Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: xyzJ17OPnaMXwqJRwNw/pcOQoAo8CjFnnCqPg6zg578=
Subject key identifier: C4:52:11:69:93:8C:1D:EB:55:51:B9:35:B5:E3:4F:4D:4D:8F:06:88
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019D99D030695CCE7D1839F425E4BF59637D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0EA3
Signing time: Fri 17 Apr 2026 05:00:51 +0000
Manifest this update: Fri 17 Apr 2026 05:00:51 +0000
Manifest next update: Sat 18 Apr 2026 05:00:51 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: HUY+F0Y6QFFPWR6niCFPkrRZNd1fPHcz11rAx2JRxek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:30:69:5c:ce:7d:18:39:f4:25:e4:bf:59:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Apr 17 05:00:51 2026 GMT
Not After : Apr 18 05:00:51 2026 GMT
Subject: CN=c4521169938c1deb5551b935b5e34f4d4d8f0688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:52:45:e1:e9:01:1c:df:4b:cb:43:76:9e:
91:ac:79:4c:7d:66:b5:c1:63:56:9d:e8:77:0a:80:
76:03:82:62:33:ae:0b:f9:10:c3:7e:5a:a9:c6:54:
84:29:7f:e7:a1:7b:a4:10:c1:b8:bd:64:66:4c:f5:
65:46:86:63:0d:d6:01:73:fa:23:2b:58:a1:53:ea:
ca:e3:30:20:66:e8:4f:97:10:49:0d:e0:51:74:63:
72:b9:0d:0d:bf:f1:7f:80:82:23:e7:94:69:69:07:
6d:84:b2:ef:96:39:d9:24:17:d1:dd:a4:5e:63:5c:
75:78:67:67:d7:0e:01:30:fe:2f:03:96:70:97:27:
34:22:01:02:67:7d:1b:e9:24:22:48:24:c1:85:21:
65:e2:1b:2d:fd:56:45:ae:6b:3d:98:39:ef:fa:fc:
49:43:9e:49:a9:6c:03:94:78:71:7a:4c:12:cd:69:
c7:7f:9e:e8:40:3a:89:c0:79:48:b9:f6:6c:5a:75:
0a:5f:ed:b1:26:ea:c5:1c:86:1c:76:ba:39:89:01:
e0:8f:6a:ac:03:3d:62:7c:e1:c1:04:29:ee:75:84:
73:35:e5:c9:b7:31:b8:8d:a0:45:8c:0c:6f:87:9d:
a6:3e:4c:f6:8b:fb:ec:be:19:c6:89:52:28:c5:04:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:11:69:93:8C:1D:EB:55:51:B9:35:B5:E3:4F:4D:4D:8F:06:88
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:80:62:fc:63:e6:6b:4b:82:58:89:7e:cd:57:b9:df:45:6e:
3b:ce:fa:2e:df:90:e8:96:c4:23:0c:b3:ef:41:ae:84:3e:74:
87:f6:b0:ad:0e:fc:db:c9:97:1c:fd:22:25:2c:56:ea:cd:91:
b4:b5:bf:39:d2:7c:d6:67:af:d0:17:94:0c:c5:95:93:35:0e:
1b:40:f4:32:36:76:66:dd:4b:5a:bc:f6:b3:f2:ed:76:b7:43:
ba:66:9d:e6:fa:c8:b1:98:53:8a:6b:2f:0f:9e:04:4c:8d:2f:
05:5d:41:fc:81:99:4a:c0:03:e7:9d:a4:a0:2b:11:87:7d:24:
a8:1d:97:96:b2:d1:1a:77:ac:e0:93:b5:7e:d8:3c:5f:e3:69:
48:bb:1d:08:d2:1a:c9:aa:c0:9a:55:02:24:f3:b8:22:77:93:
84:2f:f4:f1:01:aa:b0:ff:79:52:d6:34:7e:75:eb:1d:7e:04:
6c:bd:de:29:e3:03:f2:a0:0a:09:7c:d3:5d:78:2f:23:f4:95:
d4:dc:91:be:13:27:55:c3:1a:27:ed:56:3c:4f:93:f6:85:76:
45:d4:9f:b2:45:a7:12:c3:7a:30:91:1b:a7:e0:bb:0d:1f:96:
65:3b:f1:fe:cc:ef:71:0e:3b:00:d9:08:72:d2:53:ea:81:db:
5f:72:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:28 2026 by rpki-client