Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: 8c9p1A8dKXDBmSHXmV6DUV84HAOXHn9Wv5+TGXif/e8=
Subject key identifier: F8:2D:84:63:F1:21:28:CC:1B:B8:52:C2:93:35:DE:A7:9C:69:02:64
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01A17D3CBF5E44DD782F7D0A627F1EBDF69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 12:01:35 +0000
Manifest this update: Tue 27 Oct 2026 12:01:35 +0000
Manifest next update: Wed 28 Oct 2026 12:01:35 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: wvwTd00wqf6cDbY9Khr28mJCr+Pqv61YLfdsKF4CrD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:bf:5e:44:dd:78:2f:7d:0a:62:7f:1e:bd:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Oct 27 12:01:35 2026 GMT
Not After : Oct 28 12:01:35 2026 GMT
Subject: CN=f82d8463f12128cc1bb852c29335dea79c690264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:d7:69:44:e2:3d:70:3f:67:04:36:a8:6a:
e3:96:6a:12:cc:a2:fe:c5:fa:d2:3d:db:72:46:ef:
73:7c:85:0f:c8:af:df:1e:1d:6d:dd:9a:b5:c9:37:
f5:42:ab:3e:5c:9c:96:35:c9:bd:ce:89:21:af:01:
37:cc:f4:a3:f3:f3:f5:59:57:92:3b:cc:a5:c3:cf:
50:e7:2f:a6:cc:b6:35:52:a4:50:da:3d:82:a4:8f:
f3:67:e0:4a:6c:74:be:fb:70:7c:20:81:d5:8c:31:
41:8d:db:84:e6:b0:25:08:6c:d2:4c:f0:84:55:20:
e0:71:23:8c:ea:7a:c4:cd:74:04:1d:18:5d:4a:fd:
bb:9f:89:60:21:00:2b:c1:cf:e7:56:90:12:47:34:
73:3d:ef:56:be:73:f2:e0:97:08:8c:15:1c:94:96:
8e:45:89:36:25:47:da:4d:2f:9c:66:55:51:06:c9:
0c:20:41:03:6f:59:a5:15:96:0a:26:5f:e3:52:93:
ae:e6:87:48:50:12:7a:ee:fa:1e:2c:7a:aa:81:da:
c2:46:ba:a9:e0:f3:f8:de:c2:35:b3:9a:5a:a4:9d:
41:df:3f:ef:29:29:6b:2f:5c:62:05:7c:d7:5e:50:
12:4f:58:e8:76:67:b9:6d:cd:46:22:f7:e5:00:bc:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:84:63:F1:21:28:CC:1B:B8:52:C2:93:35:DE:A7:9C:69:02:64
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:77:71:77:38:46:c5:c7:37:8d:f4:79:35:38:e2:1c:49:
ba:a9:d5:5d:1d:88:7d:d1:e8:4e:c3:16:72:b2:ef:25:f8:8e:
fc:98:58:95:13:4c:b0:fa:d1:10:f3:17:18:e6:a4:ca:fa:7a:
82:da:85:2a:da:b8:44:25:8e:7b:e1:51:d4:87:a9:f7:33:60:
42:69:e0:a4:7e:fb:9f:8a:fb:c6:37:ed:64:77:e0:d6:f7:e7:
aa:79:72:5d:18:ab:6e:8e:01:ef:e1:66:98:18:c8:36:f6:df:
a8:db:f8:0b:03:36:4a:9e:5b:91:76:62:14:bb:de:d8:cb:32:
2d:ff:fb:9a:4e:a7:e7:ae:05:26:ad:b4:32:7f:44:da:a8:dc:
28:95:0b:5f:7e:d6:66:ce:aa:e3:f3:4b:ac:b5:6c:6d:fb:be:
21:fc:f5:29:18:e5:da:92:c7:ea:39:71:31:25:78:5b:29:0e:
6d:5e:c5:e9:4e:32:76:5f:c7:97:de:c0:fd:7d:e8:8d:62:6f:
d7:d9:a4:36:86:94:88:37:bd:ef:dc:b2:75:4d:83:77:d9:5d:
0b:f7:cc:2b:2e:5d:a9:35:8e:13:1f:39:af:ff:65:95:c9:d9:
71:45:c0:00:b5:c1:3c:9d:c4:18:4f:e0:90:46:f0:03:19:d2:
20:89:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:22:10 2026 by rpki-client