Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: 1xhfP2M+5hnKNkWBpyp3bH2MKDptvRarIMKCgk248hs=
Subject key identifier: 0A:04:AF:64:42:A7:EA:C5:87:5A:21:5B:83:9A:AE:41:B5:53:B7:C3
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 019CAB6BF225538B797698A4AA4DA792BD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 1344
Signing time: Sun 01 Mar 2026 22:01:44 +0000
Manifest this update: Sun 01 Mar 2026 22:01:44 +0000
Manifest next update: Mon 02 Mar 2026 22:01:44 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: 7xUJAQ67rx8BLRJ9JA6scJxG8pspO2g82hSvGFvSsO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f2:25:53:8b:79:76:98:a4:aa:4d:a7:92:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Mar 1 22:01:44 2026 GMT
Not After : Mar 2 22:01:44 2026 GMT
Subject: CN=0a04af6442a7eac5875a215b839aae41b553b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:e4:61:4f:4a:df:6f:5c:04:1d:8e:e7:75:
8f:ff:cf:2d:ad:81:fd:b2:d3:e7:5d:b0:b5:7c:38:
2b:74:b8:4f:e1:fb:08:1e:c7:40:36:7f:19:05:02:
dd:f9:f0:d0:bb:45:8e:f4:38:10:23:61:b7:81:8d:
b3:8a:65:dd:8d:35:01:36:c4:0f:76:b3:01:71:96:
29:34:5f:64:c1:dc:00:4b:26:31:e2:fd:2d:dc:72:
20:c1:f2:2b:0b:a3:ef:69:27:74:07:0c:39:d1:24:
9b:6c:dd:60:b2:55:97:e7:c3:97:f5:a9:a2:3e:2a:
3a:91:30:0e:9a:6d:87:d6:0e:18:4a:c5:83:eb:d1:
40:46:19:f9:0b:fe:a3:36:3b:30:8d:77:dd:dd:a6:
9e:a1:b6:a1:27:33:64:4b:ef:1e:f8:0d:05:df:15:
4a:76:f0:81:74:87:22:71:ca:89:c1:0c:17:b2:55:
f7:9d:a1:7c:15:f0:80:57:70:97:50:fc:af:5d:14:
70:58:16:13:68:28:20:60:bc:3d:ce:f5:85:d1:da:
c3:23:4a:0c:20:0f:97:19:30:c0:44:22:4f:85:91:
1d:4f:01:92:e3:47:2e:6d:18:7d:23:59:5c:86:53:
c7:3f:8a:f3:e3:7e:85:07:97:f6:a9:df:75:36:b0:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:AF:64:42:A7:EA:C5:87:5A:21:5B:83:9A:AE:41:B5:53:B7:C3
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:65:5f:91:5e:bd:a1:49:92:2b:72:cd:3f:b7:92:ab:f3:
eb:f5:20:59:03:f4:ee:47:6d:a2:55:e5:c5:64:ec:05:51:af:
65:cc:29:87:67:86:ea:b4:a6:c6:df:cf:ef:e0:44:88:80:65:
a5:83:9b:58:5c:c4:de:8c:60:ff:bc:db:00:d0:48:47:1b:9b:
9c:05:6a:d5:11:0f:e9:af:ed:c9:10:5a:fb:c5:9b:b9:d5:15:
3a:95:47:71:5b:77:d4:b6:9f:32:6d:61:d8:12:f7:b4:cb:99:
a8:9b:f9:77:73:07:85:73:0a:c4:15:e4:93:74:5d:e6:03:64:
3e:79:3a:36:cf:68:70:08:ac:c2:de:18:03:7b:e6:e0:4b:6f:
93:d0:67:a0:d5:94:fe:85:ef:99:e9:93:57:2e:54:62:35:24:
7a:56:7d:ba:ba:ab:21:44:d2:ff:e2:cc:60:03:e1:72:b7:57:
9c:53:80:56:d7:dd:67:57:85:6f:6d:1d:38:c7:18:2c:75:fe:
e4:8a:91:30:68:1c:78:db:6c:4c:4e:67:f3:01:21:cc:4d:d5:
1c:42:fb:f4:ed:3a:e8:61:b2:53:6f:f9:d3:a9:2f:11:d2:79:
32:04:29:7c:d4:f9:e7:39:0c:22:56:9a:c5:98:0e:38:44:49:
97:8f:ad:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:50 2026 by rpki-client