Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: 3paykenMRf6L+qHLN22gU8t2drjww494m5yssDSip4A=
Subject key identifier: E6:F1:DC:B0:DC:EE:4F:07:FC:9D:C3:8E:27:DE:8D:B1:86:8D:4A:29
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019DCED08DDDE0E9880D446BB58CA56EA4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 17A6
Signing time: Mon 27 Apr 2026 12:01:07 +0000
Manifest this update: Mon 27 Apr 2026 12:01:07 +0000
Manifest next update: Tue 28 Apr 2026 12:01:07 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: m0KgeClL6qNFp9OnpyI1VcvEGpHftKWrH1h4X6ByUGY=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:8d:dd:e0:e9:88:0d:44:6b:b5:8c:a5:6e:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Apr 27 12:01:07 2026 GMT
Not After : Apr 28 12:01:07 2026 GMT
Subject: CN=e6f1dcb0dcee4f07fc9dc38e27de8db1868d4a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:85:f7:40:d3:3c:35:a7:fa:12:5f:06:88:
4c:79:71:4f:33:c9:1d:a1:bc:cb:ea:c2:d0:35:31:
e4:db:5c:d6:9f:e3:33:a9:a0:0f:64:ee:4c:b6:c5:
b3:28:52:3c:a9:72:52:18:c8:b2:1d:e7:fb:29:9d:
f1:5e:ea:63:68:fd:66:5b:69:2a:ab:52:1c:1b:e0:
08:08:7e:88:9e:65:dc:ee:b2:17:5c:61:11:7c:48:
91:e3:d6:c7:1f:e0:61:9b:0f:b7:cb:96:ed:53:26:
5c:2f:df:08:a1:50:56:3b:3a:73:10:f6:3b:f5:c3:
2b:7c:34:0c:1c:f1:c4:55:c7:0f:a4:9d:ce:1d:8c:
d1:77:a6:3a:e6:2c:44:14:8b:90:76:ee:a3:79:7a:
69:2b:da:3a:ac:b9:76:39:34:4e:dc:74:ae:7e:e7:
6b:a8:a3:f5:e0:ba:0d:18:2f:5a:86:f0:02:4c:4f:
d9:6a:37:1a:5b:d6:f5:05:e5:09:16:db:cc:d2:bf:
0f:0c:f7:97:0c:4c:08:3d:26:00:57:83:12:46:5b:
d8:6a:a8:ba:47:5f:04:2b:13:c9:70:35:84:a6:28:
b9:d3:ea:d5:da:f9:fc:a2:80:b7:4d:d5:46:54:00:
9f:33:bc:4d:8e:97:98:2c:4e:a0:ef:67:05:1a:cc:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:DC:B0:DC:EE:4F:07:FC:9D:C3:8E:27:DE:8D:B1:86:8D:4A:29
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:69:b3:b4:2a:2f:0f:55:ca:17:77:62:8c:04:f6:59:5b:a1:
04:59:c5:69:09:01:04:03:d2:fb:69:de:9b:cf:04:e2:52:2b:
25:a5:0a:da:be:3e:09:fd:66:91:5c:69:47:33:18:61:d3:07:
a6:84:c5:2f:4e:28:7b:37:bf:2f:c6:5a:37:ed:e4:24:4c:00:
87:da:49:01:1a:b3:dd:e7:c0:0c:5f:6b:5c:d5:09:3d:3f:18:
3b:0e:d6:45:20:90:59:5d:ee:ba:4d:a7:8c:e4:6d:a8:75:2d:
9d:96:02:d8:d9:97:0c:b1:d6:90:5d:aa:e2:db:67:3a:69:ff:
ba:d9:af:0c:8c:d8:70:32:b7:40:ca:af:34:21:d5:86:88:7d:
ab:1a:dd:01:83:41:75:2f:b1:8a:f5:d4:65:6a:a9:eb:71:da:
01:ad:40:ae:1f:14:d3:5f:f0:b2:d6:d7:33:2c:89:9f:7e:e2:
32:0c:5a:75:50:90:d0:e0:cd:a0:9e:19:af:19:5c:23:12:b7:
80:69:c4:7a:af:46:f0:c0:7f:3c:78:e5:15:09:d8:65:f4:bb:
fb:04:64:7a:ac:89:fd:6b:88:f3:78:1c:16:51:6a:ba:46:81:
e4:71:4b:32:26:e8:1e:4a:8a:40:06:87:78:37:57:f9:d2:c4:
c4:f4:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:30 2026 by rpki-client