Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
File: YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft (raw, json)
Hash identifier: +Nw9yo/aa9hHV50llzgLclMw91MQadLSKKp2kVfFnZQ=
Subject key identifier: 23:F3:B9:B3:56:4F:12:D0:E0:27:EC:DB:3B:5D:12:9A:51:7D:DF:59
Authority key identifier: 60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
Certificate issuer: /CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Certificate serial: 01A0BFC39C9C3B5ED5EDE89CA69483916EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
Manifest number: 2D
Signing time: Sun 20 Sep 2026 17:01:02 +0000
Manifest this update: Sun 20 Sep 2026 17:01:02 +0000
Manifest next update: Mon 21 Sep 2026 17:01:02 +0000
Files and hashes: 1: E377BWFU_iYqJQRaGStzTkAsIbc.roa (hash: tEW4n1/PakwVAb0h6uHid2prB9osIDP3X5FxFvVoVwA=)
2: YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl (hash: 3v7Bo+v8dsoAp07M0adCcDJr5r6v4fJHLHeK71g27Uc=)
3: njg9EqOhkHu-L5eiZG0qVa5pSv8.roa (hash: 1i/TQ/0uRsCA98v0Vysg7x0M+3yW0pSzaYM44CZBDAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:9c:9c:3b:5e:d5:ed:e8:9c:a6:94:83:91:6e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ce22c7f650495eb5122010ed36f6d264bf47e6
Validity
Not Before: Sep 20 17:01:02 2026 GMT
Not After : Sep 21 17:01:02 2026 GMT
Subject: CN=23f3b9b3564f12d0e027ecdb3b5d129a517ddf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:a1:22:7c:cf:e4:07:37:cf:2f:2e:b6:a8:
4c:ca:dd:9f:da:af:fd:48:90:de:77:9e:0c:a8:c4:
81:56:1b:dc:60:08:37:e6:34:08:cd:44:90:a6:40:
03:20:0f:fe:73:b2:94:d5:b8:95:de:26:0b:b3:57:
3f:75:d8:35:26:6a:a0:7f:87:77:3d:e2:71:14:6f:
39:73:4b:32:90:22:61:b6:e5:7c:b3:3c:12:fa:1d:
8c:41:22:18:bc:bf:f7:55:66:c4:a6:c8:a3:b0:56:
4b:3c:b6:c8:da:a1:9d:68:8c:59:ab:9d:00:c1:f2:
36:a9:00:57:19:5a:dc:05:ae:09:66:ef:4a:63:94:
3f:af:6c:1a:22:37:fc:64:e1:5d:93:20:3e:d0:44:
e9:80:78:eb:50:a0:c4:1f:44:7b:4e:11:e3:a7:55:
45:f1:68:2c:2f:65:9d:f2:c1:ea:ae:5a:31:08:58:
7c:b6:ba:51:09:ca:8a:25:b1:d8:e0:73:66:d8:80:
45:d2:79:88:2f:b3:81:a6:4a:25:c6:88:36:f9:a3:
40:13:f3:35:02:78:d8:dd:a8:e5:a8:ca:cf:a5:a3:
0d:46:ac:5c:e5:3c:9a:4b:d9:76:58:17:bc:78:a6:
8b:f3:91:a9:47:81:08:fa:e4:96:b0:48:7e:b1:0e:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:B9:B3:56:4F:12:D0:E0:27:EC:DB:3B:5D:12:9A:51:7D:DF:59
X509v3 Authority Key Identifier:
keyid:60:CE:22:C7:F6:50:49:5E:B5:12:20:10:ED:36:F6:D2:64:BF:47:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fa93c6-c559-49ec-b685-f7a9e9a0d6c2/1/YM4ix_ZQSV61EiAQ7Tb20mS_R-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:78:e6:73:49:54:35:24:32:3d:b7:6d:0f:26:eb:a2:5c:42:
4e:60:a4:6b:03:7b:1f:14:af:0c:a8:bf:fc:06:2f:cb:88:2d:
5d:af:b8:1a:81:4e:fe:bd:9d:f7:28:8f:d0:f0:91:f6:44:43:
71:b7:ca:cb:1a:fd:61:6a:f0:0f:cc:74:d3:33:ef:6e:a5:95:
45:81:17:7a:a9:7b:37:b7:93:f0:08:fe:13:4f:26:65:0b:89:
ac:ee:33:30:ce:2f:58:2c:d4:fc:75:ff:d9:83:7e:e2:b9:a4:
85:7c:d5:1d:f4:7d:c2:31:6c:d2:0a:1b:e7:20:e9:26:0c:f5:
3f:ed:ee:b3:a3:ca:92:7d:35:05:16:dd:24:fc:cf:07:40:e8:
38:e2:a5:79:f7:8d:bc:9a:e6:22:83:e3:8b:8e:c9:dc:41:cd:
8b:1e:86:40:04:da:8f:00:9f:f2:be:9c:5d:3b:cf:73:eb:2c:
2f:0b:85:80:68:f6:04:da:26:e1:68:ca:98:e0:b1:1e:56:5b:
1d:6b:0e:ad:cb:1b:26:c7:38:1b:3f:03:9b:27:d0:26:5a:32:
31:0b:98:df:e6:c1:b8:91:69:bd:ee:d9:60:39:07:15:d9:ef:
9e:0b:1d:c7:b5:f4:81:2c:a0:be:82:f0:20:73:83:0c:8a:e2:
c3:d5:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:16 2026 by rpki-client