Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: CiT1B2t1YW3S1aYNPGy3pQAvfdFLS/FyCWuCcY3zeWU=
Subject key identifier: 68:79:A8:A4:CC:0C:2A:B2:50:3F:F0:BD:D1:E0:33:ED:72:70:CA:2B
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019D3940C3444C94B6B60EE9824B32640C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0E71
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: csYG5PThrXsB4BS2SW7axHa9Cx2l0678QBT60E8NAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c3:44:4c:94:b6:b6:0e:e9:82:4b:32:64:0c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=6879a8a4cc0c2ab2503ff0bdd1e033ed7270ca2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:fd:5e:b4:20:34:66:93:c5:55:da:6f:4f:
fe:6c:7e:c5:40:4a:95:fd:80:5a:8e:d6:be:9f:73:
00:d1:8c:76:b7:dc:d6:8b:74:47:e8:f0:45:42:64:
76:ef:10:56:f9:27:32:8d:c7:85:3b:df:cf:08:49:
43:5f:0d:c8:e1:7e:a4:80:f1:82:60:9a:cb:cd:84:
23:6d:59:f5:c8:2c:90:86:23:11:bd:2b:bf:93:43:
ab:42:7e:0a:69:42:2a:70:33:68:7c:42:f1:11:56:
cd:46:d4:c0:c7:98:7e:bb:f2:df:f4:5d:64:11:03:
7c:52:19:c3:a2:ea:18:4f:37:29:17:c8:fd:a4:31:
8a:25:04:5b:58:77:24:e1:d8:5e:25:84:0b:96:f9:
be:c9:3b:cb:3e:9a:74:9d:63:16:95:b7:bf:d2:7c:
9e:03:95:15:16:5c:50:b6:41:aa:44:85:a6:f0:b8:
0f:f3:ff:d8:e7:69:a0:35:82:63:9f:6d:3e:4f:8b:
71:91:b8:a8:42:52:48:e8:da:df:3e:1b:16:f8:70:
e6:5e:eb:57:b0:4b:83:56:29:28:2a:fe:14:ee:c3:
0e:f2:9a:a7:3c:5d:85:e7:d0:36:4b:0a:0e:3c:44:
1b:ee:b6:6c:ee:22:1a:8f:3d:6a:cd:45:81:73:32:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:A8:A4:CC:0C:2A:B2:50:3F:F0:BD:D1:E0:33:ED:72:70:CA:2B
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:33:46:7c:da:e4:1e:99:cf:ef:18:7b:18:26:21:fe:1e:66:
63:1b:c1:0a:89:8e:ea:04:e5:9f:fb:b5:b8:b0:c9:f4:af:27:
ba:91:79:90:30:b8:d5:26:d1:0f:db:f6:e2:7b:6d:3e:15:37:
76:1e:6b:dd:1f:4d:50:3c:00:03:ee:53:2a:24:0d:d2:8c:5d:
f9:09:76:54:10:89:dd:f4:39:ef:33:27:7f:7c:7d:7a:59:13:
25:68:59:c7:93:b2:69:5a:3f:b7:96:93:dc:e5:cc:f0:5f:95:
5b:9b:7d:86:1c:d1:34:94:de:01:93:7b:33:f9:8b:68:21:bc:
4c:ee:7f:39:26:21:99:9e:d8:7c:d7:8a:15:eb:24:69:cf:79:
b7:8f:75:c0:5f:a1:a8:36:12:68:52:f7:84:48:4c:5e:85:b8:
6e:78:3c:d8:86:39:6d:de:4c:46:be:5b:ef:05:30:54:46:17:
3b:52:c7:43:35:18:39:b9:35:90:5f:34:1b:0a:44:5e:68:10:
56:93:b7:a0:42:11:5d:a2:f6:a3:6d:fa:c5:87:25:93:08:07:
f5:29:b6:e1:f0:bb:f3:40:2a:e3:ac:aa:04:59:b6:6a:12:df:
33:d0:32:e2:5c:ec:d9:3d:ba:1e:5f:2f:ba:10:61:d6:c2:e8:
18:a6:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:42 2026 by rpki-client