Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier: Hp7WilADRCreaLCaQyzJjpMRHMUq7lC2TUd8QFoCte4=
Subject key identifier: 89:6C:79:A6:A8:E3:47:21:88:6C:EE:A6:07:42:44:52:AA:A3:88:A2
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial: 019D265F5FA79434C3EC2B6A7EEC008503CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number: 0557
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: Y+sIPnhsgfDWSCFuOFXMonpOh75WcI+KuDV53qLQqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5f:a7:94:34:c3:ec:2b:6a:7e:ec:00:85:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=896c79a6a8e34721886ceea607424452aaa388a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:9d:24:fa:78:c1:0c:47:aa:68:3c:d5:cc:
11:e1:c3:08:44:c0:72:5c:55:b5:20:9f:f9:07:45:
c6:10:04:34:ff:cd:e8:56:bd:98:c1:e3:6e:60:b5:
61:c0:dd:0d:a0:c2:f5:0a:f1:75:3b:8b:21:a8:2f:
f1:0d:a3:9c:ec:58:e5:ed:3c:81:72:93:96:24:57:
27:91:92:93:f6:c3:15:20:94:d8:8d:64:b6:2b:19:
ba:81:64:39:ec:a9:00:4b:ff:11:85:2a:47:a5:d9:
d5:88:1f:ea:e4:ac:1f:d6:c1:6b:56:a3:6a:69:81:
57:63:50:0e:5d:29:f5:3a:e5:ee:34:7b:27:b9:b9:
50:3c:50:1d:28:40:3a:ae:1b:d7:3c:7d:a4:88:26:
e9:96:c8:79:34:64:e6:8b:b9:f4:65:8f:7c:da:19:
0d:e4:35:a5:49:a3:7b:3d:ff:fb:51:4d:fa:1b:9a:
f6:98:89:f4:f1:53:03:75:d2:60:5c:64:42:6e:6b:
f1:5d:6b:6e:ce:fe:af:f8:f6:1b:a8:39:f0:61:5a:
b2:5f:fe:ee:59:20:35:24:5e:f4:ce:fe:22:5c:7b:
df:e3:4a:a9:da:b7:eb:2f:a7:77:a8:03:a9:fd:03:
66:b1:60:db:ac:fb:38:b5:8a:f4:e4:0a:9b:da:bc:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:79:A6:A8:E3:47:21:88:6C:EE:A6:07:42:44:52:AA:A3:88:A2
X509v3 Authority Key Identifier:
keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:01:a0:71:fc:96:c6:e5:79:b5:22:be:9d:74:0e:ba:63:0d:
85:6a:67:93:ef:34:50:da:3a:0a:37:fc:d3:26:e1:bf:53:a4:
b1:78:f4:5e:87:04:92:43:7d:04:61:83:a2:9f:bc:22:b2:e8:
7d:f9:21:0d:c5:4e:5e:77:3b:b4:c9:2a:58:ba:4f:5f:52:cf:
fd:67:ef:de:4c:60:b7:9d:f2:a7:6f:71:63:70:65:23:d5:b1:
4f:49:48:89:47:f2:ed:e0:59:6f:cf:2e:3a:2b:8d:0f:11:12:
01:5e:c4:47:d6:7a:0c:4c:cf:f9:b3:2f:b8:c5:7b:aa:58:79:
b3:7c:c8:75:4c:a8:82:a5:fc:b8:54:28:27:d0:82:10:e0:05:
fa:b4:23:ff:d4:aa:39:e3:42:42:49:28:43:59:79:20:a4:8a:
a2:2a:f5:6c:7f:15:5c:a1:06:38:ef:de:08:31:db:db:ce:61:
a9:11:72:c5:3a:b3:b9:52:78:73:22:43:b7:43:7d:79:6f:aa:
73:21:a5:e5:41:61:06:26:ff:fb:94:f6:4b:22:60:ba:52:aa:
21:fd:85:01:99:db:b5:05:7c:0d:3e:c6:f5:7f:9d:8e:da:57:
7f:38:72:a8:c1:50:25:b4:bb:93:03:2d:72:54:dc:42:e4:31:
fe:a1:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:34 2026 by rpki-client