Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: sDqE5oKbuy0/Mm7axWMjBT1ydaXo9ukr18AnRfH64Jk=
Subject key identifier: 97:E8:73:DB:3F:B4:D7:AB:EB:E6:DA:0B:3A:60:CC:32:87:D6:6F:6A
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 019CAEA3CFC7DC8546FE602AE93D20AABD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 110C
Signing time: Mon 02 Mar 2026 13:01:37 +0000
Manifest this update: Mon 02 Mar 2026 13:01:37 +0000
Manifest next update: Tue 03 Mar 2026 13:01:37 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: 7cWEfwVq/zwq1s05CA5vKJgJ90xP3mywrk5rjfod+T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:cf:c7:dc:85:46:fe:60:2a:e9:3d:20:aa:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Mar 2 13:01:37 2026 GMT
Not After : Mar 3 13:01:37 2026 GMT
Subject: CN=97e873db3fb4d7abebe6da0b3a60cc3287d66f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:3a:88:6b:96:52:2c:11:bb:3a:17:aa:fb:
42:45:c7:4e:be:40:34:01:d0:04:a3:d8:86:e8:38:
45:04:38:9e:64:a9:c3:0c:82:a7:f4:31:cf:53:bf:
32:31:43:4e:1c:ae:85:a5:74:91:15:47:48:be:f6:
f0:cc:2e:af:d4:0d:9e:46:b2:d0:ca:e9:8b:d5:25:
0c:7c:31:40:bb:51:86:f9:cf:e4:cf:57:97:37:e5:
52:f4:40:2c:3c:44:78:62:8a:6b:f5:0e:51:f8:aa:
98:59:c4:d8:d8:11:fe:47:16:ff:15:b3:9c:91:6e:
ad:6c:3b:3a:1b:24:82:01:13:b7:10:4c:ba:ff:f0:
03:bf:ea:41:fb:00:f0:83:80:8b:9b:ed:ff:5e:61:
b6:cf:8f:50:e9:04:80:66:2e:7b:02:e2:22:e8:d1:
35:ad:a9:67:44:9d:39:65:1a:88:9a:85:31:b7:d3:
62:42:2a:7f:c3:0b:d6:9c:42:3b:68:d6:33:65:62:
49:c7:7f:33:3d:95:70:32:84:58:28:58:d0:fd:a1:
b9:f8:c9:08:2b:fc:be:e0:96:49:3a:01:a3:d4:30:
2b:ac:f7:c1:ea:73:f0:25:7a:77:ef:44:12:2d:68:
5d:a0:ab:3e:8e:4a:16:1a:e9:4e:27:d5:9e:bb:1f:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:73:DB:3F:B4:D7:AB:EB:E6:DA:0B:3A:60:CC:32:87:D6:6F:6A
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:00:a7:1a:c6:c2:9e:1f:12:d9:91:ed:ca:cb:22:78:09:d0:
86:42:88:78:b9:e0:54:8a:55:70:04:22:97:79:58:c1:b1:80:
17:d6:76:0c:9e:50:e8:97:51:89:7e:b3:71:d3:08:30:58:9d:
e2:44:6a:20:1d:47:54:85:72:58:d6:fa:71:00:f8:e3:40:d8:
f8:70:02:87:4b:fd:fc:92:62:84:88:8e:02:33:22:0e:cf:13:
19:19:f9:b5:e7:01:89:c8:fb:37:80:35:8b:99:f3:6a:f2:f6:
26:81:f2:6f:8e:00:fa:81:0a:3f:8d:d3:60:2a:d5:6d:0d:75:
05:24:cb:f7:4a:3f:42:e7:04:43:37:f9:09:e5:b5:26:fe:2a:
21:02:32:63:e6:e6:6b:15:a8:d4:ac:77:66:4a:9d:05:c1:68:
3d:8c:55:9a:ef:19:d6:f1:23:ec:81:3c:e3:c9:1e:88:45:2a:
36:6d:25:f9:43:fb:5c:7a:a0:8f:8e:51:47:17:47:6b:9d:49:
67:6f:7a:03:fb:0f:92:77:cf:05:99:9e:5e:5a:02:c4:4c:1a:
d6:12:6e:c7:8e:1c:2d:a7:ac:02:a0:28:ae:65:34:52:71:5e:
b9:3f:7d:5e:3f:e2:98:b7:bf:df:e5:12:45:50:0b:73:fe:5b:
6f:c1:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:57 2026 by rpki-client