Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: F1pMC1N9qMI5oR3aD250dDEZFvgO8q2uasOkWpGyfIk=
Subject key identifier: 3A:61:45:80:C5:0F:8E:0B:5D:B0:BE:6B:37:CB:A6:2B:80:4B:FE:AF
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 019CAD59B3B1F6C46A7EBFC34D6B3A4CD18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 12F9
Signing time: Mon 02 Mar 2026 07:01:02 +0000
Manifest this update: Mon 02 Mar 2026 07:01:02 +0000
Manifest next update: Tue 03 Mar 2026 07:01:02 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: CgO2v4R/UZUEYlfEv655HhLWDMjlMH8092j5gpvOack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:b3:b1:f6:c4:6a:7e:bf:c3:4d:6b:3a:4c:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Mar 2 07:01:02 2026 GMT
Not After : Mar 3 07:01:02 2026 GMT
Subject: CN=3a614580c50f8e0b5db0be6b37cba62b804bfeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:e6:0c:df:69:1a:d4:a8:3f:b0:80:1f:45:
3a:79:9d:5c:c6:8f:b9:33:e9:f7:f5:d6:ec:28:31:
cf:c6:44:4d:2c:02:62:68:38:13:5a:cb:4d:e0:b0:
52:a5:71:eb:60:ac:35:df:03:bf:23:76:69:0d:fe:
25:94:ba:0b:31:02:66:3a:20:ac:98:37:cc:2f:31:
3f:35:5f:a6:9c:96:60:fb:29:fc:a1:7a:ec:f1:40:
2c:a9:12:f9:b9:89:e1:85:1f:58:4c:1c:11:09:76:
fc:c3:a2:44:93:8f:41:e8:74:f6:ca:3d:56:fc:57:
6d:c8:f3:62:cf:e2:1f:33:89:ae:87:40:34:41:25:
79:da:ec:e6:ab:e4:8b:c7:13:e7:76:f0:13:f8:a4:
02:69:cc:6d:a7:13:1d:6e:55:42:88:e4:7b:8f:6b:
6d:db:cb:d2:54:7e:c9:50:56:37:bb:a7:6b:bc:7f:
d1:23:65:cc:f2:a1:a7:a0:ac:ac:b9:3f:e8:d5:23:
54:f9:e2:ba:58:37:ff:d2:55:0d:6b:03:ab:9d:49:
fd:f2:66:dc:71:ce:d6:91:97:8c:10:e4:8d:f4:9d:
60:ab:a0:9d:40:fb:6a:93:1d:ca:6d:50:0d:53:6d:
76:f8:96:6b:d8:7a:c7:fd:46:14:62:68:32:45:e3:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:45:80:C5:0F:8E:0B:5D:B0:BE:6B:37:CB:A6:2B:80:4B:FE:AF
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fe:dd:60:1f:bb:58:36:b2:5c:ba:da:1b:5e:76:da:fb:f8:
4d:26:c3:43:03:4a:d5:4a:72:8a:4f:10:ed:26:f7:fb:a4:a4:
f5:c3:d2:1c:17:01:fa:4d:9c:3c:2e:42:6a:67:a3:11:40:f3:
08:a3:fd:9b:76:b3:6e:16:bf:02:67:ed:3f:5e:ed:5d:1b:18:
31:67:4a:5a:d2:8f:b2:db:03:0c:df:16:a1:c7:a2:dc:3c:a6:
50:9b:da:90:e3:5c:6b:84:da:0a:e5:dc:8f:bb:0b:e7:4e:63:
52:98:3d:ba:8c:a6:16:bc:a0:be:13:9c:e9:b1:43:d5:0b:65:
17:f2:e3:35:72:af:a5:27:31:e0:de:8b:05:cf:0d:bb:f2:d3:
02:11:4f:5b:97:c0:4e:9b:b3:8b:ee:2e:61:e2:31:18:4c:df:
c5:d0:09:04:c1:91:dc:d7:03:40:89:cb:06:4e:e6:7e:e8:5d:
d3:0c:74:66:58:fb:af:4a:cd:5b:c3:96:f4:a8:87:b8:cb:b0:
ce:b1:d8:31:0e:03:6d:53:f4:32:3c:c6:0a:37:41:c8:29:c5:
99:5c:1e:c4:e2:f2:1d:e0:0d:04:cf:cc:5f:e9:72:03:42:f7:
9c:fe:e2:eb:8d:7c:6a:04:b9:a5:c2:49:7a:f5:e8:2b:05:b1:
3c:72:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:06 2026 by rpki-client