Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: xv7Y+gQ7k6jiptsYZfB7h0MgNA1ra+S/k1kwdivsjHM=
Subject key identifier: B0:7A:A3:B0:57:04:F3:FC:9E:AA:B7:A7:11:87:98:7B:08:89:2F:3E
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01A11ABE7443E7A69ED7A165AACB46DAAE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 195B
Signing time: Thu 08 Oct 2026 09:00:51 +0000
Manifest this update: Thu 08 Oct 2026 09:00:51 +0000
Manifest next update: Fri 09 Oct 2026 09:00:51 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: 9xaclHHJ8LYGiKvXl0cKY3ScsPEVDBbTR3GW88WNz/0=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:74:43:e7:a6:9e:d7:a1:65:aa:cb:46:da:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 8 09:00:51 2026 GMT
Not After : Oct 9 09:00:51 2026 GMT
Subject: CN=b07aa3b05704f3fc9eaab7a71187987b08892f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:af:a5:2e:da:fb:0d:b3:83:2c:fb:f6:66:
ca:78:64:18:9a:1e:6c:bd:fb:99:3b:19:ed:4c:25:
f8:8c:b4:e0:13:3c:5e:77:51:b6:02:b3:28:66:b8:
b5:1f:3d:e1:92:90:f7:0e:30:23:23:5a:a7:a5:f8:
0c:01:65:4b:58:55:fc:69:ec:aa:89:76:3c:82:41:
0d:ce:22:7d:6b:e9:a6:eb:f6:ae:ec:8b:c3:af:2f:
ea:98:19:60:5f:41:d2:d4:b3:16:2f:42:55:46:a7:
51:49:19:7c:64:4c:8d:ef:15:42:2f:43:40:25:d8:
7a:6a:09:aa:70:ca:2f:a8:79:7e:14:f0:be:60:e9:
9f:d1:a5:c1:0f:37:09:84:7f:ec:44:2b:f8:2c:3c:
1d:7a:11:1b:1c:95:ee:0a:c6:6a:88:de:23:26:7b:
7f:80:7b:c0:5b:2a:00:9d:b3:4e:08:91:2c:92:3e:
26:ae:25:8e:5b:f2:52:67:5e:ee:50:a5:06:b1:9e:
72:ac:ea:9b:84:81:ec:63:b1:02:e6:20:b2:91:5a:
17:b7:00:f0:3c:0f:21:2d:56:5c:5c:81:51:10:f2:
d9:c6:db:01:14:e5:4a:02:90:65:d5:2a:fa:6b:52:
68:8c:b8:04:f6:65:76:a6:03:00:9b:1a:1c:6b:cb:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:A3:B0:57:04:F3:FC:9E:AA:B7:A7:11:87:98:7B:08:89:2F:3E
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2b:76:3f:bf:ef:0e:67:b9:24:2e:9a:b3:24:44:07:d2:9c:
70:b4:6b:3a:b0:da:0b:5a:b7:36:8f:40:23:ef:2c:4c:8f:f0:
6e:d8:ba:4e:a3:df:c1:55:19:7e:be:58:b4:50:3d:ec:47:c6:
4f:34:71:e0:28:56:60:da:e4:37:09:07:58:e3:d2:51:48:c0:
7a:63:f9:da:52:c1:b5:6d:4e:a0:d0:21:65:ee:24:2d:f9:0d:
a1:90:1b:cc:3b:f7:83:48:77:27:8d:4e:68:98:f8:b7:8b:1d:
2d:70:7b:9b:0e:68:fc:00:88:5a:4e:1f:46:d3:3b:c3:dc:c4:
20:c8:db:49:3d:36:bf:2c:71:93:eb:82:70:00:59:04:54:17:
c2:74:d7:fb:7b:34:79:18:77:7c:86:e4:af:17:7c:27:08:8f:
3f:68:04:b6:06:e2:d8:8c:e2:c7:0f:8a:4c:09:f3:dd:e8:d1:
87:a3:f8:02:2f:da:b5:7a:00:4a:f8:19:9f:6d:8c:24:a6:d3:
7a:d8:32:a4:21:c8:83:b6:e6:dd:4e:27:fb:e6:f3:70:8d:5d:
d7:4a:cf:cf:b9:d3:5d:99:c0:c0:43:db:22:a9:e8:26:91:b4:
65:2b:02:e7:ee:3b:44:c8:24:5d:aa:e0:59:55:35:78:64:05:
2a:79:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:00:17 2026 by rpki-client