Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json)
Hash identifier: sxKvegbvCKYC0FXWYpk52jsOUOwuf9BGwMUQOJYH41s=
Subject key identifier: 09:95:88:7C:EB:9F:F5:DE:EE:3F:CD:17:05:7C:F3:13:C3:F2:86:60
Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Certificate serial: 019E1EA37DC7FECC09AE3F551D4CE765F6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
Manifest number: 0FE9
Signing time: Wed 13 May 2026 00:01:31 +0000
Manifest this update: Wed 13 May 2026 00:01:31 +0000
Manifest next update: Thu 14 May 2026 00:01:31 +0000
Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: 97ZCdalddrwUUs2rdx+GSi2FWwuA0WaH/AsG/RfgdVw=)
2: nd54JNe4vIZ_-Gecq7CuS7z9ouE.roa (hash: uDzn2UrQJ/gWE6VmVbdTq4BSTBqexLqsyHgtdAqNXeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:7d:c7:fe:cc:09:ae:3f:55:1d:4c:e7:65:f6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918
Validity
Not Before: May 13 00:01:31 2026 GMT
Not After : May 14 00:01:31 2026 GMT
Subject: CN=0995887ceb9ff5deee3fcd17057cf313c3f28660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:6e:87:86:ba:b1:c6:34:8d:62:c9:21:5b:
8e:cc:ed:c8:a6:cd:a8:72:8b:2c:1f:69:f6:c3:00:
fd:b4:2b:d9:37:f1:d2:cc:5e:b1:26:82:46:76:64:
8a:0f:c4:a9:58:29:fe:20:1f:a1:78:c9:33:bc:df:
5d:10:3d:f6:57:e6:32:2e:f1:0f:66:63:66:fd:18:
a9:f0:03:42:13:6c:31:1a:a6:22:ad:7c:e9:b0:72:
3b:68:50:c4:c0:7a:2a:24:48:cb:59:9d:f4:74:f7:
00:44:23:b1:9c:27:37:d9:e6:5a:34:25:b5:e4:04:
f4:ce:2d:07:a1:07:ff:8e:10:ed:8b:32:58:eb:18:
cb:95:9a:53:a9:34:f6:ab:a2:08:2f:d3:dc:14:86:
1b:bb:9d:3a:c0:0e:29:7c:e6:21:8c:bd:19:c0:8d:
34:61:4a:18:8c:e6:bd:a8:ec:0c:d1:79:22:c6:07:
24:a5:f2:38:0a:6a:b3:6f:87:14:44:ed:d6:74:75:
1d:96:b7:dc:44:1d:0a:52:21:61:ef:e2:8a:a0:09:
1b:31:99:f3:35:57:43:13:c2:16:4a:34:21:e8:fa:
1a:3e:05:b8:6c:07:31:f0:e5:12:fe:dc:06:98:39:
ae:1e:13:c6:9a:bb:f0:8d:a8:42:16:e1:ba:7c:af:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:88:7C:EB:9F:F5:DE:EE:3F:CD:17:05:7C:F3:13:C3:F2:86:60
X509v3 Authority Key Identifier:
keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ad:a6:1e:d1:43:83:28:99:46:32:9f:6e:66:4b:cc:aa:1e:
32:a9:67:aa:44:7b:a1:d9:e5:93:86:30:a3:47:fc:d4:43:23:
c4:19:30:54:c0:87:53:ad:82:7b:8f:c2:50:33:af:6d:f7:56:
c0:a3:9e:23:10:12:e2:26:b6:c1:fe:12:39:6b:e6:c0:76:73:
0e:41:58:bc:61:53:57:68:2a:51:43:3a:1d:24:78:f8:b1:a1:
57:d8:f7:45:43:4b:13:be:3d:60:bc:43:6f:98:49:3b:33:37:
e9:92:4f:29:42:01:ac:ac:af:13:f7:f6:dc:69:f0:f0:12:49:
6a:33:19:af:2d:62:5e:55:08:da:f1:9e:e2:21:8f:6c:66:df:
bf:85:e4:61:36:21:4d:4d:13:0a:cf:5f:f6:4e:7d:af:e4:b5:
f4:ca:43:0f:34:c2:68:ba:02:c5:58:2d:96:ae:51:bf:d7:a1:
4a:09:a2:e5:22:37:e2:56:5d:5f:75:f6:82:09:4f:01:97:de:
9a:4e:c1:bc:30:75:ee:b8:7a:1e:41:18:b9:23:3a:20:bf:71:
11:26:49:13:d1:3d:f6:86:50:6f:39:7b:75:c2:e6:24:ea:3c:
bc:e7:cf:5f:08:a3:50:15:30:be:49:56:f8:ca:52:d0:5e:d5:
72:22:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:25 2026 by rpki-client