Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json)
Hash identifier: b3CGpzplSfDrW/VtsmF2TqjYho1bS48pBDqvxajonuM=
Subject key identifier: 02:6C:6F:BA:89:F9:BB:95:8D:5E:6A:4A:61:9C:F8:BD:18:72:A7:E5
Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Certificate serial: 019D38660579B5653AD35F4F51C8B35717D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
Manifest number: 1065
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: CU9pZvQ76B2E/yjF/rtwwB/UfBrR1/YcCK0iOt+cQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:05:79:b5:65:3a:d3:5f:4f:51:c8:b3:57:17:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=026c6fba89f9bb958d5e6a4a619cf8bd1872a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:79:22:ab:26:5f:85:37:09:4e:6c:ed:82:
65:4f:64:ca:bd:4c:a3:a0:03:4a:06:1d:b9:61:9c:
63:17:b6:82:31:0f:c7:75:c6:e6:f6:8c:a7:33:df:
94:1c:10:f7:23:49:44:dc:24:0e:fa:c2:e3:b0:0b:
3c:23:ed:51:ec:fe:66:c2:57:b0:8f:b9:5d:0c:51:
9f:7c:dc:8f:80:0a:07:92:b7:3e:78:81:b2:b4:86:
1e:75:0a:7f:45:04:13:40:82:87:e1:3c:65:2c:2f:
64:66:29:14:18:f3:ee:69:39:34:2f:44:60:b2:05:
55:03:ab:4b:52:d5:dc:a2:d5:7f:1e:b3:43:e1:f2:
02:e8:24:11:21:44:a8:8c:ab:b9:59:b1:ed:22:b1:
ff:b6:d9:ab:3c:52:48:94:e0:a1:5b:e1:da:83:28:
0c:0b:8e:93:59:15:ec:97:c9:3c:66:d2:4a:34:11:
83:95:7f:fe:5b:f2:ea:d5:3c:ae:c0:2d:d5:8d:0a:
27:cf:46:80:a7:b8:30:fd:06:8d:88:7c:12:2d:5f:
90:a1:0f:52:b2:50:d1:b4:a4:fa:37:37:6c:fa:a0:
45:7c:1c:5e:ef:29:cb:7e:9e:61:d0:fe:19:a8:ce:
ae:b2:8d:fd:00:3c:09:b1:ed:d6:43:8d:9b:6f:7f:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:6F:BA:89:F9:BB:95:8D:5E:6A:4A:61:9C:F8:BD:18:72:A7:E5
X509v3 Authority Key Identifier:
keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:18:18:12:de:02:f4:fe:5d:90:8a:2c:b9:3f:a6:e5:09:
19:0b:c2:ca:57:9c:8c:4f:29:4a:7a:5e:09:cc:43:b3:15:b8:
30:a0:92:93:d5:8c:e4:9e:a3:d9:6c:4c:e9:c5:d2:3b:a6:a4:
eb:31:6b:b0:19:8f:bd:06:96:7f:b3:88:11:ef:34:9f:a4:b3:
9a:e7:c2:bc:df:2b:8e:96:68:05:60:0d:e0:46:ae:a3:84:47:
cd:67:f9:60:9a:e5:d0:75:2f:d8:c4:54:57:06:3b:a9:6b:aa:
5b:76:2d:24:44:96:d3:3b:09:f0:ec:d6:43:cd:99:17:b1:1f:
0c:d7:b0:d4:be:9e:ed:b2:ff:ad:f3:cc:ef:bb:8c:07:1b:a6:
0c:b9:bc:5b:9e:08:b3:10:7c:5b:fa:c2:c9:30:c8:ee:78:5d:
53:b5:06:25:b3:e1:96:45:b8:10:89:c4:65:78:0d:40:09:08:
2c:da:7b:26:c9:d5:17:93:9a:c8:2e:2c:42:28:a3:34:c4:ad:
52:53:89:20:c6:51:32:0f:05:4c:0f:b4:1b:bb:3d:34:90:94:
d7:64:c2:a1:11:93:af:ce:4f:a3:b2:16:cf:37:7a:ad:15:8f:
5c:ff:99:03:64:5d:d4:b9:19:c9:ef:f9:e6:5f:52:b8:d2:fe:
f1:77:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:41 2026 by rpki-client