Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: 9KEd3BXXr7IjCJ6BL56xjrttrUaSolMTjtjaPXyCR1I=
Subject key identifier: 0B:E3:4A:B4:E4:D9:5C:DA:09:04:7B:50:BC:85:E7:14:BD:4E:EB:90
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019FABD0E2310756CCD31C26FF67CCA8F8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 189D
Signing time: Wed 29 Jul 2026 03:00:21 +0000
Manifest this update: Wed 29 Jul 2026 03:00:21 +0000
Manifest next update: Thu 30 Jul 2026 03:00:21 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: kGsG/cV5ubGJPgYPG4Ya7W9iWCkgMrgy7viDLA8pe6o=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:e2:31:07:56:cc:d3:1c:26:ff:67:cc:a8:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jul 29 03:00:21 2026 GMT
Not After : Jul 30 03:00:21 2026 GMT
Subject: CN=0be34ab4e4d95cda09047b50bc85e714bd4eeb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:5f:ee:05:22:4d:5d:c5:5a:32:15:b3:e5:
68:5d:3b:7e:4c:ca:70:c3:b1:d4:38:f9:67:62:3f:
25:bd:60:4f:4f:51:0a:3a:5e:9f:b2:c6:30:94:5b:
95:e0:18:5d:bd:a3:9a:d0:90:9d:e7:28:06:02:26:
07:38:a8:0e:c7:9c:31:d9:12:6b:36:f1:32:12:27:
eb:20:3b:8c:03:76:24:c0:e6:72:97:bd:e2:79:d0:
ac:b9:b5:92:90:93:af:92:4c:37:a2:c7:1b:30:d4:
27:03:78:2b:65:45:cd:bd:d2:9c:49:82:4f:97:d0:
c9:de:e7:23:f1:df:ea:b9:39:31:b5:36:8e:04:a5:
d0:5f:1b:2c:7e:1a:3c:72:e4:d2:2b:82:5e:24:a5:
19:17:c5:77:ce:24:19:a7:fc:5a:a8:cb:ea:6d:08:
6d:74:02:9e:b5:f1:29:1c:07:0d:b2:1e:30:5f:b4:
da:10:f2:df:1f:3c:2f:5b:a9:0e:3a:8d:22:11:90:
92:fb:98:6a:f7:14:0e:43:e9:69:da:46:8a:80:b1:
d6:83:84:e3:fb:a4:56:1c:09:d9:cb:63:93:3d:7b:
27:07:98:dd:4d:99:a9:94:cf:aa:2d:4f:30:9e:71:
c7:64:8a:61:53:57:02:09:5f:82:e5:3a:24:5c:f3:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:4A:B4:E4:D9:5C:DA:09:04:7B:50:BC:85:E7:14:BD:4E:EB:90
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:f8:bc:7e:fa:a3:9c:fa:76:0f:6b:9a:2e:49:66:e6:63:
c5:53:17:fa:77:c4:fe:82:08:d8:bf:15:40:cc:58:2c:77:b0:
b4:03:ef:35:fa:10:7a:8d:da:ea:f4:43:8a:b4:7e:28:36:3e:
47:a7:0d:4a:49:35:27:3e:76:de:2a:90:31:1b:62:b5:69:2a:
05:59:e1:32:09:c2:2e:56:df:3b:a0:72:2f:27:e6:81:07:b4:
8f:7a:15:04:b3:2e:1d:34:eb:c7:f7:e3:47:85:b5:83:de:98:
38:47:38:6a:c5:59:75:b4:80:9f:d9:9b:3e:bb:bd:09:0c:66:
60:8a:a1:28:c3:b8:2f:4a:d3:61:08:52:d7:a6:4e:c7:86:c6:
af:96:77:b6:68:86:22:49:59:24:d8:1e:32:72:cc:62:63:b8:
c9:72:64:b6:1a:53:0f:1f:b7:12:b3:02:c1:b8:87:95:87:af:
31:2b:d9:2a:b0:9a:bd:40:01:51:61:91:d4:b6:c7:58:a3:e5:
b0:c8:79:1f:c8:c4:8a:36:c3:fb:45:40:28:c6:ff:ad:57:ec:
c5:51:35:e0:82:13:51:54:76:40:83:a0:cc:a1:ff:81:db:11:
cc:73:31:9e:e3:4d:f4:c5:bc:09:09:f9:98:6a:85:aa:0e:5a:
6d:b9:5a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0OIxB1bM0xwm/2fMqPipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4
YjYzOTcwHhcNMjYwNzI5MDMwMDIxWhcNMjYwNzMwMDMwMDIxWjAzMTEwLwYDVQQD
EygwYmUzNGFiNGU0ZDk1Y2RhMDkwNDdiNTBiYzg1ZTcxNGJkNGVlYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnxf7gUiTV3FWjIVs+VoXTt+TMpw
w7HUOPlnYj8lvWBPT1EKOl6fssYwlFuV4BhdvaOa0JCd5ygGAiYHOKgOx5wx2RJr
NvEyEifrIDuMA3YkwOZyl73iedCsubWSkJOvkkw3oscbMNQnA3grZUXNvdKcSYJP
l9DJ3ucj8d/quTkxtTaOBKXQXxssfho8cuTSK4JeJKUZF8V3ziQZp/xaqMvqbQht
dAKetfEpHAcNsh4wX7TaEPLfHzwvW6kOOo0iEZCS+5hq9xQOQ+lp2kaKgLHWg4Tj
+6RWHAnZy2OTPXsnB5jdTZmplM+qLU8wnnHHZIphU1cCCV+C5TokXPMywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvjSrTk2VzaCQR7ULyF5xS9TuuQMB8GA1UdIwQY
MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt
OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi
LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO/4vH76
o5z6dg9rmi5JZuZjxVMX+nfE/oII2L8VQMxYLHewtAPvNfoQeo3a6vRDirR+KDY+
R6cNSkk1Jz523iqQMRtitWkqBVnhMgnCLlbfO6ByLyfmgQe0j3oVBLMuHTTrx/fj
R4W1g96YOEc4asVZdbSAn9mbPru9CQxmYIqhKMO4L0rTYQhS16ZOx4bGr5Z3tmiG
IklZJNgeMnLMYmO4yXJkthpTDx+3ErMCwbiHlYevMSvZKrCavUABUWGR1LbHWKPl
sMh5H8jEijbD+0VAKMb/rVfsxVE14IITUVR2QIOgzKH/gdsRzHMxnuNN9MW8CQn5
mGqFqg5abblaQg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:38 2026 by rpki-client