Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: k19qpuZCiS9fVsAGcxqojlMYX9UxnWy9pZLH6Bgs5mY=
Subject key identifier: E5:C0:6F:A6:3D:A7:B2:6C:03:94:97:73:EE:99:1C:5B:CF:32:80:12
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019D2B4EBBECAA6781073EA392593E20E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0F6B
Signing time: Thu 26 Mar 2026 18:01:13 +0000
Manifest this update: Thu 26 Mar 2026 18:01:13 +0000
Manifest next update: Fri 27 Mar 2026 18:01:13 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: +kg8cqH3zOgsMdg9CqSxOJGDwICULLROXo7UXD1M2Nc=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:bb:ec:aa:67:81:07:3e:a3:92:59:3e:20:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: Mar 26 18:01:13 2026 GMT
Not After : Mar 27 18:01:13 2026 GMT
Subject: CN=e5c06fa63da7b26c03949773ee991c5bcf328012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:8c:41:5b:21:1e:ee:36:4d:01:97:6b:d3:
51:a4:0d:09:51:bf:a4:61:cb:6e:b1:08:1b:0f:76:
fd:65:9c:dc:c7:57:6e:f2:11:04:53:10:39:e1:53:
2a:52:09:d5:4b:b8:1a:0f:04:58:b9:94:38:37:43:
c1:c5:db:5d:c4:51:07:9f:b0:13:d1:30:d7:e2:5d:
a5:9c:71:40:48:89:bb:7f:ae:a6:36:cf:82:f9:f6:
06:f0:3f:91:cf:4a:b8:9b:96:79:1c:0e:4e:fd:9f:
90:6f:a2:60:3c:bf:58:61:08:d7:a5:10:d0:f5:5a:
62:17:69:64:40:25:95:4e:cb:43:08:ae:04:e7:a2:
13:d3:c1:38:65:49:a4:96:db:14:e7:d7:89:5f:eb:
81:20:38:10:9b:60:a2:f6:c7:40:80:07:1a:4e:1c:
a2:20:4c:ca:f9:35:c9:05:8d:10:01:b4:63:8d:d1:
c7:13:2b:5c:62:7f:a9:41:cf:32:22:95:ce:2f:aa:
6d:24:86:73:e5:1c:59:52:19:8d:7e:06:f4:11:56:
d5:96:36:db:a8:33:85:f5:b0:c8:1e:66:94:50:a3:
e4:60:5c:aa:49:41:c8:24:ff:7b:79:00:3f:36:4d:
15:b6:c1:db:ca:5f:b3:9f:d7:31:3c:44:84:b2:e3:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:6F:A6:3D:A7:B2:6C:03:94:97:73:EE:99:1C:5B:CF:32:80:12
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:83:ac:b6:23:84:ad:f2:d8:a3:ed:14:7b:49:da:7b:ce:
1e:30:6c:4e:17:0c:7f:20:59:4b:44:65:b8:5b:70:f0:0d:66:
e4:b1:48:0b:34:1b:c6:49:2e:a2:9f:7d:a6:05:00:3d:a8:81:
33:20:22:77:4a:13:03:a8:0d:94:b7:6a:05:ab:4b:4f:d7:1e:
cc:92:28:49:62:cb:9a:e7:d6:e0:a0:4d:61:c3:2c:2b:d1:2d:
32:b1:05:c1:cb:f5:d3:fb:1f:a4:1d:7d:ad:35:7b:ae:a4:8a:
30:a6:5b:fc:fe:d3:5e:bd:c9:f6:ba:46:77:0a:55:15:73:05:
6a:44:50:78:cd:9f:91:0a:1b:2b:09:cf:46:d8:70:72:e5:45:
0c:76:42:16:1a:1a:6d:6c:d5:88:4d:2b:0f:cd:69:32:8e:8a:
f8:be:3e:33:70:c5:11:09:b1:42:14:43:6a:2a:de:94:c8:78:
88:c1:47:57:4b:25:94:26:7f:b4:e7:9d:32:5c:43:bb:3a:6d:
cf:28:c3:ac:5c:3f:60:89:8b:4a:da:41:5c:7b:65:86:39:d5:
56:36:47:1c:eb:2b:5b:3f:f5:fb:a4:16:83:0b:62:b9:d0:97:
8f:09:6a:64:08:bc:b2:ad:fb:00:a0:4b:e2:c4:55:87:31:24:
ea:04:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:45 2026 by rpki-client