Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier: k+ufAhYWvWAvst2ps1daayc518LcVAJWlEOYtR2UYjY=
Subject key identifier: 83:AE:2A:13:96:B5:B4:FC:BE:47:52:A4:F0:91:FD:26:67:03:D4:E5
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial: 019CAE35CE7003C8B50C06023C3444A7EC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number: 0F19
Signing time: Mon 02 Mar 2026 11:01:27 +0000
Manifest this update: Mon 02 Mar 2026 11:01:27 +0000
Manifest next update: Tue 03 Mar 2026 11:01:27 +0000
Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: LBtQkz/9SZnzou/aZu1RJClGA9X44TK/940wREOPx3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ce:70:03:c8:b5:0c:06:02:3c:34:44:a7:ec:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
Validity
Not Before: Mar 2 11:01:27 2026 GMT
Not After : Mar 3 11:01:27 2026 GMT
Subject: CN=83ae2a1396b5b4fcbe4752a4f091fd266703d4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:11:0e:f5:20:d0:7e:18:26:a5:3b:b4:d0:
ff:13:81:1b:42:20:3a:7a:3f:66:e3:26:89:87:b0:
d4:09:ce:02:e2:df:5d:42:66:bf:f9:3e:80:de:ec:
5d:c8:d1:de:59:fc:1e:4f:27:3c:f9:0f:e8:01:72:
3c:e8:19:62:fc:21:c8:66:ec:c6:0b:00:0a:f5:d8:
6e:5e:49:f5:ba:e8:3a:53:40:67:de:01:f4:d9:30:
24:c3:4b:25:67:d4:a8:90:bc:55:64:72:b8:fe:12:
a8:26:98:a4:5e:d6:86:b1:e0:e4:3c:ed:c3:d6:26:
77:a8:5d:3b:52:92:6a:63:2b:46:03:94:89:06:3a:
d8:e9:ad:7e:35:54:06:23:39:96:d0:e4:cf:52:a8:
02:05:1a:3d:14:48:61:17:c6:95:2d:c0:cb:f1:60:
97:7d:95:0a:60:e9:32:62:3f:28:4b:c1:b1:b7:c2:
eb:89:c1:0d:20:e6:23:0f:d7:1e:af:47:e0:d6:d6:
74:52:77:a1:6c:5f:6c:9d:94:25:7b:97:57:86:a5:
31:14:5f:ee:9d:f9:5d:f8:7a:2c:67:de:29:ab:2a:
c1:cd:c4:c2:ba:53:1f:e8:66:25:51:76:72:63:ac:
a5:23:b5:a6:89:52:4f:f2:97:63:b9:2b:4e:82:63:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AE:2A:13:96:B5:B4:FC:BE:47:52:A4:F0:91:FD:26:67:03:D4:E5
X509v3 Authority Key Identifier:
keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:be:94:11:b9:62:53:ad:42:84:ed:c6:e6:2a:5d:4a:ea:87:
0d:ae:99:cc:12:a1:a8:90:1c:87:ce:a5:b1:b2:07:b0:38:1d:
38:f1:a9:6e:aa:ee:4a:ed:a0:c7:a1:1a:1a:36:4d:ce:b8:47:
68:fe:b1:20:78:19:cd:7d:0a:4c:18:a7:48:6d:02:ad:c2:98:
c3:eb:2d:cd:62:5d:35:88:61:3c:a3:00:f0:81:bf:c2:78:d1:
e7:fd:55:c1:93:40:af:35:4e:35:f1:b7:0e:0c:a8:a2:3e:4a:
14:bc:d6:6e:6f:cf:2c:99:4d:e9:5f:f8:fd:1e:ff:19:3f:e8:
7c:ae:8d:9b:43:75:72:7e:cf:ed:ce:2e:c6:a3:e2:cf:8d:ac:
56:8b:dd:02:1d:75:6c:b2:d5:4a:87:b6:8d:20:eb:95:16:fb:
6f:fc:0b:3e:df:1f:a6:68:e9:de:17:6b:2f:14:93:86:a1:c5:
9c:68:7a:03:8c:6b:ed:d1:72:e8:42:c8:61:aa:12:ba:c2:48:
b5:fe:7e:bf:23:eb:47:bf:c9:d5:17:fd:e5:84:c4:5a:fa:35:
1a:50:0f:63:bf:eb:39:cb:02:ab:0d:11:6e:c2:77:86:ce:f4:
9a:ba:2e:0b:fe:97:c6:c0:b8:d4:6b:57:87:77:3a:23:0f:4c:
fa:bc:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:54 2026 by rpki-client