Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
File: YPIcIT_AacghVf6hfpt_uC_mt_I.mft (raw, json)
Hash identifier: j61bGTB3r1txEPuqoJlnSrKSZSq91MobBoVyS3TwiXk=
Subject key identifier: EF:20:C5:98:88:96:E9:2F:C7:0E:D1:B9:4A:F3:7B:2D:38:D4:77:90
Authority key identifier: 60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
Certificate issuer: /CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Certificate serial: 01A0D1C940BB216F6745F8A7CF9AC0B6BDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
Manifest number: 1C
Signing time: Thu 24 Sep 2026 05:00:22 +0000
Manifest this update: Thu 24 Sep 2026 05:00:22 +0000
Manifest next update: Fri 25 Sep 2026 05:00:22 +0000
Files and hashes: 1: 7LP6-tZNO4kMwCuy2a7JWKqiVis.roa (hash: ZvkpzsSCehm9n4InEtK3zFBlt2EwWn0SgZ3MtWI4ctg=)
2: LcdFlwsZeNlKQxWtomWGugF5Uls.roa (hash: LmbSWI4WnALmhzvVgu3HrJG4mLahAfFT/2QpHuJ+AzQ=)
3: YPIcIT_AacghVf6hfpt_uC_mt_I.crl (hash: 353TrKeD2J5Ssfb6+HIyF2kw2vJW3Zb90rOmZI7krOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:40:bb:21:6f:67:45:f8:a7:cf:9a:c0:b6:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Validity
Not Before: Sep 24 05:00:22 2026 GMT
Not After : Sep 25 05:00:22 2026 GMT
Subject: CN=ef20c5988896e92fc70ed1b94af37b2d38d47790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:05:bc:c8:0f:cf:00:73:7d:da:44:85:ec:
20:36:3c:a1:17:92:9f:f6:e8:d2:a8:d1:1d:6a:ae:
09:5e:70:27:42:33:dd:83:29:25:29:63:00:e4:1f:
0a:ff:55:1a:d2:02:6f:cf:e5:60:52:c1:69:c8:eb:
04:3f:22:32:5c:27:1f:b3:fb:2c:95:d4:10:b5:b9:
4f:90:bd:75:13:11:fc:bd:6e:1e:d4:1b:45:e4:d1:
f0:06:b3:62:d6:dd:86:dd:31:78:fd:e4:82:54:f2:
0f:f7:f2:c6:d2:e8:ef:2d:2d:08:0a:ef:49:f4:76:
e7:df:fd:9b:4d:e4:82:28:de:31:8f:24:62:e7:5d:
16:a9:82:3c:63:0c:af:06:35:4c:05:95:96:18:19:
90:c7:f9:90:79:51:43:d8:d1:89:ab:72:a3:04:75:
5a:d4:d8:ec:3d:36:67:7e:48:14:e5:77:c0:2f:8a:
f8:a2:eb:a7:66:81:b4:fa:52:e5:13:4d:7f:03:bb:
90:95:20:d3:f7:9d:cf:9f:13:63:67:de:a9:58:7d:
31:e0:62:56:0a:ed:b4:9c:b1:f9:ab:7d:47:34:7a:
ae:c2:dd:a3:2f:40:83:2f:0e:9f:ac:44:57:32:34:
b2:ed:aa:7a:e8:6f:57:45:54:68:51:6d:ae:6d:a1:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:C5:98:88:96:E9:2F:C7:0E:D1:B9:4A:F3:7B:2D:38:D4:77:90
X509v3 Authority Key Identifier:
keyid:60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9c:6a:f8:f6:de:21:97:ce:15:80:5f:3d:c9:39:b1:b1:12:
0c:c4:a2:e5:f6:1e:ae:bc:0b:eb:af:e2:dc:93:4e:48:7f:c4:
d5:68:a2:d2:4c:09:ea:16:65:5c:e5:a9:ec:a4:a0:18:02:53:
ef:6c:4a:98:9b:99:e4:2f:bf:b8:84:74:86:b9:ae:f8:90:64:
b8:76:90:fe:a7:5b:a9:83:52:c1:f6:44:b2:56:3a:2c:a4:c3:
39:7c:53:bf:87:15:37:43:fe:9a:ae:1f:86:0e:e8:e5:57:96:
b0:71:4c:db:59:56:f4:99:a2:91:38:d3:48:4a:2c:c4:23:1a:
7d:62:13:02:55:91:c8:90:24:f3:4f:1f:da:dc:37:99:9e:95:
18:aa:7a:bd:20:14:06:b1:00:93:09:5a:2d:f4:61:33:95:f9:
ea:8f:a1:86:f7:80:ed:19:ad:a9:c2:d8:09:09:e3:25:53:4a:
0e:c8:a8:58:2f:d1:19:ed:17:be:8f:51:be:13:61:3b:c9:fa:
ab:cd:fe:a6:e8:65:a3:4c:10:3a:d8:69:94:75:6a:f3:17:ed:
2b:b8:67:fe:c1:34:66:19:d6:72:1b:b6:5c:f8:ae:5d:46:2a:
e5:3c:24:12:2a:8c:ea:1f:c9:c4:2b:08:9d:db:76:00:33:b0:
c6:6b:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:51:18 2026 by rpki-client