Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json)
Hash identifier: vihj8A7UkOcp34LAVdaBQoSx1h1ShSm1A5NTllV7m+0=
Subject key identifier: B1:B2:87:26:F8:08:09:D2:FE:69:28:F5:E9:F1:19:BD:11:09:71:15
Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c
Certificate serial: 019D98F4A7E55DACDD0695C0A49E69D64C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
Manifest number: 1373
Signing time: Fri 17 Apr 2026 01:01:03 +0000
Manifest this update: Fri 17 Apr 2026 01:01:03 +0000
Manifest next update: Sat 18 Apr 2026 01:01:03 +0000
Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: b36Gg901Y2QUtnnw24wVR3sbtfC9VIi0R9QI+CBcYA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a7:e5:5d:ac:dd:06:95:c0:a4:9e:69:d6:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c
Validity
Not Before: Apr 17 01:01:03 2026 GMT
Not After : Apr 18 01:01:03 2026 GMT
Subject: CN=b1b28726f80809d2fe6928f5e9f119bd11097115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:cf:15:da:62:d6:71:f2:58:93:b2:bc:f9:
ed:99:4f:fc:c4:ec:7d:37:19:4a:b7:94:56:0c:be:
e9:2d:79:fd:f3:61:0c:4d:6a:c7:41:77:cf:2f:3f:
b3:b6:d0:e5:bc:6d:1c:99:19:e2:ad:68:ea:b5:10:
2e:b7:44:18:ca:71:d1:6b:86:86:a9:d8:bb:a1:3e:
cc:66:25:f2:e6:6b:9c:60:68:b1:27:56:5c:c3:7c:
da:fe:db:05:83:8a:eb:93:9b:db:7a:dc:2f:b7:89:
fc:90:d2:1c:e1:16:8c:dc:1b:8c:ce:a9:b8:57:c1:
cd:46:76:d9:66:88:b5:07:84:c3:25:20:81:30:77:
d7:8d:e8:01:98:e6:15:ef:b8:02:d0:fb:0a:d2:c6:
fd:7c:e9:25:8e:2f:40:9b:54:6f:7c:72:2e:1b:9e:
01:de:06:b7:81:54:09:65:74:00:c1:8d:49:02:df:
5c:af:fb:c8:9b:12:70:21:46:04:83:ea:c9:f9:2e:
97:4d:62:fb:5a:b2:94:5b:f9:e2:8b:e9:2d:3d:3a:
2d:97:3e:4a:d4:4d:1e:2b:04:af:a2:b9:77:18:cf:
9c:c0:1b:74:dd:4c:95:43:aa:a0:b9:71:c1:6f:64:
41:c5:40:c4:ca:7c:77:d6:8c:1b:1a:4d:2e:7a:d0:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B2:87:26:F8:08:09:D2:FE:69:28:F5:E9:F1:19:BD:11:09:71:15
X509v3 Authority Key Identifier:
keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cd:5c:94:1c:12:32:6e:31:1c:7a:7b:2d:b3:99:ad:63:4a:
28:eb:7a:90:ab:bb:81:d1:6f:2d:cd:37:87:eb:44:e2:6a:b8:
c9:92:96:f2:f6:93:49:08:67:27:6c:14:1c:74:48:14:64:5f:
ba:bc:a1:82:74:f6:20:5e:20:8b:e5:e5:5a:56:4b:6e:82:68:
21:a3:32:fd:ff:ac:8f:55:d0:ab:18:8d:e4:26:0a:53:4d:46:
e7:05:7c:01:38:0b:e3:67:85:1d:e7:66:ea:40:4f:7a:a5:d9:
76:83:24:c7:d0:ff:77:04:fb:d3:64:f2:6f:47:c9:f2:d2:01:
86:2f:ac:9b:24:54:cf:a5:fb:26:cb:d5:7e:f0:37:dd:78:1b:
ad:bf:6c:e6:8c:1a:d8:08:de:05:75:eb:f7:d4:d2:e9:44:43:
ab:b0:6b:80:2b:e4:eb:a4:73:61:f9:82:8d:48:ad:93:6b:8e:
03:db:c6:c6:e5:6d:f9:89:80:3e:41:75:8e:44:ed:bb:0e:e7:
29:84:50:08:23:0c:ca:27:b9:b5:52:27:0b:43:8b:1a:8d:e2:
67:f4:0a:f0:22:0a:f4:e4:a5:69:99:1e:6c:41:93:34:c4:d0:
9a:82:c3:a2:03:a2:21:84:2b:74:b3:bb:37:9e:e6:2d:35:df:
e4:74:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:30 2026 by rpki-client