Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: DzdVHJ4S1F8kvSFxdk4T6Z7krZBZ2+NVQvHkbMTglnU=
Subject key identifier: DC:64:6D:3C:04:7D:C8:2A:B6:2A:38:00:C4:F8:A2:A8:57:41:A8:99
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019D9BBEE8CB82D5B5B0764339EA0356F96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0F94
Signing time: Fri 17 Apr 2026 14:01:13 +0000
Manifest this update: Fri 17 Apr 2026 14:01:13 +0000
Manifest next update: Sat 18 Apr 2026 14:01:13 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: vF4pbgp5Ee7MgWIY5IKnlkAAuGrWadJ6a3ku4Lys3SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e8:cb:82:d5:b5:b0:76:43:39:ea:03:56:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Apr 17 14:01:13 2026 GMT
Not After : Apr 18 14:01:13 2026 GMT
Subject: CN=dc646d3c047dc82ab62a3800c4f8a2a85741a899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:4a:1c:f3:42:57:0e:80:83:40:f5:ec:e0:
b5:57:e8:95:65:4d:13:f8:1c:92:0c:46:68:c4:2c:
38:7e:7a:bc:20:3a:8c:a3:d3:5e:a5:58:96:92:dc:
9d:0f:98:aa:a0:59:72:93:d7:1c:58:c1:af:43:81:
be:9e:9e:15:2b:ad:c5:e9:a4:2b:1e:68:98:3c:7e:
ac:21:cf:89:40:2d:4f:27:07:24:c5:3f:a6:da:12:
b0:70:4b:08:7d:b7:39:ba:26:1f:b0:8c:61:c0:50:
47:e1:bf:cb:ca:d0:65:5b:c5:03:1b:0a:6c:ea:94:
63:b3:b4:24:e9:04:d0:05:33:52:0e:a1:fc:bb:d6:
1f:d2:09:c8:58:fb:5b:47:45:5f:31:71:14:5d:26:
14:92:b5:0b:fa:91:31:14:2d:c0:2d:58:ff:bd:e1:
7a:5f:41:35:e5:f8:e2:27:dc:52:53:8c:f5:fd:8c:
d5:80:6c:7c:4c:ee:07:82:d4:b8:8e:9f:82:ee:61:
86:8d:94:34:b9:ff:14:61:2c:5c:01:ce:71:74:a2:
48:a2:d4:04:e6:35:de:33:8f:9e:ee:42:d4:d9:29:
d5:8a:f6:e5:80:6b:ab:76:c8:a6:88:89:47:82:f8:
dc:cf:09:06:97:6d:25:66:38:cc:0a:a7:42:64:ef:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:6D:3C:04:7D:C8:2A:B6:2A:38:00:C4:F8:A2:A8:57:41:A8:99
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:60:38:c9:d7:2d:3c:88:6b:4d:d6:75:d1:58:39:43:ed:
04:a0:0a:1a:4d:d2:3c:5a:81:53:72:83:22:3e:9d:60:03:54:
b2:60:d4:24:02:54:10:c2:08:c1:06:1b:c1:c7:20:5e:74:38:
5b:6e:d6:71:27:c3:88:3c:f6:55:25:50:52:58:99:4e:d9:e1:
ba:03:c7:34:ef:a5:97:6c:50:65:29:38:7c:54:f9:74:bf:2f:
71:8b:bc:35:e7:85:1e:7d:31:95:f5:ed:48:8f:3e:ae:04:2a:
0a:9f:d6:9a:b6:c7:3b:46:29:ea:f4:e9:ca:d2:dd:e6:87:2b:
f0:e6:35:2d:b6:65:b2:5f:f3:a6:cd:f1:d9:bd:8d:d5:9b:39:
8a:fa:83:7e:7e:6d:7d:5f:77:20:59:9b:d3:28:92:0a:ac:cd:
6d:9e:23:8f:d0:42:83:ef:67:86:0a:a1:e6:48:c1:e0:bb:83:
3d:a5:11:75:83:3f:be:44:2b:2c:8d:3c:e8:2b:9f:de:18:4e:
67:30:12:06:cb:98:77:ba:50:19:4f:8a:0e:e1:0d:0e:71:7f:
ac:44:4b:75:dd:7b:8f:4c:91:63:1b:13:2a:30:fb:24:67:f8:
f1:52:7a:bf:b9:af:9d:26:0d:23:82:c6:7a:eb:5f:4f:54:fd:
41:ee:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:25 2026 by rpki-client