Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier: aWd0h0jAcqavE1q5fMcuNSISTw2UGV4IyLOPVk/FIFE=
Subject key identifier: C6:F8:B8:4A:F0:8D:62:DD:62:00:3B:05:46:8D:FC:69:76:20:53:5E
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial: 019CAC104B4A5F6FF58CEC9F86124BBF2C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number: 11F7
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: WKBNANhPrPuUvTXQcccYsbWM9unBplbJWYLTX2GjzOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4b:4a:5f:6f:f5:8c:ec:9f:86:12:4b:bf:2c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=c6f8b84af08d62dd62003b05468dfc697620535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:ef:2f:0c:a6:35:59:b8:ba:c3:e6:77:b0:
6b:12:24:e8:31:a3:e7:81:f8:1c:82:74:72:95:b1:
ee:ba:8b:f3:43:cc:ad:96:9f:83:c8:82:d2:62:88:
ec:f7:d2:69:7a:f2:10:39:b3:60:74:31:b8:70:66:
86:ed:c7:4b:a2:49:1f:20:a4:2e:ab:3c:a5:27:c1:
f1:31:76:1d:e0:03:72:cf:64:d7:b1:3d:b8:6e:fc:
75:4a:83:a4:cf:25:d7:64:4c:72:f8:a4:b0:c6:93:
87:57:90:95:4a:0b:fc:28:8c:40:30:a0:51:1b:e9:
6d:7d:4f:54:8b:20:82:a1:71:ba:71:e3:71:c4:6e:
66:55:36:d8:63:8f:c0:75:cd:a6:99:17:3c:92:7f:
da:64:10:46:cf:a7:53:b0:3c:70:b3:8a:4a:46:d1:
08:4c:d0:db:ea:8b:dd:d9:49:8c:29:7b:57:44:88:
fe:08:21:06:86:99:0e:d0:72:1e:ab:b2:94:37:4e:
60:a4:9c:5e:15:cb:41:b0:b2:b4:6d:55:39:da:af:
a6:a9:2e:d9:d3:6b:a5:f1:bb:45:12:99:15:a6:09:
93:45:33:1c:ae:55:8b:45:66:00:4a:90:e6:1d:c7:
28:f2:c3:e6:68:16:3c:1f:06:13:8f:af:aa:21:ca:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F8:B8:4A:F0:8D:62:DD:62:00:3B:05:46:8D:FC:69:76:20:53:5E
X509v3 Authority Key Identifier:
keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:b1:31:d7:94:3b:e4:2f:00:d1:b3:01:ed:4d:80:ec:63:
3c:4b:7f:c4:57:cb:04:7a:fd:78:bd:e0:e4:81:08:bb:ad:f5:
bc:44:e7:09:f4:0d:e8:48:c7:a4:f0:70:9f:f9:46:92:1b:67:
48:46:18:6e:39:77:99:78:57:06:a6:b1:a6:99:40:38:8b:d9:
1f:37:bc:21:3e:58:ae:4c:41:f7:2b:18:00:76:48:6c:41:68:
c5:33:c9:46:44:26:a7:dc:33:7d:8d:0b:a6:35:c8:72:cc:d4:
1d:0f:b0:ad:d1:9d:e6:5d:6c:fa:67:fd:50:b1:b0:82:1f:1b:
81:97:a6:85:9c:17:40:c2:1b:26:37:4f:80:93:10:c9:bf:dd:
da:06:4c:15:ee:37:8c:11:95:86:70:a0:8c:f8:83:37:29:35:
4a:8e:5f:2e:cb:31:2b:99:c9:72:d9:8f:4e:fe:68:91:3c:7d:
0d:31:c4:81:c9:14:be:53:63:fa:6f:c8:ce:79:06:d7:70:1d:
df:62:38:30:89:47:42:a9:06:ba:4c:42:90:09:b1:9a:80:00:
52:18:65:0b:05:a5:70:91:26:72:96:f4:4d:51:ab:2c:32:0d:
b4:09:c8:0e:a6:1b:22:7e:6a:90:74:54:02:01:7a:39:a8:e7:
6c:83:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:21 2026 by rpki-client