Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: kRWqLXbolFQz5c2cMxpW+U0wNChku7yKM0YaUZR5c98=
Subject key identifier: 26:19:DF:97:B5:81:3C:93:32:5F:BB:A8:E0:1B:54:ED:12:E5:22:D8
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01A12842EC3F3E4B2F402C71F46242F44630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 1962
Signing time: Sun 11 Oct 2026 00:00:36 +0000
Manifest this update: Sun 11 Oct 2026 00:00:36 +0000
Manifest next update: Mon 12 Oct 2026 00:00:36 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: IquKJfIwUBKnLeIVJfTXjMRcGQNRga9xB5NwEpR07Qw=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:42:ec:3f:3e:4b:2f:40:2c:71:f4:62:42:f4:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Oct 11 00:00:36 2026 GMT
Not After : Oct 12 00:00:36 2026 GMT
Subject: CN=2619df97b5813c93325fbba8e01b54ed12e522d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:48:29:f2:42:b9:53:fe:7d:a8:01:32:52:
d0:71:3a:97:4a:96:7d:c2:bc:78:17:79:f4:21:73:
ac:ae:ae:33:65:9f:25:b0:00:9b:56:4c:f6:c3:07:
57:27:c9:a0:6a:57:49:58:91:2f:bf:41:6d:81:e8:
e3:95:d5:53:16:f4:ba:bb:45:04:e0:1c:78:85:ac:
b1:b9:f4:5e:54:d0:24:57:f3:9a:db:a3:22:24:75:
46:a6:ad:92:84:fd:e5:2c:68:3b:0a:34:cd:81:b1:
da:b6:23:f6:93:54:ba:85:79:ce:a2:19:41:46:f1:
7c:f5:86:2e:15:17:ed:ef:15:bd:2e:d4:de:06:97:
2b:73:cb:6a:4e:0c:b5:ba:d9:eb:75:0f:53:81:8f:
db:87:f0:78:ec:24:4f:f7:ab:69:0e:b5:b9:41:b6:
fc:57:d5:29:12:f8:bc:dc:82:a3:51:3c:d9:87:d6:
d3:e9:7f:37:36:4b:29:60:cb:23:f0:ca:5d:17:b6:
98:a4:1f:82:3d:93:56:4d:e9:a1:21:53:fa:81:0b:
cb:c8:83:9c:04:97:18:16:61:87:3d:c6:50:79:82:
96:5a:65:d8:e4:07:17:26:7d:5b:0c:39:18:0f:c3:
9c:f0:49:cf:ed:bc:d1:ae:ca:58:fb:f6:37:47:c4:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:DF:97:B5:81:3C:93:32:5F:BB:A8:E0:1B:54:ED:12:E5:22:D8
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c0:00:3c:30:a4:f5:1b:fc:a5:e0:47:29:ce:2f:a0:76:da:
14:4a:97:62:bd:e8:f4:77:73:6c:78:a1:fe:64:30:15:94:02:
5a:41:c4:7a:19:b8:07:f1:21:35:8a:b9:38:60:3a:b7:42:5e:
38:34:72:fa:f7:16:7c:70:2b:52:d9:d3:20:00:1b:88:b7:e6:
97:0b:0b:23:0a:a0:ff:55:8c:17:6d:90:e7:7d:2a:5b:a2:4b:
46:9f:af:46:78:4c:17:2d:32:e4:9a:0c:50:b2:99:81:19:dc:
10:57:e3:d8:76:fe:15:34:4d:b0:e4:5a:2d:95:ae:ef:4b:14:
74:96:1b:8d:2c:f5:58:d0:78:87:49:61:db:39:fb:8a:88:df:
28:8e:25:61:24:0c:4e:58:b1:50:06:04:e1:6b:6f:01:7d:61:
65:bb:37:2d:f4:c5:52:21:e2:ec:9b:29:34:fe:49:bc:68:b9:
bb:2e:de:5a:64:de:62:e9:1b:ab:67:7e:9e:d5:eb:35:f4:87:
79:2a:23:a3:bd:8f:c4:8f:50:87:f1:ec:df:eb:03:b4:51:37:
08:82:9f:f7:ea:ce:d2:87:b0:1a:e3:9c:f8:cc:68:fd:cb:a2:
39:87:e2:7d:16:07:db:d9:92:18:a8:79:ec:27:7a:6b:7e:3e:
be:57:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:28:36 2026 by rpki-client