Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json)
Hash identifier: KA6Qu7RJwtcCrOqiz+TihBsG0UOmyAKD5QiUnX6kDzE=
Subject key identifier: FF:E9:78:3F:57:DC:4C:3B:AE:95:47:16:19:08:9D:EF:90:1E:3A:1D
Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Certificate serial: 019D3A549714D450323B326172A976333851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
Manifest number: 023B
Signing time: Sun 29 Mar 2026 16:01:55 +0000
Manifest this update: Sun 29 Mar 2026 16:01:55 +0000
Manifest next update: Mon 30 Mar 2026 16:01:55 +0000
Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: 2+G8BVF1C5xEZRi4YNUx6VTDIhgukZO0fBzgxJS8WU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:97:14:d4:50:32:3b:32:61:72:a9:76:33:38:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Validity
Not Before: Mar 29 16:01:55 2026 GMT
Not After : Mar 30 16:01:55 2026 GMT
Subject: CN=ffe9783f57dc4c3bae95471619089def901e3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:66:e6:2a:e6:99:6b:dc:20:5f:4a:48:96:
b6:78:2b:69:c2:27:07:42:67:38:34:b5:aa:db:92:
fe:db:b8:33:03:5e:da:7c:c0:91:56:aa:5b:5e:3a:
29:11:16:2d:fb:e8:76:65:71:2d:2c:1a:f4:8a:d6:
7d:da:d5:82:05:a5:42:e7:67:18:68:b0:5c:5a:ca:
36:3e:2f:35:3c:b1:a6:79:cc:d9:8c:4b:1b:78:38:
33:7b:6f:78:c7:20:ee:a5:82:d3:5c:7a:6c:67:98:
5c:20:8b:96:4f:1c:0b:38:86:7e:aa:ad:58:41:ff:
c2:15:21:35:ff:ce:93:11:71:b1:b3:62:6e:f3:81:
c2:b3:a2:47:2a:ed:4a:6f:60:eb:71:be:99:30:fa:
7b:a9:dd:0c:e2:b7:21:69:6e:c3:a9:65:4c:ca:03:
6b:b7:ef:75:1e:e8:37:17:17:2c:8f:79:5e:54:35:
2d:42:f2:16:41:04:f6:f9:55:38:6a:79:da:c5:0a:
68:41:37:8e:bc:2f:8b:a7:0a:0d:f7:c7:ae:bb:50:
10:2f:a0:d7:dc:9c:b2:c1:53:6b:fc:3a:50:6e:e8:
9b:3d:27:58:2b:f5:5e:8f:22:51:86:3e:b7:71:c5:
3c:c0:4c:e9:b5:cc:c9:c1:01:49:60:98:5e:5d:21:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:78:3F:57:DC:4C:3B:AE:95:47:16:19:08:9D:EF:90:1E:3A:1D
X509v3 Authority Key Identifier:
keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:7f:ca:d2:50:e9:13:2d:d5:0e:a6:26:33:47:84:d1:c5:
1c:d3:e1:38:e2:6c:03:ad:ce:9f:41:b3:ea:90:a0:5a:5b:be:
33:ff:e3:78:9a:fa:bb:bb:d0:46:34:20:49:9b:82:f3:dd:df:
a6:d8:33:34:42:69:8a:3f:3b:ec:39:8d:55:8f:9f:55:14:5c:
be:bd:e9:51:19:4a:06:34:89:cc:cc:65:3b:39:0a:b8:4e:23:
f8:a8:e5:e6:30:0e:b8:f4:1b:37:06:dc:b8:44:d7:54:46:7c:
c0:43:31:3d:f3:c0:94:c1:21:06:55:8b:cf:b8:82:69:64:31:
6c:96:d6:40:28:37:86:b5:d3:7d:8b:d8:43:d9:6e:eb:a6:c9:
86:fa:43:51:19:ba:aa:45:67:70:21:ce:34:d5:62:28:e5:7f:
9c:c9:52:3e:a5:7d:ad:9b:21:6d:10:e6:1e:cd:e5:33:be:92:
e0:eb:99:b3:5e:4d:94:e7:19:48:ab:64:67:06:0d:39:f6:f4:
7c:7a:fc:ab:a6:df:9e:b7:7a:5b:19:b4:14:80:50:38:f7:47:
d0:01:b7:31:08:a0:2a:09:e5:31:28:8d:4d:d6:a3:81:05:e9:
ce:ab:a1:61:e4:39:22:2c:eb:77:cb:a4:3c:16:4f:14:f3:b5:
b7:ba:b7:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VJcU1FAyOzJhcql2MzhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmI5MGIxNjc5MWRlNWFiMDM3N2ExYTdlYjgzMDc2Y2Zl
YjIwZGEwHhcNMjYwMzI5MTYwMTU1WhcNMjYwMzMwMTYwMTU1WjAzMTEwLwYDVQQD
EyhmZmU5NzgzZjU3ZGM0YzNiYWU5NTQ3MTYxOTA4OWRlZjkwMWUzYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjdm5irmmWvcIF9KSJa2eCtpwicH
Qmc4NLWq25L+27gzA17afMCRVqpbXjopERYt++h2ZXEtLBr0itZ92tWCBaVC52cY
aLBcWso2Pi81PLGmeczZjEsbeDgze294xyDupYLTXHpsZ5hcIIuWTxwLOIZ+qq1Y
Qf/CFSE1/86TEXGxs2Ju84HCs6JHKu1Kb2Drcb6ZMPp7qd0M4rchaW7DqWVMygNr
t+91Hug3Fxcsj3leVDUtQvIWQQT2+VU4annaxQpoQTeOvC+LpwoN98euu1AQL6DX
3JyywVNr/DpQbuibPSdYK/VejyJRhj63ccU8wEzptczJwQFJYJheXSGuAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/peD9X3Ew7rpVHFhkIne+QHjodMB8GA1UdIwQY
MBaAFGC7kLFnkd5asDd6Gn64MHbP6yDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTkt
M2IxZGQzZDU0N2U2LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTktM2IxZGQzZDU0N2U2
LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyR/ytJQ
6RMt1Q6mJjNHhNHFHNPhOOJsA63On0Gz6pCgWlu+M//jeJr6u7vQRjQgSZuC893f
ptgzNEJpij877DmNVY+fVRRcvr3pURlKBjSJzMxlOzkKuE4j+Kjl5jAOuPQbNwbc
uETXVEZ8wEMxPfPAlMEhBlWLz7iCaWQxbJbWQCg3hrXTfYvYQ9lu66bJhvpDURm6
qkVncCHONNViKOV/nMlSPqV9rZshbRDmHs3lM76S4OuZs15NlOcZSKtkZwYNOfb0
fHr8q6bfnrd6Wxm0FIBQOPdH0AG3MQigKgnlMSiNTdajgQXpzquhYeQ5Iizrd8uk
PBZPFPO1t7q32Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:52 2026 by rpki-client