Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: iKTHPKfEJhU+ZwpySZQRRDS2mUVbJTbpvTuLpKSJCsg=
Subject key identifier: AC:18:59:A2:9A:26:45:5F:DA:1A:C3:3F:FC:B1:5D:0F:B3:F6:7C:A5
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 01A0D7CD06C93FDDB5ABC489879D9187AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:12 +0000
Manifest this update: Fri 25 Sep 2026 09:02:12 +0000
Manifest next update: Sat 26 Sep 2026 09:02:12 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: /MZsyRqkfq5gS+aDOdCtJAJWrB89bWdzd5a0pID+RJ0=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:06:c9:3f:dd:b5:ab:c4:89:87:9d:91:87:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Sep 25 09:02:12 2026 GMT
Not After : Sep 26 09:02:12 2026 GMT
Subject: CN=ac1859a29a26455fda1ac33ffcb15d0fb3f67ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:8f:ae:cb:89:45:b7:23:ea:1b:0b:46:4f:
00:b7:2a:f1:e5:81:ed:10:37:2e:f5:d3:57:76:83:
8f:74:8b:3c:3e:d3:f9:76:0a:2a:14:d4:21:d4:d5:
ba:b8:5f:f9:24:27:e1:3c:44:57:47:42:b2:1d:99:
c1:74:28:99:48:42:2e:ff:7d:fd:8e:6e:e5:68:aa:
08:88:89:21:ec:e7:56:f5:16:01:be:de:7e:17:81:
93:1e:22:2f:b3:d1:dc:ff:71:ce:68:f2:21:31:27:
00:f1:16:7b:05:cc:26:51:71:51:a5:ce:97:69:e2:
37:bd:af:4d:f6:73:2b:ed:03:09:86:b5:74:58:ee:
92:c4:5a:2e:cd:35:bb:cc:f9:d9:da:55:7e:4a:36:
88:23:64:f4:97:7d:b5:b1:1d:fe:24:af:b2:7e:a9:
de:24:18:98:92:d4:98:51:9d:52:43:ae:f4:5b:71:
b7:9f:1f:07:33:bb:9e:d6:09:4e:ed:51:ba:e8:bd:
7e:bb:f0:ad:39:5f:56:c5:2e:d8:75:86:b0:db:0f:
93:d0:ca:51:80:99:08:d8:db:66:3f:bc:30:74:ae:
89:a3:e8:bf:11:b4:bb:ae:bb:54:de:e2:6d:b5:e9:
a8:f9:b6:26:bf:95:84:4c:ba:c5:37:0d:e9:34:d1:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:59:A2:9A:26:45:5F:DA:1A:C3:3F:FC:B1:5D:0F:B3:F6:7C:A5
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:fc:aa:ed:a7:ea:c2:fc:6e:01:74:f9:5d:94:39:fd:7c:
2b:20:2b:bd:9e:89:98:db:62:78:1e:66:7e:41:e8:bf:c6:03:
e4:29:36:63:aa:e8:2e:d5:ba:d2:45:bb:73:ec:2c:72:89:95:
c5:77:aa:5a:77:96:71:72:6d:94:97:50:11:ff:3b:20:40:1e:
1f:80:0e:66:a5:3f:89:48:02:85:3a:64:21:86:29:1f:9b:24:
63:e5:54:1c:2c:44:7e:fc:ab:4f:1a:92:6e:35:6a:9b:03:18:
28:05:be:e3:e2:8f:f3:dc:47:26:51:00:dc:78:51:20:fa:e5:
2f:81:dd:2e:af:b1:b9:d7:29:9f:95:a7:70:3b:cd:37:ce:3c:
56:25:df:6a:a3:34:14:fd:77:c5:c9:15:32:93:31:56:f4:f8:
c5:7e:15:d0:40:dd:15:d4:6d:7a:5f:18:65:e8:65:cc:71:51:
a4:6f:bb:eb:7b:d1:5b:19:57:c4:b0:e2:5c:4e:c8:10:13:99:
86:cd:e4:0b:31:29:4c:7f:ad:67:96:64:bd:a9:00:3d:a2:94:
6b:ab:1e:b6:28:37:c0:84:07:9d:ec:2b:94:e2:ed:cd:97:7b:
c1:1e:30:b2:f2:fc:35:69:48:79:22:d4:d8:d4:58:74:2f:9b:
35:af:25:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:09:45 2026 by rpki-client