Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
File: YPIcIT_AacghVf6hfpt_uC_mt_I.mft (raw, json)
Hash identifier: TIv1QkXY8k1ZrfHXCz9UVTu4sQWLa1aNPD9zNowCLic=
Subject key identifier: 7D:B0:E2:37:F5:87:60:C5:96:F9:9D:B5:78:74:6B:27:0F:1B:56:B5
Authority key identifier: 60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
Certificate issuer: /CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Certificate serial: 01A11560C88E28065A23A48C4601C865FC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
Manifest number: 3F
Signing time: Wed 07 Oct 2026 08:00:26 +0000
Manifest this update: Wed 07 Oct 2026 08:00:26 +0000
Manifest next update: Thu 08 Oct 2026 08:00:26 +0000
Files and hashes: 1: 7LP6-tZNO4kMwCuy2a7JWKqiVis.roa (hash: ZvkpzsSCehm9n4InEtK3zFBlt2EwWn0SgZ3MtWI4ctg=)
2: LcdFlwsZeNlKQxWtomWGugF5Uls.roa (hash: LmbSWI4WnALmhzvVgu3HrJG4mLahAfFT/2QpHuJ+AzQ=)
3: YPIcIT_AacghVf6hfpt_uC_mt_I.crl (hash: AEsjhiEBnLNQULbQrl9bjio20+Dd9Zcq4hFOdkwbJXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:60:c8:8e:28:06:5a:23:a4:8c:46:01:c8:65:fc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Validity
Not Before: Oct 7 08:00:26 2026 GMT
Not After : Oct 8 08:00:26 2026 GMT
Subject: CN=7db0e237f58760c596f99db578746b270f1b56b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:60:a7:7a:21:4b:e6:87:10:e7:f1:34:a5:
cf:26:82:b7:77:36:57:3a:d6:65:37:43:ca:f4:07:
6d:e7:8f:36:f5:af:aa:8d:0b:0d:ec:d9:a2:21:24:
ce:37:a5:39:78:2c:b0:c9:26:63:7f:da:d8:f0:0e:
a7:65:ef:ad:36:da:bc:23:d1:b2:56:9b:19:28:f1:
1d:dc:80:9f:88:fe:05:e5:ab:f1:7e:ee:9d:ff:0f:
de:0e:4f:44:91:be:40:73:e4:20:2a:30:e7:4d:71:
fe:bb:c2:ef:b3:41:94:97:b2:94:aa:89:0e:8d:d4:
34:a7:a0:47:8a:12:37:95:d6:9f:f0:91:3b:f9:8d:
66:e2:d0:d9:92:af:b3:c9:97:1b:ae:d2:68:e1:a2:
06:02:71:14:eb:88:5a:7c:72:cb:b8:9a:08:b0:78:
ca:c9:c5:84:80:14:9c:ed:5d:ed:6c:ed:3a:4e:c7:
ca:31:12:f0:e1:b7:0e:8e:b9:80:c7:3e:3b:21:0a:
9a:e0:e4:36:74:a5:20:be:69:40:fd:54:9f:a5:89:
1c:e6:7f:eb:64:a8:7f:ad:f3:48:f0:4c:03:ab:2b:
0e:e3:45:0b:af:a8:97:18:f0:66:48:19:29:2d:61:
8a:26:86:d8:86:99:b5:b7:ec:98:e2:21:17:97:c4:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:E2:37:F5:87:60:C5:96:F9:9D:B5:78:74:6B:27:0F:1B:56:B5
X509v3 Authority Key Identifier:
keyid:60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ee:58:93:23:9e:39:3e:30:57:cb:4b:48:b0:b6:91:29:93:
a8:8a:b9:eb:22:62:4c:13:12:da:06:89:80:2c:a9:56:af:b0:
a2:3a:89:3e:72:8c:b0:b1:04:15:e9:bb:af:e1:ef:e2:d0:f2:
2d:e6:38:15:75:73:e5:f2:2a:3f:5f:ed:1b:ed:75:af:9f:b3:
86:23:86:53:4e:b2:7f:40:df:5c:a8:b9:18:04:61:d4:c5:ef:
11:65:31:07:b3:c2:cd:8e:6e:4f:8b:25:76:f6:1c:d7:04:02:
f3:b1:94:96:c7:74:51:06:f4:25:fd:01:0f:11:55:63:cf:f6:
0d:0a:02:ea:c5:71:c8:48:55:fd:20:9f:92:fd:97:1b:15:45:
fb:16:33:f5:c5:a2:3d:8d:70:5a:dc:9f:48:73:6a:96:08:0a:
46:d9:c5:21:8a:90:b5:ff:55:62:f5:a1:bf:38:4e:6b:d4:f9:
fa:4d:aa:06:3a:44:68:f3:5c:81:ff:1f:ce:c6:b9:04:87:ae:
c5:71:f8:ef:2c:0b:ad:6b:e8:2c:54:69:b7:4c:bb:a6:ba:c4:
4d:ad:eb:bc:08:c7:f6:77:8a:5e:d2:32:4b:02:b2:fd:11:60:
29:65:62:ee:92:0a:47:5f:70:ad:d4:03:c5:78:01:7a:3c:62:
fb:ec:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:59:17 2026 by rpki-client