Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File: YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier: 3l0kz/uwdarDdUxVQuxY0xb1Tqb6C4grPzEN3VfBpGA=
Subject key identifier: 2E:C4:39:B6:70:D6:8D:E0:F9:56:9B:99:16:EC:36:FA:BC:10:A7:FA
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial: 019D9B50C464779DA23DFADE1A87F2EBFF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number: 0737
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: U1sfV9HH8u88t2HBLjDAkG-CyLg.roa (hash: tpq5q5jvhF2tXurj200oQaFHHR4X1vOHV0qottraasM=)
2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: IdnQe1wFfb8Q8jEA4y1Nm2jpLMFqo5fVg+KU0r/AiEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c4:64:77:9d:a2:3d:fa:de:1a:87:f2:eb:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=2ec439b670d68de0f9569b9916ec36fabc10a7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:e4:1a:3f:a3:f2:a2:7c:f0:d5:8a:19:ac:
37:9b:7f:bc:20:a9:42:45:6c:81:2b:9f:b1:ce:30:
34:2c:6a:9a:b5:30:20:eb:bf:ec:69:f4:40:2c:ea:
f4:38:76:90:16:3d:96:ed:b4:f2:38:67:61:85:8e:
f4:5e:1c:ee:a1:c4:ad:d4:cd:cd:2f:3b:2f:c6:c5:
23:7a:47:35:7f:68:25:2c:8e:e7:38:b6:6a:c0:f4:
7d:e2:2b:03:9b:f7:01:cd:fe:4d:70:79:2f:65:d6:
85:14:b6:1a:73:cd:7f:32:e4:b5:1f:d7:43:4f:b1:
4d:3d:81:96:52:55:e7:e3:fb:65:85:b2:4a:bd:ea:
fc:95:87:67:17:b7:0a:0c:6a:25:6a:96:73:26:6f:
31:08:a7:57:c0:d2:21:57:78:11:3d:01:83:6b:a3:
05:fa:f2:20:f4:fa:e2:87:f1:da:a6:89:7c:db:7e:
fa:1b:1a:da:b4:cd:a1:ca:7f:09:b4:7f:18:71:8b:
ee:ed:32:7b:b0:1f:85:2c:36:04:4a:b8:60:5b:08:
75:f3:21:51:77:74:af:ca:1c:8d:c2:c9:e1:6b:81:
a4:7f:e6:b9:37:23:e9:8e:ff:f1:10:99:94:5f:4a:
87:46:05:1f:e0:71:70:d2:93:ce:52:3f:a0:1b:56:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:39:B6:70:D6:8D:E0:F9:56:9B:99:16:EC:36:FA:BC:10:A7:FA
X509v3 Authority Key Identifier:
keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:de:0e:34:5a:cf:7f:e7:f0:f1:c6:71:1b:88:c3:eb:e9:72:
13:50:44:90:d8:75:8a:fb:4c:2a:83:45:a6:2c:3a:8d:93:54:
87:64:91:e4:02:df:ae:37:41:10:b6:ea:dd:1a:f9:fd:8c:23:
1f:de:eb:2a:8e:1e:e0:02:02:b7:b0:10:8f:57:c6:e0:42:b2:
fa:d7:30:80:44:ab:a3:84:c5:94:9c:8a:19:58:93:f3:a7:cc:
0a:69:00:f2:ef:e5:bc:df:66:29:55:6b:97:49:27:ab:38:06:
95:4f:a7:97:21:bc:7a:49:9f:75:45:39:bc:6a:0a:9d:df:07:
4b:a1:a2:f2:af:ad:01:9d:df:4c:22:2e:f0:78:77:e5:4b:df:
be:76:75:ed:6c:c2:1b:54:cc:14:2b:56:4b:5c:9d:be:79:04:
e8:16:6d:9e:c7:bb:42:13:f4:99:7e:e0:3c:91:f9:0c:f9:6d:
63:28:ca:c8:a6:4a:8f:f2:8e:bf:86:c5:a4:ea:56:45:64:85:
6a:2a:1b:6f:28:17:61:95:4c:2a:bb:b0:63:8a:fb:b0:24:93:
70:33:19:6b:2b:d4:dc:0c:74:04:48:50:73:c5:9c:4f:5e:ef:
67:0c:61:f8:18:ba:f6:10:2b:a6:56:f6:b4:05:d7:cf:e5:74:
85:05:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:16 2026 by rpki-client