Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: zncylZB84rI8NsP7UBhFkmUV+qr+kxECkN4CpV+cQo0=
Subject key identifier: 04:42:80:D9:04:0A:34:4F:A5:FA:D3:E0:0E:76:EC:DD:37:4B:67:54
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01A12089A986470A49A9CB583165A8D8259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 195E
Signing time: Fri 09 Oct 2026 12:00:54 +0000
Manifest this update: Fri 09 Oct 2026 12:00:54 +0000
Manifest next update: Sat 10 Oct 2026 12:00:54 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: OCXeM4tMy9EaCjeEh3vS3oaOZbCWhPuxNfyCD0I29Xs=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:a9:86:47:0a:49:a9:cb:58:31:65:a8:d8:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 9 12:00:54 2026 GMT
Not After : Oct 10 12:00:54 2026 GMT
Subject: CN=044280d9040a344fa5fad3e00e76ecdd374b6754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:27:84:e3:1a:92:2b:10:19:0c:87:63:a4:
92:31:9c:60:42:b7:61:cc:f3:40:a6:14:24:49:d7:
0b:d7:80:99:c2:81:fe:48:d6:8b:f1:bf:c3:6c:02:
ce:50:72:0a:1c:ab:a4:ed:36:27:3b:64:5e:b0:7e:
ed:a0:f5:36:04:60:61:1d:02:be:23:01:d9:72:1b:
ec:65:97:82:90:6b:aa:4a:6f:d9:3c:19:89:ff:53:
1e:00:6d:37:f4:33:3b:a3:49:41:72:34:41:f9:10:
48:e1:12:64:70:04:35:eb:9f:70:d8:f5:f0:37:d4:
40:51:b6:8a:97:85:85:2b:74:a3:7d:8f:52:20:4e:
93:a9:e0:10:cc:68:63:6e:3f:41:8a:00:5d:f0:2c:
e3:b7:01:81:02:79:f7:0a:2a:21:3e:54:78:8b:1a:
1c:11:84:22:c6:88:a2:b4:52:54:ff:49:43:65:4a:
c8:90:a0:43:85:d1:3b:a8:14:90:8c:7c:91:2e:1c:
c3:69:27:86:bd:8b:56:46:8b:d6:f2:42:ae:e1:b7:
32:a4:47:ea:b8:f8:e4:38:26:b1:65:3e:30:c1:20:
dc:d8:f7:f1:82:79:8c:98:db:83:b0:fe:95:77:bb:
c7:a1:75:95:22:61:11:6b:2f:73:33:f5:a5:a8:d2:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:80:D9:04:0A:34:4F:A5:FA:D3:E0:0E:76:EC:DD:37:4B:67:54
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:04:de:0a:aa:94:f8:57:64:33:3d:42:d7:0d:29:c1:41:44:
4a:59:21:22:2c:c3:1f:f1:4f:3e:16:0f:82:5a:63:78:50:73:
fa:82:0b:ac:33:40:9b:f7:45:5d:cf:41:a6:0c:4f:c9:31:88:
fb:91:83:35:fc:c3:cf:01:33:b7:0e:56:1e:2d:7b:ee:9e:e1:
1b:67:35:d6:ee:86:1f:de:02:97:63:57:47:e8:2c:a9:e0:c4:
de:21:d6:29:5e:43:df:a6:97:5c:43:94:3e:ec:4f:fc:cd:c4:
da:09:23:c5:ed:b0:3a:85:b4:cf:76:0e:76:a6:a3:f8:62:0a:
62:c9:6c:9b:d8:f9:a2:ee:5f:c8:58:b6:f6:cd:bc:f9:28:00:
c3:11:ff:65:12:39:7b:a0:a7:3c:01:9b:90:e3:4a:37:ef:88:
26:4c:65:84:a7:cc:47:e2:de:e9:8c:40:23:e5:e3:ad:58:97:
dc:d2:7d:c6:0e:c2:d6:dc:82:d0:6b:ef:33:31:dd:11:17:24:
40:fa:85:4b:2e:52:5b:27:e3:52:38:99:d3:25:d7:18:8a:85:
28:ed:99:fd:98:85:90:66:a3:ce:26:eb:e5:3b:44:3a:36:9e:
c6:b3:99:27:95:3c:bf:7d:29:5b:14:b1:56:3e:ec:c2:b1:3d:
b8:e8:6d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:57:13 2026 by rpki-client