Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
File: YP9t9Egm-fEGScV46sQWFnBSlCc.mft (raw, json)
Hash identifier: KEA0xYYJgmAf7DK6YDvRQzjjHvYgQW8CFTjuCh2Sg9Y=
Subject key identifier: 10:6E:42:6A:D7:76:25:01:8B:18:A3:0E:72:AB:AF:28:74:7B:6D:D1
Authority key identifier: 60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
Certificate issuer: /CN=60ff6df44826f9f10649c578eac4161670529427
Certificate serial: 019CA9B39280D80D8FE62D42EDEF97EE3A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 14:00:43 +0000
Manifest this update: Sun 01 Mar 2026 14:00:43 +0000
Manifest next update: Mon 02 Mar 2026 14:00:43 +0000
Files and hashes: 1: YP9t9Egm-fEGScV46sQWFnBSlCc.crl (hash: D4oLRP+YYnzo/bw6vpFMt/k3/9fiVf4tGiZy2yLxhdE=)
2: bi5rESVj86GmUsAdmL-jFDYQj7Q.roa (hash: OC/uMHVwkkjFxo7Q7u2D9vo2U1CM0p48Ycc2AmRTk6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:92:80:d8:0d:8f:e6:2d:42:ed:ef:97:ee:3a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ff6df44826f9f10649c578eac4161670529427
Validity
Not Before: Mar 1 14:00:43 2026 GMT
Not After : Mar 2 14:00:43 2026 GMT
Subject: CN=106e426ad77625018b18a30e72abaf28747b6dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:2e:68:d7:8f:09:28:9c:0c:71:9d:29:9f:
46:1d:bb:d6:6b:cf:89:2f:e7:67:ed:d6:11:14:ae:
8f:26:4c:3d:d9:f6:ce:b8:b2:93:cb:cd:a9:80:0e:
37:8e:ee:fe:6a:06:95:71:f5:43:8e:0b:c6:1b:6e:
cc:91:32:4d:8e:08:3a:c6:36:89:c1:1d:cb:1a:23:
23:a0:72:b2:e5:ff:e2:9f:88:2b:0b:0d:f0:ea:a7:
ef:f1:f3:cc:29:49:bd:5c:5f:ff:ab:5a:d7:66:2b:
18:4d:75:11:34:3f:a4:8a:15:bb:60:a2:84:0a:67:
1a:b3:62:77:6f:0d:d2:fc:1d:88:61:87:c0:b1:9a:
56:27:f3:be:bf:cd:41:a2:c9:f6:6c:38:74:d6:e7:
e3:25:e9:cc:67:2e:af:f3:26:94:f5:bf:38:00:93:
ea:bf:52:9f:33:7a:fa:67:58:ae:ff:f9:60:cb:0d:
c3:fc:3c:ad:13:48:c6:10:ee:d6:98:2f:b3:cf:96:
e5:67:11:06:ac:ea:f4:d6:69:57:c5:11:7d:37:45:
85:c9:5b:c0:17:d7:bd:1c:b2:0b:ba:38:ae:16:8a:
a6:63:ed:76:45:57:7c:97:7c:99:69:1f:dd:4e:21:
84:19:ba:9d:f2:90:62:3c:31:79:79:ef:f3:1f:f4:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:42:6A:D7:76:25:01:8B:18:A3:0E:72:AB:AF:28:74:7B:6D:D1
X509v3 Authority Key Identifier:
keyid:60:FF:6D:F4:48:26:F9:F1:06:49:C5:78:EA:C4:16:16:70:52:94:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YP9t9Egm-fEGScV46sQWFnBSlCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fea24b-984c-45f2-8045-9a95cf823f9b/1/YP9t9Egm-fEGScV46sQWFnBSlCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:6d:59:75:5c:5c:69:04:39:38:92:60:9c:6e:0d:c0:d6:
bb:b6:8e:af:2e:b5:bc:06:e4:31:e4:72:b4:4e:a1:ef:65:2d:
fc:7e:8f:ba:09:a9:62:69:a4:ba:db:58:8b:ec:6c:f1:8b:1b:
a9:ea:81:ff:78:e0:98:48:dc:49:4b:de:3f:3c:6d:19:c4:b9:
6b:9c:f9:6c:2e:fc:80:ab:af:38:5c:a9:d2:e3:52:51:c9:9b:
6e:76:9b:f4:e4:8a:83:b1:f2:c2:d8:56:47:8f:68:62:41:e5:
ce:d8:4e:b6:21:e9:ad:4a:4f:2e:f4:9a:c4:c6:49:a0:e0:d6:
03:fa:62:66:ba:67:4c:47:c4:8c:82:5b:99:73:48:36:29:9c:
11:84:9f:ce:79:4e:a4:df:ae:0b:df:fd:26:83:7e:7a:88:20:
8e:43:4d:34:ad:c9:f5:e5:a8:24:ba:05:00:4a:ba:27:37:26:
fb:84:4d:8e:df:df:bd:85:19:a5:97:86:04:fb:9a:67:96:d8:
5c:80:9f:45:8b:39:63:c7:0c:62:2d:f6:0f:bc:be:84:11:65:
c3:5e:46:b0:22:8d:1a:a2:c3:9c:f5:67:0e:35:e7:af:40:10:
f6:ee:11:b6:50:93:b5:f5:04:cd:90:4d:40:cc:8e:7c:3d:3a:
88:80:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:53 2026 by rpki-client