Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: 1XDsOiUS/DvGcDkrJTvqOp1NyyKTaqmiRS1GdKIl1EA=
Subject key identifier: 9A:66:70:EC:68:6C:E6:8B:1E:B7:47:3E:7B:52:27:EB:1E:C5:56:55
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 019D3940799001A4BBAB9A00D2D089D834AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 116D
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: LVE3obPkVXJVHitz1AJDPejnovufJuJJvk7yetmBCx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:79:90:01:a4:bb:ab:9a:00:d2:d0:89:d8:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=9a6670ec686ce68b1eb7473e7b5227eb1ec55655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:79:d4:9a:2e:9f:d9:a3:4d:f0:8e:ed:0d:
cb:4a:02:9e:38:77:d1:4f:02:fd:c5:b4:33:46:19:
50:5d:48:6d:05:d1:fa:02:3c:24:70:73:5c:df:ba:
6f:0f:86:d8:ad:d6:1c:1a:c9:ee:27:55:a0:20:8c:
57:d5:b9:66:8e:69:99:2e:10:35:03:62:73:78:97:
be:be:d4:09:27:3b:c4:91:76:93:93:7b:06:77:ba:
53:72:85:58:3b:e7:b2:c7:fa:65:4e:07:5a:ec:d5:
11:8e:58:2d:e5:04:23:e3:d7:69:8b:7e:df:29:3f:
59:82:28:7a:09:a7:49:44:90:58:bf:74:f4:d9:b4:
c0:1a:a6:9d:57:13:26:33:50:aa:5b:1a:61:f7:31:
56:57:12:4c:26:f0:96:32:fb:79:68:db:ab:da:be:
17:23:51:b3:46:b6:cd:a8:60:2a:a1:af:74:4e:e5:
8d:9f:10:ca:0a:89:d5:25:c1:89:24:71:f9:f7:55:
71:dc:f2:44:c8:20:61:c1:5d:69:76:09:2d:8f:47:
e2:9a:d9:86:3c:96:0a:31:5e:8f:2e:f1:24:d7:0e:
65:1e:83:4b:d2:5f:62:ef:36:ee:09:ca:c2:3b:0d:
24:a1:4a:f9:63:53:9b:46:86:c4:86:d3:bd:8b:14:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:70:EC:68:6C:E6:8B:1E:B7:47:3E:7B:52:27:EB:1E:C5:56:55
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1e:ca:e7:ad:b5:6e:e5:4a:80:33:1e:6f:15:f1:37:f0:d4:
e8:7f:bf:11:e8:42:ca:d6:14:7e:86:bc:8f:31:57:0e:27:6a:
ea:8f:a6:47:ea:86:ae:a0:a8:22:95:94:2a:27:52:fa:27:4e:
c4:cc:84:fb:11:10:b4:33:9e:96:9f:fc:e6:13:a5:2a:d4:06:
2d:31:e9:36:1b:f4:21:66:c3:27:8b:97:21:bd:94:14:99:53:
e4:55:6b:3d:d4:6a:8a:9e:ff:c0:63:c8:cd:e4:5a:89:1f:82:
71:3c:aa:5b:c6:82:74:8c:d1:6a:35:73:02:dd:ae:6e:10:21:
d2:9b:47:b4:63:21:9f:0e:24:a8:4a:6f:a3:11:23:89:2b:8b:
86:ba:48:c3:2c:5f:73:1f:88:52:5f:18:17:21:e4:34:72:72:
0a:34:0c:d3:28:b9:0f:ff:b7:85:c4:ee:80:7c:f2:3b:7d:c8:
14:82:ab:4d:88:e6:40:df:99:2a:41:c1:4a:d1:fb:d7:1d:3a:
29:4d:56:ba:34:2b:22:83:40:1f:2e:0f:75:90:f2:b3:81:02:
9c:d6:f4:0c:67:f2:bb:f5:bd:7e:83:c0:cf:c2:f9:b2:97:ac:
78:ab:f8:30:c4:a4:ae:9f:df:f1:ef:68:88:30:da:16:30:94:
ef:bd:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:49 2026 by rpki-client