Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: 8wAu+WpTreDqfNV4Jh27BLwmFgDVIxCLjQCT2lC+Lno=
Subject key identifier: 33:2F:8E:84:93:4C:74:60:6D:ED:BD:FD:AC:31:1E:81:AA:17:02:F3
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019D26CD6D293E5AA3042A10B61181AB2B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: Zx15oB/krtcAO5Kb+9XoGA7eV5WtHKBce9Az1tEAF98=)
2: ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa (hash: ZJNIgGVCnwwLExWWtHO1eDKLXNM052in6SsRsPrXcKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6d:29:3e:5a:a3:04:2a:10:b6:11:81:ab:2b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=332f8e84934c74606dedbdfdac311e81aa1702f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:51:e8:a7:45:d6:8e:0f:2c:24:cf:02:c8:
7e:62:c7:81:bf:65:94:1d:5e:ff:d0:ea:42:d8:f2:
ea:87:2e:d3:df:c8:48:11:d0:a7:3f:92:d7:8c:a9:
4c:70:2d:a3:e9:f5:fd:2e:7f:38:4c:a0:be:e2:2f:
da:d7:b5:83:46:bf:ef:67:da:ef:ee:96:2b:9f:ba:
c7:96:2a:9f:7d:05:b4:96:18:8c:ba:ee:42:ef:15:
b3:c9:86:9e:1a:43:b4:8f:a4:2e:6c:4a:e6:b8:d9:
10:c5:b7:a8:b3:2a:7f:9a:f0:c9:75:5f:67:61:9b:
f8:7f:6f:8f:19:34:3a:8c:ce:7f:32:9c:b4:ce:14:
b8:20:dc:7c:aa:70:66:19:b6:1d:23:ce:87:5a:7b:
3f:fd:c8:78:8d:3d:32:dc:0d:a2:f6:6a:7d:1c:c8:
ac:42:17:85:a1:54:0c:14:9c:9d:1b:b3:e9:8f:a7:
c7:2d:08:c1:3e:b0:bf:7f:97:5b:43:a5:15:0e:f9:
5a:78:b2:9f:84:41:a5:dc:d6:57:e4:7b:d5:f8:c1:
65:4d:bd:d0:46:04:ac:91:fd:21:2d:23:af:98:ba:
dd:46:26:ec:79:b0:dc:7b:c8:83:c3:8d:86:bd:df:
09:e3:ac:55:a1:e7:89:e2:41:14:2a:d1:4e:ce:14:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:8E:84:93:4C:74:60:6D:ED:BD:FD:AC:31:1E:81:AA:17:02:F3
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:09:c7:2f:4c:de:be:8a:b3:a6:22:71:9a:48:1b:41:24:
fb:05:1b:25:0e:93:dc:c3:38:aa:1d:51:4a:a3:a7:bb:a8:08:
e9:8c:ed:28:bc:00:61:70:67:ea:df:3f:a8:7d:19:11:8e:06:
bd:5f:ad:aa:11:4a:24:75:b4:97:30:f6:69:b0:6f:a8:e9:40:
40:72:b5:e9:2d:62:2a:f6:3c:bc:0b:6e:88:c5:97:7c:aa:05:
9c:42:49:6b:eb:71:db:f9:4f:b8:bc:33:ed:df:60:36:b6:66:
4b:9b:ed:3e:41:ae:7d:4d:4d:b1:00:cb:a5:9f:9f:d9:d8:d8:
09:ee:d4:1c:97:79:91:a4:ca:bc:20:cd:aa:ba:df:21:9e:1b:
73:42:58:7c:d8:04:1a:ba:67:60:ba:0e:16:b4:14:2d:38:c0:
f1:11:c9:ef:13:ab:d5:a9:77:a5:1d:bc:0e:f3:f6:f5:ef:a5:
57:a5:2a:4a:2b:86:b2:bf:97:86:fe:56:92:36:95:a6:8f:c1:
32:0a:1d:2b:70:ef:9e:58:ec:cc:76:56:7a:29:a1:0b:9b:a8:
08:ed:4f:ec:50:7f:53:48:ff:ff:39:f6:5e:3e:78:d6:06:da:
24:6f:c7:83:d5:25:61:fa:f8:30:5c:9d:48:25:31:89:dc:43:
e0:c1:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client