Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json)
Hash identifier: n1WJ2nRqzu6jUNFWMplMi/0ZRpWGGbEHesfgOYfqMmU=
Subject key identifier: 97:7B:42:85:C1:E3:2F:FA:D8:A3:37:3F:84:6A:A6:EA:44:85:05:13
Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347
Certificate serial: 019CAD22BB918FE053686B8C17FA11EC313A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:01:00 +0000
Manifest this update: Mon 02 Mar 2026 06:01:00 +0000
Manifest next update: Tue 03 Mar 2026 06:01:00 +0000
Files and hashes: 1: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: lFZ9THM5esEGgfmwG7Lx+TNTzt77vCzPx+GccSWZpl8=)
2: ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa (hash: ZJNIgGVCnwwLExWWtHO1eDKLXNM052in6SsRsPrXcKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bb:91:8f:e0:53:68:6b:8c:17:fa:11:ec:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347
Validity
Not Before: Mar 2 06:01:00 2026 GMT
Not After : Mar 3 06:01:00 2026 GMT
Subject: CN=977b4285c1e32ffad8a3373f846aa6ea44850513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:9f:c7:96:38:fb:ce:ee:19:66:62:af:05:
fe:7d:20:84:5e:12:e0:cf:0f:ab:d3:94:eb:a6:74:
e4:89:5e:d5:7b:8f:97:5e:40:e8:24:11:99:ff:51:
4d:d1:7f:17:53:43:de:e3:97:a1:6e:f4:b4:7e:c6:
9a:bb:1a:fd:fa:92:08:19:1b:6d:52:ea:1b:30:d3:
5e:d7:4d:aa:88:61:08:d3:ea:70:e1:8d:99:40:e9:
19:a0:31:8d:9d:77:a4:5d:df:f7:cb:33:da:85:3f:
10:5e:74:c3:08:94:63:27:3f:76:f2:de:5a:85:84:
11:9c:1f:1b:69:61:e6:b2:b1:e0:ac:b6:9e:8e:37:
da:72:7a:75:54:fe:59:2e:34:6d:32:2b:69:0d:30:
5b:ab:99:20:e9:52:75:c2:2b:73:fb:06:9e:e7:64:
6c:c9:d3:a4:ca:46:35:57:f6:3f:88:c9:2e:63:cf:
d2:ef:34:c6:3a:cc:42:a6:8d:26:c7:10:5f:26:37:
6b:63:26:9d:0c:f6:48:da:62:59:8d:70:ba:ad:18:
90:fa:ff:2c:4e:12:7d:57:80:2a:f3:60:11:dc:0f:
14:79:5d:9b:c4:d0:f6:b8:a6:5e:95:66:cf:72:bf:
c2:37:32:b4:4b:4f:f8:65:ce:56:b1:69:7f:1b:5a:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:42:85:C1:E3:2F:FA:D8:A3:37:3F:84:6A:A6:EA:44:85:05:13
X509v3 Authority Key Identifier:
keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:85:e6:0c:37:54:f8:29:be:b2:44:4e:ef:85:4d:e9:80:77:
f9:a1:2c:c4:aa:aa:f8:72:f9:29:df:3d:0e:3b:41:6e:fd:23:
19:c6:80:dc:d2:61:8f:42:dd:4b:6d:1d:fc:94:b1:80:a0:ef:
ba:fb:2c:eb:6d:10:1c:1e:81:d6:bb:e8:09:f5:45:24:fc:f4:
f8:d3:55:ea:51:7e:34:46:ce:72:65:de:3e:25:d7:b3:77:34:
f5:6e:8a:d8:54:5a:35:6f:e7:04:62:be:de:f8:57:9d:30:7c:
f0:92:25:26:01:8c:48:c5:b8:ad:8c:d3:a9:5e:bb:75:5d:1e:
94:06:30:f4:88:75:92:7d:22:f3:f4:48:b2:69:b3:7a:44:ea:
7d:bf:58:9b:d2:ba:15:d9:25:8e:f6:18:ab:94:ca:a4:5a:86:
f3:fa:f2:b0:4d:e4:a2:87:4b:53:0b:08:9a:e6:ff:af:18:e4:
fc:93:d1:be:2b:95:66:b6:34:cc:38:36:0d:9e:68:a6:52:90:
18:94:cb:5c:b8:53:36:00:65:96:ba:8f:33:5a:b8:e5:7a:5d:
65:58:45:8c:d6:df:54:e6:b4:7f:d8:20:40:c7:29:62:15:f2:
fd:c3:d1:5f:5c:5f:f0:c3:df:47:dc:da:2e:69:31:a8:9c:45:
4b:98:d4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:43 2026 by rpki-client