d4:
20:bf:4c:c9:18:50:77:b4:d0:9a:16:81:b0:1b:4a:
43:62:f9:6a:4d:13:f2:ba:32:4a:c9:15:e8:74:c2:
07:a3:66:6b:f6:a1:bf:3d:04:4d:2e:e4:8f:6c:f4:
05:16:fc:e3:d7:55:cc:00:10:e6:d6:ad:27:6e:fd:
92:39:1c:f0:65:77:7a:ad:94:7e:81:59:86:98:ed:
fa:c5:8c:a0:d0:47:b1:7b:d7:17:f6:cc:3b:aa:ec:
16:7e:57:ad:88:df:2c:bf:5e:72:6a:12:06:77:02:
ed:e5:16:5f:d2:ce:a1:38:8c:6b:1a:a4:94:54:be:
f7:8a:cb:aa:bc:de:f2:1f:20:c1:72:11:d6:21:87:
b1:fb:53:e0:7a:e4:0c:e5:5b:b2:5d:8f:73:f4:7f:
be:29:c6:69:12:a5:4a:50:17:51:e7:f2:9a:86:b8:
20:06:8b:60:6f:d8:a4:a5:69:1b:2e:e4:1a:a9:c9:
06:99:d3:30:9c:26:dc:ae:0b:28:6b:f1:ab:77:29:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:70:C1:AC:DA:BD:26:B7:3C:95:D3:0E:F8:0B:92:6B:E8:1D:F5
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:10:a2:ad:0b:29:06:28:bb:89:c8:f6:aa:52:02:c5:c0:
f9:f4:45:f7:d4:f8:31:ea:fb:a8:db:11:7a:7c:3e:35:c9:6a:
e1:51:1b:66:90:1d:32:e8:17:01:9e:72:67:de:d5:b8:0e:4a:
33:fd:65:00:24:00:0e:32:20:8c:34:42:08:ab:b0:09:36:53:
3f:0f:7d:0e:d0:cd:9a:c7:60:fb:b9:8c:16:66:ed:de:e0:82:
8b:62:e8:ee:61:b9:97:34:f6:fe:18:4c:89:39:22:d4:16:5f:
06:c7:f6:b7:22:8b:69:db:12:64:7b:c6:7d:08:46:8c:d0:df:
b2:57:85:aa:7a:d0:71:7a:b8:58:e9:90:b1:2a:f2:90:e5:94:
4a:f9:5c:3b:d7:ce:99:7d:15:03:2c:78:27:31:c6:fe:42:5c:
79:d4:6f:48:5e:23:eb:4c:6a:fa:b1:fe:a0:bd:81:08:d1:a0:
ef:f7:90:63:97:0e:2a:7b:3c:89:01:a2:1c:33:52:06:40:8b:
66:d5:32:26:b2:47:ad:dc:aa:44:ae:79:aa:3a:dd:c1:d6:8d:
85:c7:69:9f:fd:ad:86:f8:6a:8b:e2:bd:71:89:7c:18:20:da:
10:c7:a4:46:2b:a6:2b:f8:22:22:24:a6:22:4a:d7:13:b8:be:
92:de:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:37 2026 by rpki-client