Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: ZIilXx1Ymz8f+ydps0zsd7HvQvntyVR9YudYSF4akcw=
Subject key identifier: F3:71:32:40:B7:69:44:24:D6:96:7C:1F:2F:AE:5F:6A:AA:51:8F:86
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 019FAA874D0CD727AF7B62D239D6F4817975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:21 +0000
Manifest this update: Tue 28 Jul 2026 21:00:21 +0000
Manifest next update: Wed 29 Jul 2026 21:00:21 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: Z+9gPGSDQpjo3ap7l352YEvV0CeQv3dW4U0kCG0yPKo=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:4d:0c:d7:27:af:7b:62:d2:39:d6:f4:81:79:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Jul 28 21:00:21 2026 GMT
Not After : Jul 29 21:00:21 2026 GMT
Subject: CN=f3713240b7694424d6967c1f2fae5f6aaa518f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:cc:52:5c:97:ce:f1:76:ac:5a:03:af:66:
49:a1:8e:c4:a8:13:d3:28:4f:e6:e2:f5:72:c5:a5:
87:9b:bf:b2:f1:b4:e8:18:0c:6c:7d:bf:a3:d9:f7:
9b:14:60:88:3b:cd:52:5b:19:9c:22:09:8e:64:5b:
10:f7:31:bd:cf:a9:cc:1c:6f:08:72:07:3f:50:07:
c8:52:11:0d:fd:47:cd:07:7d:4b:75:28:60:cb:09:
cb:d4:a0:e5:ca:f3:29:35:67:1a:3f:c4:4f:06:21:
53:58:d6:56:fe:16:ff:8c:ef:ad:77:3d:fb:48:5e:
91:65:d2:01:71:6f:ab:a5:86:94:99:e7:9f:a0:04:
cf:e2:7e:82:9c:23:a8:71:28:b1:e7:d8:29:9d:c7:
8a:6c:81:58:be:28:df:e2:f3:1d:13:71:41:f3:bd:
9a:b1:1a:32:0c:65:b7:93:6d:2a:95:79:b0:51:d2:
9c:4e:d3:53:ae:cc:8b:4f:e9:1e:54:1d:30:30:a4:
f3:dc:ce:37:43:79:00:9d:38:1b:79:79:a8:35:a6:
3c:89:4e:2e:fd:95:dd:0a:da:a0:64:55:e4:87:d4:
a1:c9:45:09:b7:c9:e7:13:75:71:8f:91:4e:f7:1d:
4f:48:0f:46:4b:75:51:e7:24:ce:d2:70:84:a8:50:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:32:40:B7:69:44:24:D6:96:7C:1F:2F:AE:5F:6A:AA:51:8F:86
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:78:69:94:1e:f3:5c:3a:09:9a:43:f7:db:63:b8:e7:ae:e6:
38:56:b6:04:94:ff:fb:56:b3:fb:6b:ab:43:cd:bb:1f:91:33:
26:cc:55:f8:d2:54:b7:51:62:ff:67:8f:56:1c:3b:0b:7e:00:
dd:da:b9:c4:6b:d3:60:ec:fd:e6:eb:4e:35:1e:88:8a:ab:aa:
08:b0:16:64:72:ed:bb:57:24:78:69:4d:40:51:11:51:5a:32:
8d:9b:be:84:23:0d:e3:3a:40:33:6d:bc:42:ac:09:2b:c1:97:
c9:57:39:8c:60:0e:a6:1d:51:1c:15:44:b7:6e:ef:92:ee:d3:
c0:18:ca:81:3a:11:39:2a:0b:88:db:8d:b4:bf:f7:17:03:f1:
5a:84:ba:f9:84:6e:e6:89:37:03:23:f5:e8:6a:2a:d5:94:a2:
4f:f2:0b:a5:84:97:67:06:60:b3:ed:db:b7:a6:61:c8:6f:60:
bb:b2:6a:a7:f2:05:36:df:98:58:93:c3:32:6e:c3:5b:29:42:
84:f9:00:9b:7a:62:0a:df:af:ab:c9:94:0a:b5:6a:19:d7:8a:
aa:49:f3:f9:6e:ec:06:40:3e:27:f4:42:58:9b:44:c5:2a:25:
73:fc:bf:23:54:f9:58:a5:16:c3:44:ff:45:5e:4c:85:7c:c1:
27:6f:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:59 2026 by rpki-client