Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: +IMHViSIvQMD4+ynVbW05Q/VEXWOaN+PHPSamryXIio=
Subject key identifier: 0B:E0:4A:22:A4:B1:6F:3B:D5:CD:D4:4E:2E:E9:F6:55:ED:85:BF:7D
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019F94A5018931134EFC3C9BBC082CCEFA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1891
Signing time: Fri 24 Jul 2026 15:01:09 +0000
Manifest this update: Fri 24 Jul 2026 15:01:09 +0000
Manifest next update: Sat 25 Jul 2026 15:01:09 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: wa7ZMlr1FwyPrJRdwGWgQFCAitgHPPY3BC3+GMdhtug=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:01:89:31:13:4e:fc:3c:9b:bc:08:2c:ce:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jul 24 15:01:09 2026 GMT
Not After : Jul 25 15:01:09 2026 GMT
Subject: CN=0be04a22a4b16f3bd5cdd44e2ee9f655ed85bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:da:c2:19:7e:ab:cc:8a:ac:3a:6d:25:8e:
ca:42:3e:37:12:ff:72:34:92:33:66:66:80:85:c4:
a2:c6:64:6b:f3:8a:bf:ba:04:bf:e9:40:da:3d:8a:
25:62:da:38:77:95:7a:d5:41:f9:4e:24:9c:64:26:
88:83:9c:ea:29:83:2e:57:ba:b0:a5:d5:84:10:60:
e9:57:a8:57:db:76:62:24:81:2d:a2:83:85:eb:8c:
20:cc:89:1e:46:1a:89:85:1a:24:26:66:dc:7f:e9:
5f:35:53:5e:32:9f:c5:bc:c6:30:c3:d6:cc:57:a1:
62:53:25:b6:76:89:25:48:10:ac:1c:ba:cb:4e:9e:
53:4c:f6:86:64:ea:59:53:7d:42:fe:ba:79:bd:c3:
82:89:33:8d:e7:33:a9:bb:b2:35:a9:77:d6:fc:de:
1a:22:d4:3e:ac:e0:08:33:74:20:08:0a:01:16:7b:
e0:e9:31:4c:8e:d9:af:7c:de:f7:6c:45:83:f7:f9:
1e:13:26:ee:98:7b:64:b8:43:d0:c0:58:44:6d:14:
5c:ab:f2:22:19:0f:1e:35:3c:4f:33:3a:87:1c:59:
60:b2:97:10:2c:ea:8d:ad:0b:a8:43:86:fa:1a:41:
83:ca:03:e5:ee:92:6f:d5:85:fa:d1:6b:02:e8:35:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:4A:22:A4:B1:6F:3B:D5:CD:D4:4E:2E:E9:F6:55:ED:85:BF:7D
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3f:c5:05:9c:dc:d2:fb:c8:ec:17:b8:07:ea:3c:45:70:0c:
db:49:2c:29:3b:74:0d:94:83:aa:2b:f0:ad:d8:b3:6e:0c:0b:
2d:82:bd:2b:1a:d9:32:3c:64:7f:8f:b0:18:41:eb:ed:52:3c:
25:53:13:a6:66:02:11:4e:f8:06:ff:6a:fd:63:cf:74:28:8a:
f3:76:4b:f3:4d:76:54:ca:77:1d:3f:e7:8a:b3:d5:69:a6:12:
8e:f0:37:83:b5:d4:e7:32:0e:1d:67:8f:0a:30:74:ff:24:23:
1a:34:f4:6b:cc:a7:10:06:ad:12:d7:e4:5d:6e:2a:70:2f:12:
cb:4e:78:07:bb:49:9c:50:00:9d:bd:31:59:30:48:8d:07:b6:
5d:22:5e:19:6b:14:5f:36:64:0b:a1:de:43:53:ae:23:f2:16:
b3:f3:21:cf:16:d0:1f:83:d3:6f:f6:c2:7e:98:4f:6b:11:ab:
77:e1:b0:db:44:97:66:d1:65:cd:1a:a9:4a:11:c8:06:67:b0:
1e:15:14:ef:5e:10:44:0c:8b:a2:62:46:7f:ee:bc:9e:43:3d:
cb:07:a5:c9:6c:65:aa:64:ac:b9:b0:f3:fc:1d:b9:c3:c6:6f:
92:4b:0c:4c:b0:7d:ca:30:2e:fd:e7:2d:0b:2d:4e:c0:8c:f3:
df:32:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:14 2026 by rpki-client