Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: B9Y2GhDhsxTOugnbf9IriKLfFpu31Aherl9bC4CfdiA=
Subject key identifier: 68:F0:B3:88:A3:0A:1E:57:67:A5:B1:EA:2D:C7:FD:EB:AD:FA:BB:BC
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019D9AAC12945AF0B9F9CCA55744D9B3806D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: rgVl2mK3xx8NMge14z8cvfTWtl/J25gw1XOaaIqyBB8=)
2: ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa (hash: ZJNIgGVCnwwLExWWtHO1eDKLXNM052in6SsRsPrXcKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:12:94:5a:f0:b9:f9:cc:a5:57:44:d9:b3:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=68f0b388a30a1e5767a5b1ea2dc7fdebadfabbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:4a:8d:9b:2d:d0:50:2e:fb:5c:96:17:61:
f7:08:14:10:48:dd:e8:c2:ee:ff:be:5f:49:9d:40:
4f:96:6d:23:26:2d:5c:77:be:b6:48:f9:2b:f9:c8:
b3:3e:8c:02:d3:25:25:a7:d1:59:98:f5:94:b7:fd:
7d:0d:9f:31:b9:58:2e:33:f0:2c:0a:7c:a1:38:cf:
7b:b0:14:df:54:e0:18:89:fa:e8:cd:f6:f0:87:33:
db:12:6d:33:bd:c8:d0:56:ec:ab:68:0f:c5:11:59:
f5:73:4b:0c:09:f0:2c:78:98:0f:7a:a5:dc:7f:d6:
a1:11:b0:f1:b0:21:1c:c7:97:bf:fe:8f:30:ed:82:
04:a1:78:26:21:6a:87:ee:37:5e:92:51:06:4c:82:
57:40:db:09:4a:59:33:f6:93:b1:0d:62:6b:98:c6:
6d:c3:37:28:26:cc:dc:87:23:44:24:7c:4c:8d:ff:
4e:b4:47:05:bd:80:5a:a3:b3:3d:14:b0:3b:7a:1f:
d7:77:dc:bf:b2:8c:72:05:2a:bc:3f:d5:0d:59:bd:
60:c6:80:17:ef:32:53:37:81:8a:a5:a8:18:08:5a:
97:d6:9e:67:2c:74:c7:cc:b2:22:29:89:14:30:16:
66:c9:57:4d:78:58:9d:9d:49:09:4d:af:72:01:68:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:B3:88:A3:0A:1E:57:67:A5:B1:EA:2D:C7:FD:EB:AD:FA:BB:BC
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c7:75:2d:02:0b:d1:00:4c:58:90:1d:6c:4c:9f:b5:44:af:
91:f8:cc:77:de:47:cb:22:1f:fa:16:3a:dc:97:d6:40:53:54:
4e:ad:97:d6:22:2a:0e:15:e5:13:c9:77:fe:54:34:c3:9e:df:
f3:2d:aa:31:02:e0:5b:c3:16:82:86:59:dd:f3:8e:84:e0:7b:
9d:3e:91:4a:11:6d:91:94:6c:fb:0d:47:3b:83:ab:03:8e:3c:
3f:c1:54:ad:38:0c:0b:9e:c6:8b:f9:fe:c5:97:fe:41:72:5a:
d1:2d:05:9f:65:20:40:fc:d5:b7:99:00:6f:36:ba:77:0a:f8:
e8:2f:ab:33:2c:e1:13:b0:90:8b:33:f2:25:a1:4d:be:f0:16:
1c:69:fe:92:f5:9c:78:43:b2:c9:75:2e:85:e2:14:ca:c6:6d:
5b:c3:9a:8a:b7:a5:f1:7c:26:95:04:28:4f:b7:fd:f0:5a:4f:
1c:c5:88:31:0a:05:cc:45:10:ee:de:42:9b:7c:43:57:1b:d5:
5d:cc:77:9b:8a:e7:7e:90:fd:e5:e9:2f:9a:84:71:5d:da:04:
a4:86:b9:aa:cc:44:a5:92:4e:1e:1a:7a:60:54:e5:c1:d8:5a:
97:ad:1d:88:95:3f:dd:2b:bf:3f:95:18:df:e1:be:b7:db:e3:
ed:65:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:39 2026 by rpki-client