Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: myLAHNwSpiC9MSqoyQiHxG10a41NMFvCY4tot3oFzcw=
Subject key identifier: 3A:43:9E:4B:9E:6D:ED:73:C8:02:A5:71:F1:7F:24:AF:2D:0D:5B:2A
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01A08DC42E68B7ED3634404EF0CB6D1CBD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1912
Signing time: Fri 11 Sep 2026 00:00:39 +0000
Manifest this update: Fri 11 Sep 2026 00:00:39 +0000
Manifest next update: Sat 12 Sep 2026 00:00:39 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: 3hJxgYdwy3OQk7OzxypvUgKrFFPzQ8jzjjOTq7k1LsE=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:2e:68:b7:ed:36:34:40:4e:f0:cb:6d:1c:bd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Sep 11 00:00:39 2026 GMT
Not After : Sep 12 00:00:39 2026 GMT
Subject: CN=3a439e4b9e6ded73c802a571f17f24af2d0d5b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:59:39:63:47:b1:83:b2:b4:b7:52:7c:9c:
61:d9:a8:b2:7d:21:6e:70:e2:90:76:82:e4:69:14:
0e:71:26:a7:11:33:c6:5e:18:9f:b8:f3:61:bf:c1:
38:3c:b1:72:ab:a1:f4:c5:f2:05:20:4b:05:97:3d:
9a:5c:96:c4:21:d4:3a:78:a5:8e:3e:a8:a3:af:78:
9e:db:41:fd:a1:28:42:05:eb:bd:b3:34:ea:26:ee:
ed:6d:6c:ff:44:98:6f:a0:f1:f4:9b:bc:ae:be:9b:
6d:21:93:77:68:0e:68:1d:d1:d4:df:4f:04:12:ac:
5c:43:c7:84:e4:c8:81:ad:a8:b7:da:a1:b8:ab:d0:
c2:5d:22:35:2f:e3:66:57:ba:fb:ff:ac:36:bf:fb:
7a:92:d0:3f:cb:91:74:ae:33:2e:96:e2:01:4a:ef:
bd:ff:33:71:50:06:23:50:ba:b9:34:61:55:30:6b:
45:aa:35:c7:0a:e3:ab:17:b9:10:ef:50:06:85:63:
81:c0:da:17:eb:42:1c:20:89:e1:37:4c:5e:e2:19:
b4:20:f5:8c:58:2a:b9:2b:ef:39:21:93:39:42:d8:
c7:48:df:ef:0d:de:90:a7:fe:7e:c6:0d:7d:a2:94:
da:c0:56:da:ea:ec:41:38:c9:23:9d:6a:0c:8d:69:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:9E:4B:9E:6D:ED:73:C8:02:A5:71:F1:7F:24:AF:2D:0D:5B:2A
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:e9:fe:7c:23:28:98:a6:1a:a1:84:d8:b0:c3:78:e4:8a:
f3:2b:91:a5:22:30:74:21:6c:b5:d2:9f:62:b9:3b:93:95:bd:
28:98:c0:38:3c:ac:16:ea:1c:f5:f4:dd:e9:05:e6:b6:54:14:
a0:25:e5:36:37:22:34:37:ef:18:c0:e8:ec:d9:01:4c:fb:26:
d1:7b:cf:24:c9:1b:ad:59:c8:09:ee:6d:da:b7:ef:e1:f0:bf:
58:b7:1a:1a:66:e2:e0:29:c6:b0:74:14:13:4c:d1:ba:8a:32:
93:2e:91:1f:6b:32:d0:fb:72:13:8c:60:8e:69:2d:3b:df:98:
1e:83:a6:44:2f:fb:3e:ad:8c:31:43:47:ec:33:c0:d7:c7:88:
d8:f7:6d:c9:ea:1d:9e:a9:35:62:ba:17:0a:cb:ad:9b:a3:bd:
49:39:e7:1d:ce:c8:1b:56:ad:3b:7d:ae:ee:b9:cc:ef:5a:bc:
f8:81:74:e7:64:0c:55:3a:d1:96:53:d7:25:c0:f3:5d:ea:a5:
2e:91:62:05:74:c6:52:a0:b5:08:2d:b1:43:f4:dc:8a:ba:73:
a1:41:e1:95:40:b2:17:72:ed:91:55:7e:bf:16:13:b2:4f:80:
1e:90:b3:ef:3b:80:35:4f:29:3e:2c:55:4c:b9:95:d7:36:aa:
ee:61:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:57 2026 by rpki-client