Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: q5cWnjcojci4+u0t3ICELOaH5Q5amUdec2pMaprjIKY=
Subject key identifier: 78:06:F6:C1:A1:BA:3D:3A:0D:E6:AB:55:01:E3:5E:CD:6C:D0:11:1D
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 019FA25FF92AB4F35A887BCE5EB58084ECF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 11A5
Signing time: Mon 27 Jul 2026 07:00:26 +0000
Manifest this update: Mon 27 Jul 2026 07:00:26 +0000
Manifest next update: Tue 28 Jul 2026 07:00:26 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: hkDXWAhP/ggaNJ6W88sLLtqpC19/rqOIn1BI72SR7IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:f9:2a:b4:f3:5a:88:7b:ce:5e:b5:80:84:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Jul 27 07:00:26 2026 GMT
Not After : Jul 28 07:00:26 2026 GMT
Subject: CN=7806f6c1a1ba3d3a0de6ab5501e35ecd6cd0111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:a2:06:87:ff:a9:10:31:2d:3a:45:72:38:
61:72:6d:fb:63:7f:83:70:15:01:2f:42:b9:0d:f9:
ea:37:52:76:0d:89:1f:59:b9:a3:43:6e:02:4a:6b:
77:18:63:28:50:0f:08:02:9f:b4:aa:68:4c:88:01:
5c:7f:d3:14:05:3f:82:92:0a:2e:8e:9c:c0:d4:a5:
dd:8f:70:ec:2a:f0:65:69:88:2a:46:07:64:99:e7:
93:77:32:03:a0:4d:1f:2f:42:92:24:a6:46:d0:be:
b4:c7:26:0d:8a:33:a3:53:8e:13:1a:ef:66:d0:9e:
00:b5:6b:ef:e3:e9:32:33:6f:e7:75:9d:cc:c8:e1:
62:a1:ec:dd:6d:b7:75:06:6e:45:a2:f7:45:6f:e9:
d9:00:90:c9:41:48:75:60:19:21:1e:c7:35:14:cd:
17:35:26:64:27:a8:73:1d:2d:45:74:16:ea:e0:54:
47:fb:f9:26:7e:51:75:40:d1:7c:65:cf:36:45:fc:
95:87:24:ca:60:5d:c1:e7:54:f4:e5:00:c1:f8:f2:
97:41:1b:68:ba:7c:16:55:fc:b4:25:c1:80:57:a4:
9a:d9:d1:c9:c8:4b:25:5d:a5:ec:e1:6b:82:1e:99:
70:29:14:ce:55:aa:a7:d8:5c:f0:78:da:fc:93:d7:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:F6:C1:A1:BA:3D:3A:0D:E6:AB:55:01:E3:5E:CD:6C:D0:11:1D
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:75:c0:f9:45:96:4e:4f:78:eb:d1:d1:3f:68:4c:b4:82:
a9:43:9d:fc:0a:1a:8f:52:89:51:31:8a:76:47:d0:9e:26:9e:
b3:07:1f:d9:35:7e:3d:9b:6a:b9:38:65:7c:82:6b:7b:be:cf:
d3:98:d6:3b:0a:d6:64:47:c0:e0:ed:29:f7:a3:45:8b:65:94:
3e:b4:60:a9:44:5d:16:76:c9:2f:0a:b3:52:35:22:bd:a4:60:
81:e5:4a:8a:bc:84:42:5e:6a:6e:3c:1e:00:f9:15:35:82:64:
63:79:b1:87:a1:10:1f:b7:e1:48:17:77:f1:35:4a:d6:32:a8:
0e:1e:ed:3a:a4:14:78:d2:dd:aa:ef:b0:bc:5a:e8:a2:14:84:
ed:84:3f:69:85:43:40:f2:f3:4a:78:7d:e1:f1:e3:85:24:ed:
49:57:7a:05:31:ba:dd:46:63:d0:a1:be:b1:c6:33:ea:c0:6b:
8f:93:38:21:53:f1:6c:db:8a:b1:1f:5d:7e:ac:30:06:63:30:
08:ee:f2:8d:01:6d:63:ed:3b:d2:90:23:93:27:33:f3:0d:94:
6a:3f:15:ee:c9:ce:d7:c6:70:42:37:27:a2:03:ff:40:29:49:
d9:82:f3:11:70:30:f9:86:50:df:db:c5:2e:99:87:d9:3b:ff:
06:9a:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:17 2026 by rpki-client