Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: TqQBuKuK/cXFMTuNFUz9IYaVoYxXQILqAhb5WwTJMIo=
Subject key identifier: 2E:84:F1:7F:EE:E3:F0:DC:50:EC:F6:C9:D8:ED:0E:0E:D5:C0:20:52
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019FA03B1D76788737A4FDF425DA92C7AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1897
Signing time: Sun 26 Jul 2026 21:00:56 +0000
Manifest this update: Sun 26 Jul 2026 21:00:56 +0000
Manifest next update: Mon 27 Jul 2026 21:00:56 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: jHNwGAbJHb57Nv7Z4lwjiRpYmbVX4cM4XO1/nE5/WEo=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:1d:76:78:87:37:a4:fd:f4:25:da:92:c7:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jul 26 21:00:56 2026 GMT
Not After : Jul 27 21:00:56 2026 GMT
Subject: CN=2e84f17feee3f0dc50ecf6c9d8ed0e0ed5c02052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:92:4c:ba:53:f9:73:b7:d6:b4:e6:17:ff:
8a:01:ff:01:20:89:30:9f:54:42:0a:d1:82:13:29:
46:da:f8:68:17:27:b2:ab:bc:ae:24:72:b7:49:ba:
c0:bd:42:f7:ac:68:3a:72:b7:db:66:c9:3a:d4:71:
22:16:a0:7b:30:07:3b:e5:78:c1:be:d5:0b:e2:19:
4b:ee:74:95:34:0f:55:51:30:0c:a3:92:a5:35:91:
f0:8f:6f:c3:ff:05:2c:10:79:69:bc:f9:a3:83:30:
cd:2e:9f:72:b4:2e:cc:b7:2e:db:9c:eb:54:4f:0d:
38:c1:e0:32:64:e4:33:ca:6e:4e:2f:37:63:92:a7:
8b:d5:8e:74:2c:fd:a5:55:7b:fb:b2:63:97:a0:1d:
ff:cb:8c:6c:86:c9:87:98:b2:72:de:57:b4:20:5f:
18:0c:c9:9b:9d:e0:28:75:09:77:ed:6f:fd:61:67:
50:09:51:14:9f:77:ea:9d:be:5a:90:ae:a5:01:9f:
34:34:5c:09:40:9f:ba:94:5a:cf:2d:8c:68:05:85:
1d:c4:f1:f6:1c:0c:71:4f:94:04:ea:24:97:6a:7c:
ec:e6:75:ec:c6:3e:b6:e8:09:6a:4f:57:fa:cc:77:
14:f0:07:85:d7:b4:d8:a2:70:48:13:e5:d6:35:39:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:F1:7F:EE:E3:F0:DC:50:EC:F6:C9:D8:ED:0E:0E:D5:C0:20:52
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b6:75:62:3f:62:b1:e8:8e:56:51:48:bd:2a:3c:57:61:23:
01:d3:0c:6c:4e:e7:77:2d:01:d5:04:95:87:78:a9:84:97:93:
44:a6:4d:5c:4e:68:f3:a3:ae:85:cb:8d:7c:07:4c:12:f2:4c:
2d:bf:9f:83:1e:b3:ae:f1:90:4b:f1:68:83:da:30:e8:06:af:
5a:45:8d:92:60:11:d8:92:7b:56:07:45:e3:35:6e:15:22:80:
05:be:c5:41:57:dc:68:bc:c9:5d:bb:bf:8e:4e:76:2a:9b:9f:
eb:82:46:75:8f:f0:e0:36:62:54:c1:69:b0:b5:9a:07:c4:24:
2c:3b:db:4f:f7:55:96:f3:6f:fe:63:b5:d2:9b:77:aa:7f:33:
6e:46:49:55:93:c3:4c:4c:c4:58:db:dd:34:3f:72:6a:e7:d9:
98:3f:fb:55:f6:9d:72:29:cc:55:23:c0:7a:5e:92:7c:87:5e:
c3:e7:c9:84:02:46:24:d0:c9:fe:e3:e6:77:93:ed:48:f3:bb:
43:e9:cc:63:df:b9:ad:cc:62:0a:2d:26:a3:90:32:32:a8:0a:
5b:f9:6e:a3:45:48:e8:23:ea:30:cf:a9:e0:59:49:5e:af:81:
96:69:22:b9:aa:77:bb:37:10:9a:cc:33:da:2d:a4:4c:5a:64:
dd:70:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:53:12 2026 by rpki-client