Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: tul1yMFwk4ypXvCdpf9fPcBzpSEVthm9zBu61z3y11Q=
Subject key identifier: 09:56:6B:13:38:7C:3C:37:13:41:33:E9:95:36:35:D8:E6:12:B0:DD
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019E314E3D941774EEB9D0CB9A3D02CC2147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 15:01:11 +0000
Manifest this update: Sat 16 May 2026 15:01:11 +0000
Manifest next update: Sun 17 May 2026 15:01:11 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: syKYWR2fTJlFZlLHsk+TrvRtxfIyRJCrkO6lqZ+93QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:3d:94:17:74:ee:b9:d0:cb:9a:3d:02:cc:21:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: May 16 15:01:11 2026 GMT
Not After : May 17 15:01:11 2026 GMT
Subject: CN=09566b13387c3c37134133e9953635d8e612b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:45:77:3b:13:b5:ea:fa:0a:45:6c:90:a9:
d7:76:40:4d:6f:33:5c:c9:c1:06:a5:8b:27:29:1c:
03:19:23:bb:d0:da:65:ea:19:91:10:a9:d1:bb:9b:
77:12:c9:54:6e:9e:68:43:a1:d5:f5:23:c1:63:4c:
8a:e2:9b:6f:9d:9f:47:5e:7f:13:30:1d:ff:26:f6:
96:2f:44:df:ee:01:53:05:b6:dd:02:e3:28:95:aa:
24:77:0c:f8:95:ae:0f:c1:03:38:0f:8b:1a:7a:12:
4d:dd:29:f1:10:6b:a5:0a:ef:99:f8:e3:d0:a3:3f:
b8:76:03:b8:ee:92:a4:48:ef:65:cb:7d:54:93:64:
3d:74:8b:14:c2:b0:a3:8c:8a:c5:1f:1a:3d:ec:23:
17:96:2a:ca:b1:f8:9b:a6:5c:8e:9a:0e:97:77:24:
ac:5b:0f:42:f5:03:81:82:d1:0f:6c:e8:ea:e8:50:
d1:54:5f:e2:76:60:c9:95:e6:1f:14:d6:6a:bb:85:
d4:c1:c9:5d:f0:f6:99:69:03:db:7f:15:6f:13:8e:
0a:cb:f7:42:e7:ac:8e:48:36:b4:31:e6:af:d5:4f:
05:4b:d9:a0:ea:93:b8:7d:a9:2b:e2:d5:4f:2f:0d:
02:55:a5:f5:9e:1f:63:ba:39:50:13:83:dd:1d:69:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:6B:13:38:7C:3C:37:13:41:33:E9:95:36:35:D8:E6:12:B0:DD
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a6:bb:bf:92:29:50:24:84:59:98:27:a7:a6:27:b6:2e:d0:
6d:5c:f1:8b:cb:06:a7:84:a2:77:60:ca:55:6f:aa:ff:a5:b1:
18:07:6c:74:73:01:de:5b:17:aa:b3:20:06:2f:3d:7e:63:50:
db:bc:3f:f6:93:eb:70:5d:f7:9d:f0:1e:e5:d7:19:32:a1:ef:
af:37:78:f1:eb:ca:b2:2c:79:48:65:34:be:ac:78:cc:4d:2d:
a2:ce:f1:74:7f:fa:e7:58:7a:e9:97:c9:f9:3d:c6:03:5e:c3:
b7:3a:8b:b5:38:8c:01:06:1c:39:3d:8a:d9:80:d4:f0:5d:64:
34:16:cf:36:21:92:4e:f0:70:a9:3d:37:07:3e:1b:ee:1b:91:
33:79:28:70:ea:88:af:6c:0f:5c:cb:f2:17:08:3a:05:9b:f0:
f6:1f:44:55:17:89:df:f4:cd:59:ac:b1:63:18:1f:5f:97:dc:
26:6a:85:11:95:75:4a:cd:2c:37:ae:c8:b2:17:6c:6e:93:93:
87:fa:78:04:87:1b:2c:8b:a4:3e:e3:f4:d0:56:a8:f4:39:00:
04:87:6b:d9:e1:87:35:ac:eb:a5:81:76:6b:c9:3d:13:f0:0f:
42:b1:de:b1:99:39:da:9e:ba:65:e9:56:20:e6:14:65:6d:90:
bd:c0:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:30 2026 by rpki-client