Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: c2oMCNnuFPVF/yF8ZgCPbej4hGD6XO6hr7U76e6n2DU=
Subject key identifier: CE:C7:EC:3B:46:80:7D:53:15:77:D8:BF:50:E2:48:A8:F7:2A:C2:0A
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 019D9AE332571A3AE63EFBEE5128C1A06B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 13C0
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: Akb9gA4uesYqSvz2alnF+jiung1b+ln46IAu7XS62mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:32:57:1a:3a:e6:3e:fb:ee:51:28:c1:a0:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=cec7ec3b46807d531577d8bf50e248a8f72ac20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:3e:90:44:58:71:ab:0e:39:47:68:43:4c:
7f:26:0f:44:32:a1:12:17:ea:e4:e0:8e:d6:6d:6e:
a3:3c:3b:a5:b8:f1:e1:b5:e8:fe:b5:dc:18:71:f9:
d1:04:97:90:bd:78:6a:2c:e6:ad:f8:3f:26:22:6e:
c5:69:50:1c:de:26:f8:63:87:23:5b:c0:2b:1f:6f:
5f:27:6b:c3:28:ec:9f:32:bc:51:7b:b5:67:73:ec:
df:73:c4:e1:49:ac:54:da:cf:ed:03:8c:2a:48:3f:
b6:45:26:d8:6e:fb:e0:7c:e3:2d:62:ed:c9:7f:21:
3d:5c:3c:99:16:7a:1e:94:f0:c8:eb:8c:13:1b:b6:
62:fa:cc:5e:13:d7:8b:99:6d:1e:93:04:1a:d9:78:
4c:d6:b7:3f:fa:34:de:cd:ab:25:83:4c:c9:16:8d:
8c:95:db:a2:f7:a2:66:48:93:ef:b4:eb:53:2f:b9:
2a:5e:19:43:85:01:00:69:f3:41:5a:c4:93:45:0b:
a6:5c:48:b0:cb:e8:86:c2:45:58:77:0d:64:74:69:
87:d2:13:37:71:e7:4f:cc:6c:67:00:59:30:3f:1e:
22:41:7a:30:e9:30:bb:86:6d:e5:5b:38:81:ba:a3:
f4:af:c8:20:6e:da:59:2b:6b:6d:2d:a3:eb:eb:47:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:EC:3B:46:80:7D:53:15:77:D8:BF:50:E2:48:A8:F7:2A:C2:0A
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:71:09:9c:ce:65:98:40:44:78:4e:65:41:48:55:19:1f:
44:d9:ff:e8:9e:2c:14:a9:97:75:95:98:e8:a8:de:ae:1b:f0:
ab:fa:2e:5f:d5:d9:1c:2e:94:19:a7:56:a4:56:5d:52:f2:3e:
c8:53:94:1a:18:bd:c7:91:29:3f:6f:f4:35:47:02:3c:47:2c:
49:90:2f:b7:07:ef:09:13:bd:b5:7f:a1:6e:91:05:b8:b2:db:
82:fc:14:7b:63:2b:df:e1:6f:ad:c3:07:05:da:53:8d:eb:f8:
58:ba:54:6b:6f:97:45:64:99:f8:cc:b7:2a:90:78:b7:29:66:
a0:8c:6e:f4:f9:d9:4f:54:fd:8c:fa:9a:51:92:d5:25:5c:f7:
e5:4e:36:d9:7c:f3:fe:60:34:d1:47:6b:e1:70:c7:7a:5c:f4:
82:b7:86:a8:2f:30:fd:ab:9e:69:ff:c2:29:70:ea:81:34:97:
b2:b8:7f:c7:e5:5c:ae:50:5d:c9:08:6c:9b:2b:d6:9f:75:b6:
73:7d:4d:2d:0c:bb:b6:c1:93:a1:6d:cc:f2:78:6c:70:b3:48:
c3:3d:e0:57:0f:5e:a6:23:bf:44:72:6c:7c:9d:64:85:4b:c1:
66:97:de:e5:fd:bb:62:b5:cc:44:a7:8f:7b:93:6b:57:ab:92:
72:af:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:59:54 2026 by rpki-client