Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: PD+x4LM3PHjtFJpZY+Sx4yZzE8Toz3UNnsAg4uuPcbs=
Subject key identifier: 8E:C6:DF:FA:27:87:4F:47:CD:74:15:26:7D:EB:D6:8E:32:7B:C2:6E
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019E1F47A618A03633ADC3D95F2880B1F2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 03:00:49 +0000
Manifest this update: Wed 13 May 2026 03:00:49 +0000
Manifest next update: Thu 14 May 2026 03:00:49 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: 9D/+SrtTOivC6amcgyxe2MDCscZSlOUleDGa3F/XGEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a6:18:a0:36:33:ad:c3:d9:5f:28:80:b1:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: May 13 03:00:49 2026 GMT
Not After : May 14 03:00:49 2026 GMT
Subject: CN=8ec6dffa27874f47cd7415267debd68e327bc26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:6e:b5:ff:0d:8e:0f:8c:9e:25:f1:aa:33:
8b:2e:a2:8b:b5:da:b2:74:d7:e3:88:c6:32:d6:ea:
d0:7d:1b:e7:ce:c3:a9:3d:26:e0:ea:92:c3:51:3c:
87:5e:00:61:48:0b:9d:67:ae:89:9c:46:92:8e:09:
d7:a7:32:95:0e:61:91:8c:bf:ef:11:8c:87:72:89:
23:45:b0:f7:27:ec:0f:d4:c2:be:e1:a5:38:7f:33:
ab:77:7c:df:cd:b9:52:62:f6:01:ac:e8:0c:3d:d7:
e5:2b:22:16:67:51:e7:c1:3f:5a:aa:c9:b5:31:a1:
55:d9:54:3a:4c:66:f3:94:14:35:b7:8a:8a:1e:10:
af:b6:4c:52:ce:3a:09:79:64:7c:64:8e:e7:42:f0:
19:97:bb:5b:26:ad:a8:d5:58:0c:78:e2:8d:8a:72:
ab:cd:e5:8b:c5:18:54:9c:63:07:62:de:57:15:27:
fa:d1:76:6a:e5:75:2a:01:20:38:21:f4:39:19:87:
12:2d:c2:06:75:17:36:0a:88:61:6c:1f:22:08:2a:
dd:9c:20:2e:88:7e:cc:c3:1b:a7:ae:d5:d4:04:0e:
54:f4:f6:bf:ff:c2:0b:44:82:21:62:83:0b:7a:65:
99:28:f0:a8:e9:73:ea:d3:9a:48:d1:aa:97:9d:79:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:DF:FA:27:87:4F:47:CD:74:15:26:7D:EB:D6:8E:32:7B:C2:6E
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:05:8c:99:60:4f:66:d8:3e:44:c5:82:61:bc:da:cb:6b:
db:1d:b7:73:36:0b:2c:af:62:4c:37:31:8d:b1:c0:0b:5f:8c:
4e:fd:df:aa:cc:6b:1c:65:ed:b0:35:c8:80:91:e1:c0:0b:1b:
1b:99:fe:81:bf:05:28:e1:55:b6:95:a9:37:61:b0:d4:68:98:
8c:38:3a:6b:84:13:c3:1f:5c:6d:5d:82:67:96:e0:4c:07:10:
32:2c:e0:13:b4:11:fb:56:e0:38:a8:d0:2a:cd:36:9c:8c:c9:
1e:d5:86:96:d1:41:13:b8:7b:03:10:c9:e7:29:1b:d4:4e:8b:
e1:97:c7:a3:5b:8b:51:a3:70:a4:0c:c6:be:77:63:bc:cd:89:
30:8b:9f:24:a7:83:2a:2e:ff:f8:7e:3c:a9:91:d1:2d:a7:21:
9d:8f:e7:c2:be:e7:0c:eb:e8:2c:aa:75:12:56:32:b3:b2:a6:
39:cf:3b:47:18:14:3c:ad:07:fb:3e:c0:6b:a7:49:44:48:bc:
0d:85:e2:6c:7e:74:af:ad:49:b4:d2:d2:23:d7:51:73:38:0d:
53:dd:61:27:db:b6:d0:f4:10:0d:5b:1e:57:19:5d:cd:42:f6:
86:e1:04:6e:91:dd:3c:95:f3:6c:aa:57:71:47:91:6d:e9:74:
89:e5:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:05 2026 by rpki-client