Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: gZLleBraimJ0FxmdkqKbl5PIV8ooEt2dIeNkJqKZGkY=
Subject key identifier: D2:BE:E3:85:9C:61:56:C3:B1:E6:A0:2E:3D:5A:09:73:BD:A9:FF:EC
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019D9AAC585C427759C91E51A45CBA1C7A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 178B
Signing time: Fri 17 Apr 2026 09:01:19 +0000
Manifest this update: Fri 17 Apr 2026 09:01:19 +0000
Manifest next update: Sat 18 Apr 2026 09:01:19 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: Nr+eXt+FTZSwkrxdk2Qj5q2Y/3LUb7kCpn2qSou8TiE=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:58:5c:42:77:59:c9:1e:51:a4:5c:ba:1c:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Apr 17 09:01:19 2026 GMT
Not After : Apr 18 09:01:19 2026 GMT
Subject: CN=d2bee3859c6156c3b1e6a02e3d5a0973bda9ffec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:17:bf:49:7b:f5:e2:0e:b2:6b:39:22:54:
1d:7b:dd:9c:a0:82:90:e8:81:22:8c:7e:ac:e9:06:
87:6e:b0:30:60:47:4f:53:70:57:56:0c:58:5e:69:
d8:72:88:43:2f:a0:e0:43:81:1a:7e:9c:1f:1e:11:
38:6b:ba:72:55:be:72:93:8c:ec:71:e3:e0:3d:d0:
a9:3b:03:00:63:84:81:4c:05:01:f5:0c:7c:9b:d7:
d0:50:78:8e:83:db:ca:e7:ee:ef:43:c4:44:e6:87:
fc:f0:99:dc:78:28:6e:fd:68:fc:32:52:1f:5a:4d:
d7:aa:32:97:54:1e:ad:e1:95:67:d1:6b:07:58:8b:
0d:b8:2d:2f:35:e0:b9:7e:40:a4:be:bc:89:94:9c:
ed:08:32:dc:ff:e2:79:47:93:a6:fd:df:15:8d:e0:
ec:b7:5f:11:c1:10:b4:c0:8a:f4:06:c6:3c:85:2d:
91:fb:9f:46:15:78:6d:42:36:61:96:4a:02:c7:2d:
24:ad:62:62:47:f8:59:a1:37:26:0d:94:8d:fb:ea:
43:e0:79:cd:d9:db:33:84:b5:e4:a9:54:e2:6a:01:
d9:38:92:18:77:ac:84:8f:87:92:3c:5e:0a:e2:39:
d8:b3:83:d1:77:8a:c4:a3:b9:ae:80:37:fd:f0:d7:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:E3:85:9C:61:56:C3:B1:E6:A0:2E:3D:5A:09:73:BD:A9:FF:EC
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:25:33:d1:4d:0e:4d:f4:e7:47:37:63:47:f5:63:7d:76:94:
b7:85:4e:eb:55:98:4b:e5:b7:32:13:b4:52:af:48:c3:8d:ec:
4a:77:6a:5f:11:a0:49:da:ea:e7:87:ce:9f:1e:89:13:5a:2b:
79:8a:44:ee:1f:9c:e7:c6:1c:33:01:24:8f:03:85:8b:9c:24:
92:b0:26:ca:5f:9c:be:25:32:d5:cb:88:19:a9:5c:11:dc:b0:
08:0a:4c:b8:56:23:df:eb:9f:69:64:e4:c5:f3:80:b8:fd:20:
12:9c:8b:1e:d9:57:4e:8f:86:33:e6:14:fc:e4:f1:23:77:89:
c7:2a:a5:39:92:4d:e7:ae:44:81:b7:3d:f9:80:da:dc:fb:46:
78:00:5a:28:4f:6e:4c:37:34:c1:91:f3:bf:2c:07:3b:3b:d6:
2b:92:34:34:f2:99:e8:95:d4:18:cd:5b:6a:c4:3e:09:97:c2:
bb:60:ee:e4:dc:7e:4a:55:f9:7e:b7:97:96:16:f1:47:21:6e:
ba:fc:dc:ce:ff:a7:b9:59:2d:0c:25:b9:40:b7:54:a0:3a:0c:
de:f5:fc:e5:7e:a2:9f:3b:5b:55:7d:8b:24:c0:b1:1f:d7:e0:
d2:80:c6:8a:6d:cd:13:29:4d:19:9d:db:24:6c:c7:b4:6b:ca:
94:2c:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:06 2026 by rpki-client