Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: xHarOTxZEO/yQS1NW/he7sdVDr4RESrGBOoElniVsNc=
Subject key identifier: 6E:F8:C0:49:0A:95:64:76:38:03:02:2E:4E:22:76:4A:38:25:A3:F3
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019E1FED0677812AFDBF8238C7B1A80B4712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 17D0
Signing time: Wed 13 May 2026 06:01:27 +0000
Manifest this update: Wed 13 May 2026 06:01:27 +0000
Manifest next update: Thu 14 May 2026 06:01:27 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: jR/lKfkxdDc9b0jJtoDmXL/UnQqWKozufwGc1SJdb3I=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:06:77:81:2a:fd:bf:82:38:c7:b1:a8:0b:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: May 13 06:01:27 2026 GMT
Not After : May 14 06:01:27 2026 GMT
Subject: CN=6ef8c0490a9564763803022e4e22764a3825a3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:20:6c:b7:ee:f3:76:7d:96:c7:c8:d4:67:
6c:7a:23:16:5b:2e:43:60:13:92:cb:f8:7c:92:b5:
1b:e9:54:78:17:a0:4d:21:7c:23:95:8f:33:e4:b3:
3c:a3:e8:97:f5:68:d1:68:a1:90:a2:a8:bd:e2:cf:
48:3c:5e:e7:1a:81:ed:a6:c4:92:b3:32:fc:94:5c:
4a:11:c0:44:e6:9b:14:1d:1a:37:0b:5a:c6:8e:79:
39:69:ec:e3:b5:f6:e1:06:e2:c8:47:34:26:5a:b8:
6b:ca:4b:75:36:80:2d:02:6f:a1:f0:d7:a9:df:bf:
8f:38:36:73:9c:fd:b6:f8:5f:f5:e1:7e:e5:56:c4:
70:1c:fc:d2:7b:17:82:46:8f:75:76:7b:32:20:ec:
1b:5e:7e:8c:ac:f0:b7:0f:f6:2c:f5:88:85:72:8d:
75:cf:1d:89:7e:7e:04:b3:54:d1:fe:a0:fe:c4:d5:
fd:b7:9f:5b:a0:ca:19:c0:3b:0a:b1:f5:aa:da:65:
e3:c2:ad:49:01:f0:1d:5f:ec:18:f2:68:20:2f:e2:
a0:82:9f:c4:0c:f9:41:d8:33:be:c9:8c:ce:e6:3b:
5b:18:9c:dc:f1:52:3a:e6:d9:55:40:06:49:d0:94:
63:1a:72:48:4c:3a:0e:4d:c7:90:a9:03:37:b2:14:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:C0:49:0A:95:64:76:38:03:02:2E:4E:22:76:4A:38:25:A3:F3
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:0d:2c:b2:59:78:96:1e:cd:03:cb:a4:56:96:7b:21:75:
fa:41:c7:de:c8:38:80:b4:db:b6:c7:23:b9:39:ab:1d:79:3e:
dc:6c:3e:69:28:63:ee:69:97:14:1e:9a:ec:ce:0c:e9:fd:87:
fd:c5:00:38:5b:ee:95:87:72:87:aa:fa:d8:80:fb:be:fe:0c:
d4:0b:98:6c:29:27:2c:dc:d6:b2:79:57:63:a5:d1:91:42:0b:
43:2e:b9:7c:bb:a0:96:78:4a:07:c2:6f:cc:55:61:2f:be:39:
f1:c0:a3:24:a3:19:85:18:9f:88:a4:8c:b0:99:1f:ce:88:33:
eb:9b:12:23:5e:cc:c7:7c:74:3d:50:52:35:07:af:0a:46:2e:
0a:46:8a:c2:87:41:1b:7b:c4:2f:30:bb:19:73:ed:0a:95:7c:
a6:02:48:a7:60:27:79:b6:7a:3a:8c:ef:af:2a:8b:e9:3f:2b:
50:a1:bf:42:8e:71:65:61:5f:5d:85:f8:0d:49:47:f0:44:dd:
de:7c:f8:2d:36:45:81:8c:24:84:66:80:2b:62:aa:e5:f8:9d:
2c:34:b8:ff:f8:e1:63:25:a6:08:a6:d8:d0:60:28:15:03:a6:
b3:4b:e3:44:1f:93:44:16:86:45:5e:44:b2:60:71:46:30:1f:
bb:c8:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:14 2026 by rpki-client