Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier: whSjNhGgd0/dW2W0D7GLo2SYIwc+EzLZNsYI4HVa3uY=
Subject key identifier: 57:D0:2E:AF:5B:AF:C7:E0:F1:F1:1A:84:60:66:7A:48:7E:B2:25:48
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial: 019D3375982C5B74A19E756DF1EF5595DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number: 0E6E
Signing time: Sat 28 Mar 2026 08:00:37 +0000
Manifest this update: Sat 28 Mar 2026 08:00:37 +0000
Manifest next update: Sun 29 Mar 2026 08:00:37 +0000
Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: KaT3xbImluZ3dvQR2lwu6gg7bTN9MC65mPSp3VTe+Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:98:2c:5b:74:a1:9e:75:6d:f1:ef:55:95:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
Validity
Not Before: Mar 28 08:00:37 2026 GMT
Not After : Mar 29 08:00:37 2026 GMT
Subject: CN=57d02eaf5bafc7e0f1f11a8460667a487eb22548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:45:49:3d:ab:93:0e:b7:c3:ca:c8:1f:d9:
cd:e1:3a:45:04:b1:71:5b:de:83:94:48:85:ca:ab:
d7:1b:53:4c:9f:0f:ff:91:a4:ae:7a:6b:7a:79:fe:
59:f7:1b:a8:d3:40:70:2a:20:f2:43:73:66:bb:ed:
e0:55:1f:15:11:76:a6:8d:f6:04:c5:3c:eb:4f:9d:
24:b9:8c:2c:fa:8d:d6:ac:e9:de:85:87:9c:8f:bb:
49:89:2c:e7:5c:7b:d1:8d:91:5e:52:e3:c1:cd:45:
6d:2d:de:3c:65:e2:07:c4:5d:8a:0b:c4:94:8c:bd:
1e:59:ef:cf:a0:ff:66:8f:28:ae:86:f5:f4:0b:c5:
f6:be:37:4b:38:a5:22:33:16:b6:c1:44:61:ec:1c:
ef:50:41:49:b6:10:67:0b:ab:53:d2:bc:04:74:8a:
b3:28:8e:e7:bf:a2:8e:17:2d:49:db:9f:73:9a:12:
c5:99:54:88:25:d2:58:eb:de:c7:32:58:5b:00:46:
38:47:0b:42:68:95:44:fc:66:26:a1:af:cc:cd:55:
29:c0:ac:d0:16:e2:24:a0:9d:37:b4:f1:ed:c2:9f:
72:f1:cc:f2:66:6d:cb:9c:08:8f:d2:35:b9:76:41:
bd:2d:02:7c:0c:e4:47:48:79:c6:41:34:6d:2b:90:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:2E:AF:5B:AF:C7:E0:F1:F1:1A:84:60:66:7A:48:7E:B2:25:48
X509v3 Authority Key Identifier:
keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:00:eb:6a:9b:5a:8b:c8:97:7e:15:19:95:dc:d9:e8:8c:
7a:a9:cd:a8:d3:42:7f:36:ab:3f:ed:ee:0f:7c:72:29:41:ae:
f3:45:19:a0:15:f0:83:ea:27:00:91:5c:61:b2:27:91:97:4e:
68:0a:27:54:0e:3b:4f:95:d0:26:80:c4:d0:aa:cc:f8:2b:86:
74:89:45:d6:0e:52:77:06:0d:bb:05:ea:4c:28:3e:fd:4f:fe:
5e:a6:9b:36:2c:8d:5d:6b:b5:75:95:8b:7f:56:2d:06:b4:70:
f5:d1:ce:67:01:ca:59:fc:89:38:86:ea:88:fa:a1:42:f9:a8:
5e:23:85:cc:3d:57:11:8f:86:cd:7a:7c:96:8a:75:7e:27:28:
2b:0d:8f:a3:7b:17:aa:12:8a:5d:50:ba:70:51:a0:b7:43:54:
8a:a2:79:fb:6c:85:91:16:90:e7:46:0c:c0:1e:89:7f:68:69:
8c:06:c4:8a:67:eb:e3:70:23:e1:e6:99:8d:af:d3:9b:88:fc:
e0:88:9a:dd:94:49:8e:d8:d4:df:84:b6:27:21:d1:f7:36:85:
45:64:3e:01:ac:52:d8:0b:1d:a7:f0:60:28:da:5e:54:a6:34:
f5:02:66:e8:cd:34:df:71:a0:c4:3b:96:25:51:03:c5:39:f9:
e3:aa:b4:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdZgsW3ShnnVt8e9VldqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzc2NDdiNzI4ZjdjNTlmNjEzZTg5MDQ3NTQyZmE3ODU1
ZmEzNTUwHhcNMjYwMzI4MDgwMDM3WhcNMjYwMzI5MDgwMDM3WjAzMTEwLwYDVQQD
Eyg1N2QwMmVhZjViYWZjN2UwZjFmMTFhODQ2MDY2N2E0ODdlYjIyNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6BFST2rkw63w8rIH9nN4TpFBLFx
W96DlEiFyqvXG1NMnw//kaSuemt6ef5Z9xuo00BwKiDyQ3Nmu+3gVR8VEXamjfYE
xTzrT50kuYws+o3WrOnehYecj7tJiSznXHvRjZFeUuPBzUVtLd48ZeIHxF2KC8SU
jL0eWe/PoP9mjyiuhvX0C8X2vjdLOKUiMxa2wURh7BzvUEFJthBnC6tT0rwEdIqz
KI7nv6KOFy1J259zmhLFmVSIJdJY697HMlhbAEY4RwtCaJVE/GYmoa/MzVUpwKzQ
FuIkoJ03tPHtwp9y8czyZm3LnAiP0jW5dkG9LQJ8DORHSHnGQTRtK5BQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfQLq9br8fg8fEahGBmekh+siVIMB8GA1UdIwQY
MBaAFGDHZHtyj3xZ9hPokEdUL6eFX6NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEt
YTlkZTRhMzFmZTExLzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEtYTlkZTRhMzFmZTEx
LzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrsA62qb
WovIl34VGZXc2eiMeqnNqNNCfzarP+3uD3xyKUGu80UZoBXwg+onAJFcYbInkZdO
aAonVA47T5XQJoDE0KrM+CuGdIlF1g5SdwYNuwXqTCg+/U/+XqabNiyNXWu1dZWL
f1YtBrRw9dHOZwHKWfyJOIbqiPqhQvmoXiOFzD1XEY+GzXp8lop1ficoKw2Po3sX
qhKKXVC6cFGgt0NUiqJ5+2yFkRaQ50YMwB6Jf2hpjAbEimfr43Aj4eaZja/Tm4j8
4Iia3ZRJjtjU34S2JyHR9zaFRWQ+AaxS2Asdp/BgKNpeVKY09QJm6M0033GgxDuW
JVEDxTn546q0vQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:31 2026 by rpki-client