Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: CiXUJtdyXeG1kJPPu/Z6FHBkhMnuIXI6Ng11/xzXz+s=
Subject key identifier: A5:20:97:03:B0:6C:BB:87:32:E1:02:6A:94:59:B0:F5:AF:50:9C:1B
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01A06CF09280BD01197139BD988E17906B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 19CB
Signing time: Fri 04 Sep 2026 15:01:40 +0000
Manifest this update: Fri 04 Sep 2026 15:01:40 +0000
Manifest next update: Sat 05 Sep 2026 15:01:40 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: BmcsBZCFcOGGYt8/msU8+CSQCDS6nXsPvrqEWrZxZGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:92:80:bd:01:19:71:39:bd:98:8e:17:90:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Sep 4 15:01:40 2026 GMT
Not After : Sep 5 15:01:40 2026 GMT
Subject: CN=a5209703b06cbb8732e1026a9459b0f5af509c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:c1:4c:98:ad:a7:51:14:e7:7f:d6:34:a7:
1d:5d:9f:a8:70:4b:dd:4f:32:fa:b3:6f:bf:45:65:
26:50:3b:21:8b:13:d3:96:8b:eb:0a:ec:70:f5:4c:
93:40:df:28:9b:cb:c7:d7:ef:0c:f2:da:05:01:d8:
97:aa:53:d5:92:07:45:8f:8d:19:04:a2:55:cc:a6:
94:ad:aa:0e:7d:10:22:c6:a8:20:a8:cb:04:7a:ae:
94:0f:28:c7:f8:15:44:5d:3e:fd:b0:07:9a:12:e3:
ed:28:02:ba:cf:21:39:7d:94:20:77:b1:10:fd:ba:
11:f5:a4:ea:e5:41:f4:93:1a:4e:42:16:cf:7a:f3:
00:3e:0d:bd:df:91:4e:1e:5d:80:ba:62:eb:7e:b2:
b3:7c:47:76:e6:b4:fe:7b:df:35:cf:60:ce:d5:1c:
8c:4f:ef:f4:34:b7:99:26:85:fc:16:b3:79:5a:3a:
2f:2f:a6:25:8f:cb:f5:dd:95:da:28:86:af:da:8e:
07:c3:7c:7d:74:47:bc:51:c6:d0:b8:c6:96:ce:db:
77:3c:94:26:f6:99:ab:40:59:fe:c4:1e:f4:d8:7e:
e0:c2:c4:1b:30:6f:05:56:68:35:8f:67:69:8f:71:
30:e2:e5:d6:61:2b:8f:60:f5:07:c8:dd:5f:30:da:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:97:03:B0:6C:BB:87:32:E1:02:6A:94:59:B0:F5:AF:50:9C:1B
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:60:df:e5:4a:23:30:f0:4c:85:6b:a2:8c:36:14:ad:2a:16:
2a:37:e8:00:cc:85:86:4a:24:33:e1:35:02:33:3c:85:35:ea:
5a:7b:9c:76:a1:23:5b:66:19:63:a7:1f:31:c9:c1:07:ed:a2:
99:f5:ff:36:bd:4e:2e:f3:ce:31:e5:5b:c4:f7:a9:72:6e:f9:
bc:b2:6a:05:4b:94:ed:b2:15:28:2e:a4:d9:0f:77:8f:22:87:
58:dd:08:30:6e:ce:f6:c2:35:f2:7d:79:fb:d7:94:16:43:8f:
5d:26:53:36:a4:8d:8c:2e:30:fc:f1:9c:cf:47:44:1e:f8:ac:
fd:69:e4:cf:0a:29:e2:bf:f4:4a:97:24:62:f2:c1:38:d0:c1:
53:c5:1f:0c:1e:3c:20:fc:f3:9b:1c:a7:86:be:a0:32:ca:90:
6b:18:46:2e:c8:45:dd:ee:14:f5:f2:eb:75:56:57:3a:65:c7:
4b:a7:21:e1:f4:2c:f0:b6:dd:49:a9:c7:00:89:be:00:cf:e5:
6a:92:70:cc:40:5b:32:f2:b7:9f:fe:3f:55:2c:50:b3:e4:2d:
62:bb:25:5f:ed:32:36:db:42:28:5d:79:6f:2e:e0:8d:bb:36:
96:3b:fe:ab:dc:57:af:ca:97:db:df:81:bb:1e:a1:c9:0d:7c:
b6:14:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:43:17 2026 by rpki-client