Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: cmv6YWlHgCe+qL1maKFqNDDpA3buylK+UoNpP8mE2bA=
Subject key identifier: 20:EE:7B:6F:8F:66:6A:56:F6:43:D9:30:3A:CF:1E:C0:39:9C:BE:C5
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 019D38661209AA0240186A8DA8CDF2BCF39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 1341
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: JtXoUv5/MwKX0AUAfIumWLJRBtZN6rnu2dvcD4Q7j/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:12:09:aa:02:40:18:6a:8d:a8:cd:f2:bc:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=20ee7b6f8f666a56f643d9303acf1ec0399cbec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:5c:c1:e5:30:8d:bd:f5:72:71:fb:91:58:
26:b9:4b:11:88:14:cb:71:28:df:e9:98:53:97:28:
8c:3d:76:d7:f4:80:57:77:20:48:fa:48:1d:9a:a2:
66:66:49:ef:de:08:c5:ff:20:ef:71:2c:96:53:23:
1b:1b:b6:8b:af:a2:c1:51:ca:51:ef:d4:3b:b8:b1:
e7:40:b0:59:73:42:0a:36:5c:27:37:ff:5f:85:90:
53:ee:f5:0e:18:54:b4:15:4f:62:0e:43:74:2c:f4:
25:eb:a3:79:a3:55:5b:48:9d:a6:55:a7:11:e4:3e:
02:1f:ed:2f:b1:76:02:fe:eb:a3:e2:3d:44:f0:21:
88:75:8e:d2:5e:1e:07:98:26:cc:06:05:0a:21:26:
e6:a5:68:b2:47:c1:1f:0d:e7:f2:fd:30:29:39:8a:
9b:26:bc:d1:f5:68:a7:df:50:a1:50:31:7a:e0:4a:
2f:64:f2:8d:34:c3:71:5c:ec:d7:df:49:e1:ce:2c:
d2:29:10:9b:10:a3:bb:f1:34:93:1e:d4:6c:64:3b:
26:c9:ee:d0:d0:9a:8b:be:3f:4b:00:22:56:5d:a9:
93:3a:be:b5:b0:a6:6b:7c:03:0f:4b:e4:73:c2:bd:
27:ac:14:c2:42:24:a7:f9:fa:4c:97:57:2c:c3:2f:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:7B:6F:8F:66:6A:56:F6:43:D9:30:3A:CF:1E:C0:39:9C:BE:C5
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:22:52:fb:c8:4d:96:31:c1:c1:90:9b:70:2b:bc:18:53:8e:
6b:ee:7c:6c:e7:8f:a9:1f:0f:7c:9f:b4:12:8c:79:73:d6:5f:
9f:52:db:77:86:65:d7:ab:61:25:f9:c9:42:b7:30:b5:19:03:
0e:6b:dc:9b:67:aa:19:b9:0e:f5:1c:ed:65:dc:10:e5:43:7a:
ab:05:b8:58:47:73:2b:43:8f:b5:01:7a:b2:95:e8:f5:61:9a:
bc:2d:3a:66:81:a5:88:3d:b5:bc:4e:5d:a9:f8:07:7c:64:42:
56:9b:3d:16:62:8c:34:5d:7f:bb:0e:8f:01:b3:9e:27:72:d1:
99:de:29:fa:ff:4d:b5:8f:ba:02:43:71:99:20:fa:d4:5e:d0:
86:e3:9d:84:0b:f3:40:dd:bf:06:c2:dc:06:8b:b9:11:85:0c:
2b:41:16:12:4e:ca:c2:e8:48:3a:3d:82:f5:de:66:9b:a4:81:
02:9d:0b:da:bc:36:15:80:03:46:5b:ad:f2:a5:f8:14:85:62:
6c:70:4e:1b:c3:54:45:2e:2c:61:03:46:4c:ae:e1:01:2c:12:
12:76:1b:b9:7b:b0:e5:97:40:25:69:b2:16:92:f7:8f:68:e4:
97:da:09:74:32:7f:f6:fc:d8:3b:a1:c3:5a:b0:07:f8:f2:a7:
2d:6e:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:06 2026 by rpki-client