Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: kP0pUlxVY9ecAKDEp2d2XyVmRBTuKHsjqcQvu4py77c=
Subject key identifier: E7:78:45:15:C7:B1:FC:6E:94:35:DA:0D:7D:37:3F:C7:EA:B4:72:C8
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019EB87CA0B0490A8A5BC6E05C990BF66993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 181F
Signing time: Thu 11 Jun 2026 21:00:35 +0000
Manifest this update: Thu 11 Jun 2026 21:00:35 +0000
Manifest next update: Fri 12 Jun 2026 21:00:35 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: eJ5bWDFBqtFHm4VBJBXYvmv/E7sUC9yBPWi6S++jaO8=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:a0:b0:49:0a:8a:5b:c6:e0:5c:99:0b:f6:69:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jun 11 21:00:35 2026 GMT
Not After : Jun 12 21:00:35 2026 GMT
Subject: CN=e7784515c7b1fc6e9435da0d7d373fc7eab472c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:8d:4c:67:53:e6:fe:00:4e:4c:0a:53:67:
a5:4f:b8:77:b2:32:51:3f:1e:53:f3:1f:c5:c7:bb:
1e:aa:42:1d:b3:1e:a7:fe:31:8f:1b:c4:a6:80:cd:
e5:36:d0:c1:05:fd:85:b2:3f:36:e9:65:99:fc:30:
54:d3:28:70:6f:44:a0:ec:af:44:38:26:88:c7:61:
37:f1:ac:f3:90:a8:e4:d3:1d:01:0b:b7:74:53:45:
e5:35:78:47:77:b8:2c:fb:ff:75:d6:86:77:ff:f4:
5e:16:d7:ef:b4:f8:f4:02:21:45:79:64:76:7c:09:
d6:9c:b8:c6:ca:eb:f4:bc:9e:9c:a8:32:ad:42:03:
89:e9:23:5c:92:fd:ef:77:0b:02:b5:a7:2a:0a:0f:
1d:a6:ee:b7:ad:1c:9d:c6:9d:31:a9:8e:5e:01:b2:
60:50:a5:e2:7d:8d:70:70:aa:2e:10:64:25:25:f7:
50:62:95:aa:c0:ea:7e:d3:46:89:22:f6:af:44:0a:
99:6c:b2:30:50:28:fb:f2:6c:ff:6c:75:d3:66:50:
87:16:7e:5b:0c:9b:bb:15:40:ab:ed:3a:f1:97:ef:
b8:e2:8c:4c:02:ee:8e:0e:da:2b:f7:3d:58:da:50:
db:1a:c8:86:28:32:81:19:cd:05:55:6a:9b:79:44:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:45:15:C7:B1:FC:6E:94:35:DA:0D:7D:37:3F:C7:EA:B4:72:C8
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:4a:13:6d:be:91:c7:b3:16:19:1e:0b:9b:37:74:4e:48:
a1:ee:b8:a5:9c:5a:a5:88:35:8b:94:94:8d:6d:25:fc:53:ea:
72:30:cc:9b:fa:ef:49:4c:41:24:c8:20:67:c5:0b:e4:9d:4b:
d6:ca:91:1a:37:d8:44:4c:f9:0b:86:1d:58:ec:74:25:98:16:
6c:c3:7b:00:8b:6a:1c:18:ad:9e:22:bf:07:f6:77:7c:52:6b:
6e:44:ea:c9:f1:ca:2b:1f:d1:97:99:ce:e5:66:e3:25:3a:e8:
44:53:02:14:ed:69:78:ba:e4:2d:a9:c3:4b:19:cd:18:0f:8e:
66:2d:61:e3:e1:47:ff:80:24:e7:b2:a7:3e:99:ab:6b:63:59:
47:bf:76:e3:50:ea:41:72:53:1a:47:3f:82:98:e9:fd:85:7e:
cc:0e:09:0f:77:e3:16:74:5e:d6:f8:4f:e8:a8:fe:dc:23:91:
a2:97:6f:78:7b:78:87:56:b0:b2:dd:36:d8:5c:64:ff:22:4d:
a8:ef:9a:2a:6f:de:e3:77:6b:7c:71:60:8b:49:ec:53:98:95:
0b:54:90:d2:5a:5c:7a:da:1b:a2:da:d9:f9:a6:90:aa:69:c6:
da:1f:55:fe:36:5f:50:71:a5:30:8c:37:7f:f8:7c:ab:b3:9c:
41:11:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:53 2026 by rpki-client