Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
File: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft (raw, json)
Hash identifier: 60x9A32dOeK0/mwCXf0CO8RZ8CQFQql63S7Nw0mcBSE=
Subject key identifier: 9E:D9:02:FA:2D:5B:3B:0C:5C:7F:53:27:F4:77:66:0A:C4:DD:74:10
Authority key identifier: 60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
Certificate issuer: /CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Certificate serial: 01A0C858857D9FE30BC725380EF120D02449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:39 +0000
Manifest this update: Tue 22 Sep 2026 09:00:39 +0000
Manifest next update: Wed 23 Sep 2026 09:00:39 +0000
Files and hashes: 1: YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl (hash: HtOrmevMGP4Hk/P4vPO9C3ApZnS6bNGRX9VdVMfayJo=)
2: pY_d7PzwdRe72ZyovRiTQ9CbMek.roa (hash: dWr/sITxm0AHnhOTJrq2J0aNpXU23Yk2N4BfNOwSEYY=)
3: uM425HRBWPQgpIadvih0BG-Jq_g.roa (hash: N4QS9r/DiPyDlYKJHR7079x4K8bfY51fdeLkoW5YFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:85:7d:9f:e3:0b:c7:25:38:0e:f1:20:d0:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c5b4165db2d6d6c1e18e395f09f3287407242c
Validity
Not Before: Sep 22 09:00:39 2026 GMT
Not After : Sep 23 09:00:39 2026 GMT
Subject: CN=9ed902fa2d5b3b0c5c7f5327f477660ac4dd7410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:7e:c2:bb:ec:c9:4e:45:53:f1:16:7a:5d:
bc:e7:f7:d4:88:82:27:6e:e9:96:81:82:4c:f9:bd:
a6:48:ed:1d:ca:b1:ff:64:2c:ee:dd:48:c1:21:a8:
e7:d4:d4:5c:dc:56:01:7a:8b:51:a3:81:86:9f:f8:
c6:af:6f:a5:13:3d:06:3e:8f:fc:8e:18:bf:05:49:
ba:59:ba:3b:ec:34:32:eb:98:62:05:8b:6a:e9:65:
20:a1:b1:7d:16:42:00:b4:25:14:a2:a7:af:d7:65:
e3:90:6d:80:53:2a:ce:da:9b:15:a1:c3:36:24:e4:
fc:87:21:39:32:a4:1e:1f:09:a8:6c:01:59:b8:3a:
21:f7:16:f6:02:eb:95:e9:92:42:91:9b:26:68:76:
87:c6:54:ca:0e:e4:5e:4e:3c:e9:a2:a6:14:d0:19:
9f:09:fc:8a:c9:82:5b:09:7e:42:86:64:27:55:04:
c7:3d:8a:c9:cd:58:da:e1:11:20:e6:ea:fa:70:84:
c6:c3:01:b6:ef:e2:f6:fb:54:42:2f:ca:4f:fa:dd:
eb:d7:bc:62:27:3c:b4:45:2c:e1:94:fa:64:67:f5:
ec:84:84:8f:c3:b2:d5:e1:43:6b:96:18:e8:93:6b:
b6:4f:7d:d2:3f:be:07:ee:64:d1:27:7d:27:15:31:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:02:FA:2D:5B:3B:0C:5C:7F:53:27:F4:77:66:0A:C4:DD:74:10
X509v3 Authority Key Identifier:
keyid:60:C5:B4:16:5D:B2:D6:D6:C1:E1:8E:39:5F:09:F3:28:74:07:24:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/YMW0Fl2y1tbB4Y45XwnzKHQHJCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:08:eb:e7:89:5e:77:da:3e:dc:79:fb:6a:cc:14:f6:4b:bd:
b2:e1:1b:81:47:c6:87:0c:76:f5:f2:6d:9c:d0:70:6a:65:7e:
c6:ed:0c:1b:c4:ff:6d:fc:f5:fd:cc:a2:fb:22:be:dc:03:2e:
ed:35:17:e7:42:21:0c:61:c8:1f:61:53:37:79:1a:fc:71:f5:
82:43:b9:01:b8:ef:8a:7a:4d:72:d9:dd:a8:2b:df:ef:1c:ea:
4e:5b:39:8a:68:ab:ec:8e:4e:25:a4:d2:c9:f3:c6:30:f0:f0:
d0:f6:e9:0d:35:c5:e8:74:e2:fa:f9:9a:71:cd:88:1d:de:87:
fe:42:14:03:32:0a:f0:02:09:a4:42:26:e0:b0:35:b4:4c:65:
8e:97:d3:00:7a:c6:1f:22:30:51:05:92:13:16:8f:21:ad:56:
e4:92:8f:4b:f4:a8:b5:7b:53:c0:7a:10:98:70:77:8b:ff:c8:
6c:85:e7:a2:4b:7b:46:27:37:0d:3f:33:a6:71:ce:0c:5d:29:
d8:3b:cc:a4:ea:5c:12:a2:1d:65:b3:11:d7:96:eb:e5:37:47:
03:b6:41:9f:23:39:95:67:ff:3d:42:a4:a3:e2:14:a0:57:5a:
c2:d5:76:43:9b:2c:b9:97:b8:84:b2:de:25:0b:b0:a6:f4:7b:
dc:40:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:14 2026 by rpki-client