Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: I9Kk00YMCu62CRe7uNdiE8Z6EelUC1U2IqWf5mvAqK4=
Subject key identifier: 70:6B:3F:BF:92:25:8C:EC:30:B1:DA:40:79:22:C2:3E:E6:2E:31:C9
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019CAD230797C57429DC09A6C107578D2575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1710
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: 0X4ILZB6tpewyh0AWabNbYVWPspOCZV1/RiGDpSlDEw=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:07:97:c5:74:29:dc:09:a6:c1:07:57:8d:25:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=706b3fbf92258cec30b1da407922c23ee62e31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:c4:f2:93:59:4b:0f:85:23:aa:90:97:40:
42:f9:a0:fa:84:ce:31:25:43:05:89:6f:06:77:a7:
a3:76:a7:4a:4d:7e:9c:37:d1:3e:88:6b:34:a2:95:
29:50:05:ce:dd:1a:1b:d9:04:c2:a0:26:9f:40:ff:
ea:13:2b:35:1f:d0:b7:48:84:88:c4:8f:dd:b8:42:
a6:ec:fb:88:bc:43:fe:5f:e3:a0:47:89:fd:3d:e9:
34:6e:29:04:97:70:a7:14:1a:d7:43:d8:b9:d6:29:
dc:dd:56:54:6f:43:b4:9e:da:4e:75:67:5f:9b:6e:
e3:59:e0:b4:f7:e8:c0:ca:18:58:b7:35:d0:7c:ab:
0b:b0:e2:d0:55:3e:ba:21:4f:bb:ed:07:3a:fb:c3:
39:c5:de:cf:7a:1b:18:3c:c4:80:6d:0e:67:db:b5:
e8:59:09:b3:9c:ff:5c:fa:49:04:15:36:68:0d:ca:
b5:26:3c:e8:fe:94:54:c2:75:ba:5a:4e:72:2d:d3:
81:33:49:fb:16:34:80:dd:91:23:f8:f2:51:2b:02:
9c:27:7c:2a:c3:fe:e2:c4:01:e8:23:1a:be:31:b2:
97:87:05:b9:0e:70:fe:c4:64:f9:52:55:56:a1:61:
2b:f9:99:92:48:21:0f:c6:f2:52:b2:e2:47:36:89:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:3F:BF:92:25:8C:EC:30:B1:DA:40:79:22:C2:3E:E6:2E:31:C9
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:15:3d:90:6f:5d:d7:12:94:51:d5:6d:4b:52:0a:26:73:2b:
0b:49:53:d4:a5:0f:f1:f5:3f:eb:b3:93:45:4e:f9:09:00:d1:
0d:4f:c3:b5:88:0b:1b:32:46:c2:ff:e9:b9:7d:d4:a4:22:92:
be:c9:50:f4:18:e4:0c:f0:8c:f4:4e:c3:13:32:c3:ac:d3:ab:
81:22:05:2b:27:d8:96:94:45:69:39:cc:3f:8c:90:2c:ce:4d:
52:22:65:e4:a3:ab:9d:0c:c0:f5:b7:e0:e4:25:7d:5e:89:2a:
39:54:7d:27:fe:29:d5:51:38:a2:b2:b2:ac:53:25:a3:4c:0d:
fa:4c:9f:b6:66:e0:18:68:cd:72:08:c8:39:c4:36:f0:ff:6c:
b6:e4:d5:2e:7a:49:4f:ba:16:f9:c4:79:c1:52:32:c3:b3:97:
c3:2d:fd:6e:65:d5:64:54:da:88:01:41:39:8b:fd:cd:8e:16:
26:56:5e:63:83:ec:b5:47:97:8b:dc:d2:1c:08:f7:b2:4a:9c:
46:b6:d9:4c:94:8f:08:fa:dc:07:ae:4e:5b:c5:a7:2f:e2:cb:
6f:1a:df:10:d9:eb:b1:d3:8e:a1:e3:a4:73:b7:f7:30:95:8a:
e2:06:a3:7a:2c:ab:70:57:7f:2b:63:e5:bc:2c:22:11:56:89:
47:45:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:09 2026 by rpki-client