Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
File: YMjVd0f3KXAO8vVhT2397I0Rny0.mft (raw, json)
Hash identifier: oKIeoMj4UoT3Lmd6UnbH3iYuI2PJCXcO4BWOC3tcCt0=
Subject key identifier: 97:28:7F:D0:8A:F7:45:BD:52:6A:48:71:83:BF:FC:88:42:92:7B:63
Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Certificate serial: 019D27E076B19AA1153650ACEEF9CA1A9761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
Manifest number: 1164
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: YMjVd0f3KXAO8vVhT2397I0Rny0.crl (hash: ORt5EyT/hB/9loCnjDu9uPtYpQ9rEkJAuCv1uCF4dAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:76:b1:9a:a1:15:36:50:ac:ee:f9:ca:1a:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=97287fd08af745bd526a487183bffc8842927b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:bf:0a:e6:0d:06:95:9e:b1:84:a5:a4:26:
71:d3:73:e4:07:a5:c4:46:41:9a:fa:83:a6:9f:f8:
34:95:80:be:79:07:fd:f0:47:9e:04:2d:1b:e1:41:
8a:f9:56:7b:af:98:bc:3d:cb:a0:fb:ae:d3:11:ab:
e2:38:aa:ba:80:40:34:0f:4c:11:85:d8:27:37:34:
9a:ba:0c:9c:c9:ff:40:ac:cb:e5:f6:a9:f5:2e:06:
28:14:98:b7:f0:4d:5f:ec:52:e1:8b:73:24:a6:3f:
66:db:01:68:d2:4e:bd:ca:f4:38:71:86:ab:79:91:
31:fd:fd:7d:75:91:e4:41:db:f3:ec:c8:48:7e:00:
d4:12:3f:71:99:fa:b4:30:26:6b:86:a2:ca:ae:04:
c8:1f:f0:71:2e:3d:be:3f:35:c2:97:6e:9e:6c:d9:
2b:c5:7d:5e:0b:9c:bc:5d:c7:bb:b4:e3:43:a2:7c:
ce:57:6b:08:d9:72:d0:c1:b7:9c:e4:be:53:7a:65:
5b:3f:e1:77:18:bd:09:09:ea:15:48:8a:f0:af:53:
0a:1c:69:9d:aa:1b:b1:95:95:39:0f:f0:89:35:ba:
5a:01:77:93:b3:20:e3:e0:cd:fe:e4:d7:f0:4a:3d:
f7:d7:df:0f:54:93:5c:0b:51:ad:bf:5a:e9:dd:4c:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:7F:D0:8A:F7:45:BD:52:6A:48:71:83:BF:FC:88:42:92:7B:63
X509v3 Authority Key Identifier:
keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:63:67:70:67:e4:db:8c:df:f9:3d:3b:29:15:f7:e5:85:
62:24:9d:68:8d:bf:e3:ff:06:cf:d0:b9:85:9b:26:af:57:09:
19:50:5a:7f:6d:6e:03:c4:8d:33:a5:fb:e9:da:cb:e0:a9:73:
ce:3d:92:e7:21:d6:9c:52:b1:7d:9e:ba:85:8b:e5:41:98:be:
b1:ff:a5:46:5d:d7:33:f8:8f:42:01:37:cf:35:ad:18:a9:29:
32:11:d9:6f:a3:76:8b:53:68:f0:7f:f9:08:86:65:be:f1:be:
2a:54:bc:73:8c:11:4c:e8:4f:1c:fa:b1:ee:37:3b:4e:c2:9e:
2e:f0:09:c2:a6:9a:5e:82:56:14:71:25:4d:ec:b2:70:d1:0c:
27:04:91:5e:a9:1a:b9:8e:09:cd:67:a7:30:aa:f8:de:11:07:
36:ed:09:e1:97:17:04:5e:c8:8c:e4:ee:a1:69:82:ee:e9:01:
67:6e:d0:3d:e4:e2:8c:f4:21:15:ea:55:6b:16:1b:4d:5d:f7:
61:0c:4f:35:08:1c:42:59:0b:9e:4a:25:92:80:ff:17:5f:ac:
ed:49:36:c7:3f:4a:ab:f3:6d:e2:02:11:f7:39:0e:8a:32:02:
2f:7e:8e:ed:59:0e:75:92:d5:69:fe:8c:da:0f:92:52:9f:73:
3e:d1:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:35 2026 by rpki-client