Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json)
Hash identifier: kctKqBdtxG3wyGYO5Le8ZAvqmB4MW2vvhwkGklo6Vig=
Subject key identifier: DA:21:22:D5:81:C9:D9:C0:71:56:C3:D8:0A:BD:4B:AB:3F:72:39:F5
Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Certificate serial: 019D27040EE30228E77F3A8C4DB04FE16F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
Manifest number: 0231
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: 3XEIRaK5VT86Ptme7q23eZNlZFY5FtI9d93to7e9xl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0e:e3:02:28:e7:7f:3a:8c:4d:b0:4f:e1:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=da2122d581c9d9c07156c3d80abd4bab3f7239f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:70:8f:2e:7f:83:e4:09:d3:55:87:34:7c:
f7:0c:a0:ed:71:d5:4f:0a:a2:d8:0c:9d:9b:6d:08:
70:39:00:e2:ad:2f:5b:94:d7:47:a5:7a:f4:17:40:
c7:ba:62:b8:17:34:e9:87:3f:a3:f6:1e:87:36:aa:
23:58:1f:67:b9:aa:c5:99:5e:fd:7c:09:dc:22:ad:
29:d2:7a:a4:5c:b8:19:72:0e:e6:bd:ea:0e:59:60:
ea:82:f4:73:41:c2:69:c1:f2:d9:6f:81:50:d9:0f:
7a:9f:e1:66:c7:b7:c9:96:07:b9:eb:4c:5e:82:46:
0b:95:48:69:bc:b1:5a:90:35:08:27:42:cf:8c:d2:
e2:2f:0b:81:87:8d:be:c6:e3:07:f0:28:17:12:80:
2e:f7:4b:bf:58:02:76:06:b9:fc:3b:41:bc:f2:3b:
c7:0e:29:14:d2:8b:18:01:b2:55:7d:c0:8e:5b:86:
e5:f4:07:f1:0c:d1:c8:8b:dd:6a:cd:a7:e0:27:e3:
23:f7:4e:8e:c9:f9:de:68:22:92:a8:53:19:07:1d:
d0:6b:4a:69:ab:b9:5e:ff:11:4e:36:ae:7d:d9:ec:
89:eb:31:67:9c:84:69:86:c8:7f:e2:2d:06:02:9c:
02:11:b7:ba:47:02:1f:9d:7f:d6:7b:b9:34:ec:42:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:22:D5:81:C9:D9:C0:71:56:C3:D8:0A:BD:4B:AB:3F:72:39:F5
X509v3 Authority Key Identifier:
keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:57:70:2e:65:7b:f9:4d:9c:f7:f2:1d:80:ce:3f:d5:4a:
32:74:70:28:99:ac:55:65:d0:cd:15:03:fc:6d:6e:79:0f:fe:
17:71:27:77:5a:b7:fd:1d:2b:57:c4:66:0c:b1:f0:78:86:f2:
a7:74:8b:f2:c7:3e:4e:e2:3e:c6:9e:14:6e:ec:66:a2:34:e1:
99:24:99:27:0e:83:eb:56:58:a1:25:62:0a:2b:29:e0:17:4d:
8c:d1:83:b7:fb:59:bc:19:a8:df:53:fe:19:73:92:b4:61:9f:
26:73:a9:f0:f6:92:56:3d:20:d7:64:e3:35:e5:57:cc:d3:cb:
10:51:ed:86:68:33:dc:f9:44:eb:2d:a9:3f:fd:1b:3d:93:6d:
62:6a:45:be:ed:79:26:40:1e:93:98:f5:6f:25:a9:8c:24:b6:
8c:88:44:e0:ac:ce:fc:7f:5c:75:f9:90:92:7a:ee:32:41:28:
cc:2f:06:24:e3:54:82:bd:4a:3b:2b:f4:8c:dd:3d:06:19:4a:
5d:ae:79:9e:21:12:b6:cf:26:52:8e:ef:27:f5:cc:f7:54:ef:
b5:8f:2b:a3:b2:03:bb:91:5b:13:33:ab:8a:1a:40:7f:49:01:
cd:60:e8:8d:5d:2a:af:ae:16:41:8a:78:ee:d0:2f:99:03:7d:
e6:38:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:17 2026 by rpki-client