
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: hEnkeUKY/phJtzOuqpmKyu1YZiaSn0Hx/acGL7qt8mg=
Subject key identifier: 7F:4D:AB:93:FE:2A:5B:C2:BB:59:62:02:95:9C:82:F5:6E:58:A7:0B
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019CAC4754C0820A4A6F65540DC6322C8440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0E28
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: +DWVnN4g/QscbkXclH4aOZky80TTfyFYkkFBOg82BWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:54:c0:82:0a:4a:6f:65:54:0d:c6:32:2c:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=7f4dab93fe2a5bc2bb596202959c82f56e58a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:46:33:6d:6f:39:da:bf:42:1d:59:f9:02:
13:e8:d5:9f:2c:22:fa:51:2d:7b:b2:3a:1b:aa:6b:
81:9a:bb:8c:97:44:e0:0d:ed:30:83:5a:85:b9:8f:
67:eb:54:02:4d:03:d2:1b:10:1e:c0:2e:5c:34:a4:
79:db:f1:7f:d2:43:ce:17:54:02:bf:de:b2:79:37:
c4:a2:af:7b:8a:ac:79:ee:ae:cc:b7:dd:e8:c7:43:
75:bf:66:8d:a0:eb:cb:0d:67:f7:f4:07:0f:b6:84:
11:2e:2d:bf:ef:ec:09:83:10:c7:87:20:80:0d:6b:
ce:ce:86:c1:66:23:17:67:5f:76:7f:58:9b:57:44:
85:91:6d:4b:8a:6d:cb:7a:a8:1c:91:6f:68:fe:91:
a5:7a:7b:3f:89:14:8d:58:38:78:45:00:54:1c:8d:
7e:a8:6e:6b:87:04:1a:95:17:ac:63:31:e6:05:52:
f4:c2:94:48:ac:ba:b6:fe:1a:00:7a:b0:fd:85:4c:
87:85:6a:e8:f9:a7:97:67:53:ce:14:4e:16:3b:55:
19:4a:83:64:35:2f:04:49:3d:a9:bf:0a:2d:24:c0:
0b:5a:31:0f:1e:d6:b6:18:ac:30:81:52:3d:ca:ea:
a3:f7:83:17:ef:2c:78:38:23:8c:6d:6a:dc:44:e7:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:AB:93:FE:2A:5B:C2:BB:59:62:02:95:9C:82:F5:6E:58:A7:0B
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:87:58:a5:d3:74:7b:27:d2:84:99:ce:83:72:aa:cc:b9:
ac:3a:38:bf:8b:d1:01:ea:5f:d4:9d:c7:f1:fc:ee:b3:3c:ef:
96:34:77:19:c0:54:ba:85:d3:b6:f2:1d:f9:d0:b2:24:6c:b7:
41:95:f4:c4:85:59:9b:93:1e:2d:51:1c:f7:02:29:e9:ec:8a:
14:e4:0f:09:60:e2:96:34:ef:19:7a:83:2e:be:8e:f1:02:80:
23:6e:17:c8:89:b7:84:53:d2:ae:15:9d:a1:f4:7d:7a:9b:8b:
fe:4c:20:9a:c8:8d:d1:6e:e7:ae:ee:cf:21:db:f4:7f:f9:41:
a7:76:de:e8:90:96:e8:4e:26:92:c5:c8:b7:a0:06:1e:0a:4c:
37:53:9b:39:c6:ca:ef:a6:68:50:6c:37:ce:24:51:e6:14:43:
fe:50:36:c1:5d:5a:a0:d2:78:9b:44:43:ad:d6:88:7d:98:f3:
f2:5e:de:c4:4f:5d:52:17:9d:4f:2d:05:6c:ea:88:21:bd:e8:
51:f1:e7:87:e5:74:a1:ba:00:fd:32:c6:ae:16:42:a9:2f:ed:
7f:e8:67:50:73:70:ee:a5:2c:8f:bb:b9:7e:ad:db:a3:f4:37:
3b:24:c1:e6:d1:c9:96:17:59:bf:40:84:bb:57:bd:0c:05:82:
80:70:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:46 2026 by rpki-client