Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: D5Hj8cwJdN5wGg1asgNHWGsXDzDu/LpwJPJGHCrBaIw=
Subject key identifier: 45:F4:CD:74:89:6C:AA:45:96:7A:BC:79:5A:FB:0C:A3:C2:15:95:9C
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019CE523F51C5B454621C6849AF294F37BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 172D
Signing time: Fri 13 Mar 2026 03:01:04 +0000
Manifest this update: Fri 13 Mar 2026 03:01:04 +0000
Manifest next update: Sat 14 Mar 2026 03:01:04 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: kkBnkeoLA2NWyZPrjb+dwsrInRqDs5VsBKG7iE5Y+jQ=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:f5:1c:5b:45:46:21:c6:84:9a:f2:94:f3:7b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Mar 13 03:01:04 2026 GMT
Not After : Mar 14 03:01:04 2026 GMT
Subject: CN=45f4cd74896caa45967abc795afb0ca3c215959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:53:ac:af:02:e1:f7:ec:b1:61:23:c7:d2:
df:bd:df:62:4a:bb:c3:c8:9f:3c:a4:8d:4b:a1:c1:
ca:9f:78:7b:6c:1a:0c:13:ba:68:0b:45:07:c6:63:
b7:f3:60:62:12:ba:26:ce:e2:e9:af:52:45:00:8f:
2e:48:50:1e:9f:75:bb:1f:93:a3:c2:8a:0a:28:4b:
ae:fb:f3:49:12:e8:28:3f:5c:78:2d:41:63:37:76:
a1:6f:cd:05:80:37:63:de:f4:f6:d4:59:4b:8a:c6:
cb:54:9a:d9:b3:f3:cd:87:32:ed:43:79:0a:c9:e0:
ba:f7:52:71:64:7d:39:0d:ff:91:a9:cb:9e:4c:6d:
a3:de:3a:63:7c:ee:77:92:d7:7e:bd:fd:ee:27:d9:
c3:ff:d3:2b:a0:f1:75:2f:6f:b2:58:fe:b9:92:97:
dd:c3:33:e9:8f:99:d5:0b:4f:4d:49:ef:25:89:45:
37:54:43:de:9a:99:f9:25:b5:99:88:fd:93:2d:9d:
e1:cb:0c:d5:14:bf:ae:e0:40:ad:c1:a7:b3:af:54:
5a:40:3e:7c:9b:19:a1:c0:71:d5:54:d4:74:c0:7b:
9b:9f:17:51:f8:2b:00:37:74:f7:aa:d7:57:de:e8:
8a:d4:1f:ab:98:6e:7e:8a:c5:2b:ba:95:3c:5d:1c:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:CD:74:89:6C:AA:45:96:7A:BC:79:5A:FB:0C:A3:C2:15:95:9C
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a6:d8:f3:a0:43:73:f6:b3:db:7a:5e:bc:24:ae:ca:a9:ab:
b6:02:ac:97:95:75:4d:77:e3:7b:a4:63:36:34:65:c2:4f:e5:
37:27:a3:ac:6b:9c:de:21:da:ce:da:49:5e:f1:d9:33:e1:50:
68:84:d9:6d:ad:ea:8d:44:36:df:88:71:d3:e9:a4:a8:7a:e5:
d6:7a:a0:7e:63:53:4a:20:28:23:b3:51:78:e1:ce:4a:0c:3e:
c5:6b:61:32:8d:34:3d:55:fa:d1:55:72:71:66:da:ef:0a:d0:
df:0b:ea:8b:ae:af:de:94:8e:a6:dd:e0:9a:82:81:38:a8:ea:
fa:a4:9f:06:e4:0d:eb:81:4c:fd:da:73:c4:db:a2:51:9f:af:
35:1e:50:09:a8:e7:f0:42:c4:84:7c:e2:e9:c1:99:cc:2c:bc:
e7:5b:45:f3:d9:e4:0a:6a:a4:21:56:7f:a5:d1:67:f4:f9:8d:
c0:15:c8:ac:7b:a0:5b:a6:56:b5:01:a3:08:5a:c9:95:49:d6:
3f:ad:82:7e:ca:51:ab:af:ae:17:5f:f5:a0:3c:d9:46:5b:31:
bb:54:8b:5d:ec:f6:6b:f4:b2:ef:29:8e:e2:4a:2d:89:6e:5f:
5e:0f:46:9c:c3:a7:48:da:63:a2:cc:ec:db:be:e0:fe:82:64:
c0:40:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:09 2026 by rpki-client