Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: 3ymgQiby7WfrKU4BDyRTAztKyFpsmo7KQUqoX1R2ul8=
Subject key identifier: 1B:9F:F5:3A:46:88:98:41:84:6E:55:22:F6:A8:7A:45:86:C3:F9:AF
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 019D292944C49B2DFEB96EC1ABDF7077DF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:01:03 +0000
Manifest this update: Thu 26 Mar 2026 08:01:03 +0000
Manifest next update: Fri 27 Mar 2026 08:01:03 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: ++JrJPnYRzHYmxgvAhDrolxbOpIJPgufd1hj7fxMTd8=)
2: bi5rESVj86GmUsAdmL-jFDYQj7Q.roa (hash: OC/uMHVwkkjFxo7Q7u2D9vo2U1CM0p48Ycc2AmRTk6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:44:c4:9b:2d:fe:b9:6e:c1:ab:df:70:77:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Mar 26 08:01:03 2026 GMT
Not After : Mar 27 08:01:03 2026 GMT
Subject: CN=1b9ff53a46889841846e5522f6a87a4586c3f9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:ee:05:c0:18:32:85:0c:72:97:9b:93:51:
77:79:1a:3c:08:0b:6f:bd:54:5a:06:df:de:6a:8e:
d9:2a:53:a2:50:f1:1c:cb:90:0c:67:6b:8b:6f:59:
49:60:fa:ea:42:ef:c8:7f:c8:a0:8e:dd:b5:d1:f1:
7c:e6:7c:ed:3f:b9:0e:54:33:61:b0:6a:b5:d1:4c:
59:34:76:9f:d7:9a:7f:62:4f:84:9d:75:2c:5d:32:
47:01:83:41:f7:46:0e:39:af:b8:52:b3:c2:3f:36:
02:20:0e:ee:bf:91:06:64:92:01:1f:05:a5:64:f1:
f3:5a:7b:29:20:c8:93:f1:83:bc:49:33:f4:ae:64:
a2:ce:15:a5:ad:24:0c:8e:da:7c:0a:6c:2c:1c:f8:
13:1c:ca:ce:1d:a6:72:e1:a7:84:55:9c:3d:cb:e3:
59:ba:0e:56:d5:5d:29:64:91:84:ca:c6:a0:cf:2b:
db:47:57:db:42:b6:be:19:1e:a8:73:f2:77:b2:6e:
51:e2:8a:39:e5:fb:c6:7e:f7:df:58:5a:dc:58:cf:
2f:1c:42:03:07:97:13:76:a7:d6:06:7f:cd:27:16:
6c:fc:50:18:da:cb:57:37:31:b7:68:f9:8c:90:aa:
31:de:31:e2:36:7e:d1:63:a4:f6:b3:5c:35:bf:3b:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:F5:3A:46:88:98:41:84:6E:55:22:F6:A8:7A:45:86:C3:F9:AF
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ae:7b:d4:56:90:8c:c5:cb:e6:8b:9a:08:79:40:5b:bd:6a:
25:26:78:f8:81:ce:a3:90:b1:c5:30:29:ef:80:b8:76:09:39:
9b:f8:df:ed:ac:f2:8b:cf:fc:26:2a:68:3c:a6:8e:c7:b0:17:
56:3c:ed:ee:45:e4:76:46:cf:5a:a9:5d:c2:9a:4b:69:ed:1c:
11:2e:8a:41:97:5d:34:14:48:7b:37:18:d5:8d:49:7f:cc:6d:
aa:f4:78:ae:ce:6b:b2:54:5c:93:3b:e6:ac:38:eb:78:6f:27:
ee:7c:ec:19:19:73:47:2a:c8:b8:58:2a:81:5b:53:19:97:f6:
0b:63:0e:37:6e:6c:b5:56:f5:a6:a9:8d:da:5c:d0:72:e2:78:
ae:d8:54:78:a9:7c:61:6f:09:0a:e8:2b:25:74:a8:d6:21:75:
02:d5:ef:65:eb:04:47:23:74:10:e0:19:ff:bc:d6:9b:23:2f:
cf:e4:a4:42:ab:e5:f4:f1:ac:25:a9:da:43:98:a2:50:3f:f8:
ea:d2:86:90:af:89:cb:1f:4e:30:9e:03:cf:24:d0:22:be:95:
13:05:d5:37:e7:5f:26:be:4e:1a:91:5e:df:4b:f4:c2:0e:4a:
e4:40:40:dc:90:bd:72:e1:61:8b:5f:d4:6e:27:10:2d:3b:37:
5d:f3:11:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUTEmy3+uW7Bq99wd98BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmY2ZGY0NDgyNmY5ZjEwNjQ5YzU3OGVhYzQxNjE2NzA1
Mjk0MjcwHhcNMjYwMzI2MDgwMTAzWhcNMjYwMzI3MDgwMTAzWjAzMTEwLwYDVQQD
EygxYjlmZjUzYTQ2ODg5ODQxODQ2ZTU1MjJmNmE4N2E0NTg2YzNmOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4buBcAYMoUMcpebk1F3eRo8CAtv
vVRaBt/eao7ZKlOiUPEcy5AMZ2uLb1lJYPrqQu/If8igjt210fF85nztP7kOVDNh
sGq10UxZNHaf15p/Yk+EnXUsXTJHAYNB90YOOa+4UrPCPzYCIA7uv5EGZJIBHwWl
ZPHzWnspIMiT8YO8STP0rmSizhWlrSQMjtp8CmwsHPgTHMrOHaZy4aeEVZw9y+NZ
ug5W1V0pZJGEysagzyvbR1fbQra+GR6oc/J3sm5R4oo55fvGfvffWFrcWM8vHEID
B5cTdqfWBn/NJxZs/FAY2stXNzG3aPmMkKox3jHiNn7RY6T2s1w1vzvAuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuf9TpGiJhBhG5VIvaoekWGw/mvMB8GA1UdIwQY
MBaAFGD/bfRIJvnxBknFeOrEFhZwUpQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUt
OWE5NWNmODIzZjliLzEvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZWEyNGItOTg0Yy00NWYyLTgwNDUtOWE5NWNmODIzZjli
LzEvWVA5dDlFZ20tZkVHU2NWNDZzUVdGbkJTbENjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPa571FaQ
jMXL5ouaCHlAW71qJSZ4+IHOo5CxxTAp74C4dgk5m/jf7azyi8/8JipoPKaOx7AX
Vjzt7kXkdkbPWqldwppLae0cES6KQZddNBRIezcY1Y1Jf8xtqvR4rs5rslRckzvm
rDjreG8n7nzsGRlzRyrIuFgqgVtTGZf2C2MON25stVb1pqmN2lzQcuJ4rthUeKl8
YW8JCugrJXSo1iF1AtXvZesERyN0EOAZ/7zWmyMvz+SkQqvl9PGsJanaQ5iiUD/4
6tKGkK+Jyx9OMJ4DzyTQIr6VEwXVN+dfJr5OGpFe30v0wg5K5EBA3JC9cuFhi1/U
bicQLTs3XfMR0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:38 2026 by rpki-client