Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: rYmfFYebgXl/CK13y3mNSmkVXi22vlIsj+q+R7xAQqg=
Subject key identifier: FA:49:12:CF:08:B9:6B:16:D1:00:44:DF:A1:A6:49:BF:A3:C2:1B:00
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01A18CAF0166655A2B3065B50ED773AA00C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1996
Signing time: Fri 30 Oct 2026 12:00:41 +0000
Manifest this update: Fri 30 Oct 2026 12:00:41 +0000
Manifest next update: Sat 31 Oct 2026 12:00:41 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: wWlBqUq73NBw79mDa+bifQGFtjY/v/2OFEHlV8p2vN4=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:01:66:65:5a:2b:30:65:b5:0e:d7:73:aa:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 30 12:00:41 2026 GMT
Not After : Oct 31 12:00:41 2026 GMT
Subject: CN=fa4912cf08b96b16d10044dfa1a649bfa3c21b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:80:9b:00:89:c4:45:0a:32:12:91:e4:15:
e4:f7:30:fd:63:ed:a0:a7:f0:88:43:ec:f9:e8:01:
88:85:6c:1a:78:67:22:55:4b:b4:2f:41:d5:11:38:
3c:ba:06:82:39:79:76:79:71:be:f2:4e:15:80:7c:
9c:fa:9b:51:96:20:8f:92:df:9e:64:bb:4a:f6:7b:
35:25:49:89:ad:64:d3:9b:78:a2:17:dc:9f:ad:2e:
db:75:d4:5d:80:94:ca:f1:ff:da:2a:61:77:24:44:
95:da:68:c0:52:57:75:95:71:65:26:58:18:a1:fe:
9d:4a:1e:1c:32:15:6c:17:31:06:bf:04:25:b8:82:
42:4b:64:0e:9c:c9:5f:1c:2a:d7:1a:1c:9f:3a:ac:
aa:17:63:ed:4c:7d:33:7a:ad:0d:38:5e:cf:d1:e1:
23:5f:1b:dd:6e:85:db:27:3a:e6:23:8b:14:f9:23:
23:b0:b0:ff:c6:ae:0e:63:ed:4f:9b:e8:bf:3e:eb:
1c:ec:17:a6:c9:36:1b:92:36:26:45:32:08:73:c7:
ab:65:70:27:7e:bd:3c:d9:e9:a0:e4:09:6c:0d:76:
b9:ad:7d:00:b2:56:bc:7c:d4:e9:68:6f:e2:69:59:
06:33:b1:b7:d1:5f:e0:dd:b7:ee:35:61:ee:64:ec:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:49:12:CF:08:B9:6B:16:D1:00:44:DF:A1:A6:49:BF:A3:C2:1B:00
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f1:28:dc:11:b9:c9:12:f1:0e:5b:89:e5:0a:b4:49:fe:f9:
0f:f0:b2:74:d8:0d:6b:b4:e6:04:2c:c3:1e:9d:ba:d5:b3:b5:
73:12:c7:dd:26:96:72:e5:a6:ca:7e:1d:af:ad:2c:82:41:27:
6b:40:99:d9:50:55:7c:5a:fb:6c:a5:02:db:3d:0a:a5:27:f9:
ea:b1:97:8a:cf:53:88:e5:c2:95:0a:1d:8f:61:37:b9:85:d5:
c1:bf:58:92:51:5b:71:ab:3c:a2:b5:f7:c6:4e:74:7d:7b:d0:
16:38:d2:80:93:94:7e:4e:f2:6b:b9:2a:ca:0a:81:50:1b:0e:
6a:76:99:47:7b:59:67:9e:e4:ba:7a:d9:58:b0:73:56:aa:58:
ef:ae:fc:32:d3:46:6b:86:7f:2e:36:9e:0a:8d:a3:d7:67:e4:
43:30:fb:16:16:d7:d0:76:56:98:29:eb:29:8a:c9:1b:ba:77:
93:f9:58:ed:6b:c3:0f:43:7a:2c:94:94:f6:e2:9f:12:34:97:
40:30:b8:e8:a4:07:db:ce:b8:e1:dd:c0:40:9c:2d:14:ac:ac:
fd:35:69:90:1e:4f:1a:6c:2d:bd:99:bc:25:8a:55:19:75:f6:
7d:1a:54:46:a3:6f:04:e5:fa:d7:33:b6:02:bf:8c:31:c7:ee:
ee:0e:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:08 2026 by rpki-client