Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: VteeOUaWtYf/dhiRvJWF/rzgC9vdbQIj6yfdT7gwLp0=
Subject key identifier: DB:4C:E8:0A:B8:DA:F6:D9:79:99:2F:28:86:C5:32:75:4A:70:2F:3F
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 01A133D97C612435817C7697175894BE0C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 1A32
Signing time: Tue 13 Oct 2026 06:00:53 +0000
Manifest this update: Tue 13 Oct 2026 06:00:53 +0000
Manifest next update: Wed 14 Oct 2026 06:00:53 +0000
Files and hashes: 1: Lft1TVXiYVdikjn_A01iU-k02DE.roa (hash: AUhYpOdbzarhMkv1M+Fv4hjTQh+rQF7twSf3TVX7HXM=)
2: PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (hash: sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=)
3: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: f5h36XuHiBfMhyv5TNCa7YeWmQHor638l2gyXDdlMgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:7c:61:24:35:81:7c:76:97:17:58:94:be:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Oct 13 06:00:53 2026 GMT
Not After : Oct 14 06:00:53 2026 GMT
Subject: CN=db4ce80ab8daf6d979992f2886c532754a702f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:a9:26:9f:79:a8:4e:7b:01:7f:75:29:ca:
ce:00:d4:75:a3:15:d5:35:d8:c6:75:58:de:ce:d1:
cd:8c:09:50:9b:95:c5:ce:85:b7:31:85:0d:cb:70:
3e:2c:35:b5:8a:fe:58:86:dc:79:d6:29:1c:94:a6:
7e:83:c7:0f:1d:f2:97:a1:a1:47:40:b3:e6:3d:4b:
d2:9a:5d:d0:87:8d:ef:c1:22:6f:a5:69:01:e6:85:
ab:03:7e:2e:78:33:08:df:70:8a:a2:c1:a6:c3:23:
c1:93:7b:b4:9b:21:80:a6:3f:80:de:3d:a6:60:5c:
eb:57:35:d4:f5:6a:c0:d1:57:1e:18:2c:22:02:d0:
36:e7:f5:9d:ff:42:9f:ea:0e:54:0a:40:8e:d6:d4:
bb:5e:c5:e7:28:f7:42:92:67:58:e6:d3:97:bd:72:
a5:66:83:7b:ae:51:3a:96:5a:43:f2:2d:14:93:14:
a3:b9:b8:9a:f9:72:3c:78:89:09:3c:f2:65:8e:4d:
6b:37:76:21:c5:6a:1c:ae:c7:eb:ff:49:01:b5:3a:
36:e0:76:51:5f:2d:7c:a0:8b:3e:5f:55:ba:d3:96:
6d:33:69:1a:2f:68:04:7d:66:7d:ec:74:8e:69:e6:
15:81:22:a2:9c:0a:09:6c:fe:40:70:69:bd:53:32:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:E8:0A:B8:DA:F6:D9:79:99:2F:28:86:C5:32:75:4A:70:2F:3F
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:12:df:6c:c5:03:71:8d:93:80:2d:9f:46:8a:22:33:59:
51:4f:2f:9b:15:24:e1:20:51:c7:ef:f6:7e:6b:ce:3a:54:3e:
eb:95:b4:9b:80:58:89:2d:24:16:48:fa:08:2b:01:82:26:6b:
6e:5c:d2:76:52:2a:25:ef:93:c2:2c:04:18:ea:96:4b:06:01:
9a:6c:bd:a0:14:f8:c8:fd:5d:9d:33:a2:9d:91:a1:53:53:43:
b3:77:ed:f2:ff:a8:60:51:ef:ef:96:70:c5:e1:fc:59:ba:a2:
e6:77:21:30:04:d7:c3:24:25:4b:a2:d0:7b:d5:41:3a:41:e5:
bd:20:88:01:a0:eb:81:4e:83:0e:09:ca:c0:9c:6d:fc:ad:a3:
3e:a5:8c:9a:d4:b8:f4:58:c0:d6:73:9d:a0:a8:f0:43:e1:f6:
00:12:33:84:fb:d0:fd:c5:6c:0b:8b:33:13:aa:46:ab:43:41:
3b:95:4a:58:69:9d:40:f3:16:d5:31:4a:8d:ca:82:5c:39:4d:
10:08:47:be:38:66:7b:f3:73:30:ea:4b:86:ea:e5:3e:ee:da:
6f:c6:c9:a7:5d:34:03:09:26:06:37:5a:94:6f:dd:5a:df:b2:
7d:97:89:c1:af:a1:e0:b4:40:ad:5a:85:da:20:67:14:51:3c:
da:01:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:18:51 2026 by rpki-client