
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json)
Hash identifier: nkFRrOhPYkcD+aEHIlGzYMjbh7bWs3vqdiM9wHQE8O4=
Subject key identifier: 3C:DC:B3:14:B6:F4:57:59:65:3E:A8:DE:14:94:38:08:5E:0D:79:CF
Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Certificate serial: 019DA341551B795DC6E2EDE306882E132A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
Manifest number: 1277
Signing time: Sun 19 Apr 2026 01:01:00 +0000
Manifest this update: Sun 19 Apr 2026 01:01:00 +0000
Manifest next update: Mon 20 Apr 2026 01:01:00 +0000
Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: SmErPfnpUkLMvU4i4fWohNQ4Faa9vr0b65+r7xoPeXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:55:1b:79:5d:c6:e2:ed:e3:06:88:2e:13:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d
Validity
Not Before: Apr 19 01:01:00 2026 GMT
Not After : Apr 20 01:01:00 2026 GMT
Subject: CN=3cdcb314b6f45759653ea8de149438085e0d79cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:ce:b0:81:76:f2:0f:98:8d:97:e0:8c:2d:
49:1e:96:d6:bb:5c:7f:e4:72:57:30:48:ee:0f:82:
6c:9b:f2:7f:e0:3b:4b:9e:a3:77:ec:f6:dd:b2:03:
23:fe:8e:31:19:96:33:46:f7:25:de:a1:f5:59:23:
bd:f1:56:45:bb:27:67:d8:4c:16:0e:30:24:bc:fc:
8e:76:93:8b:cf:1d:61:2f:68:c0:67:27:05:3e:cf:
c1:ef:d9:1e:22:48:b9:08:25:12:e7:1b:9b:f8:1f:
cb:87:f2:ec:74:5c:3c:5c:ed:30:87:e7:66:84:83:
4a:4d:83:1d:94:1f:e9:6c:cb:0b:9e:5d:80:2f:e8:
5e:3e:d0:b7:47:64:63:13:85:3e:7d:73:33:d0:dc:
a7:49:9c:1d:04:87:fa:21:29:9f:74:b9:50:53:3b:
de:d3:3e:aa:3e:9d:8b:eb:f8:7a:f4:aa:1f:03:2b:
a7:84:ff:94:f7:98:1a:cb:99:b3:6e:2d:de:b8:38:
3d:bd:ef:af:34:02:a0:41:cb:78:bd:da:49:57:fe:
b6:65:0f:6d:46:99:22:c5:1e:34:f5:8a:b3:56:6e:
b3:f8:19:a1:31:5c:27:ca:51:db:d8:16:99:5a:04:
7c:65:55:47:2f:5d:a8:b0:7e:0f:bd:78:35:12:e1:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:B3:14:B6:F4:57:59:65:3E:A8:DE:14:94:38:08:5E:0D:79:CF
X509v3 Authority Key Identifier:
keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:80:ef:ab:56:3b:47:4e:76:2e:f5:f9:ad:38:ac:40:93:e9:
40:c9:93:e4:59:7e:48:02:29:35:d1:e8:c9:a4:c2:d6:26:2a:
a2:92:98:e3:b6:b0:86:d5:1d:dd:89:cb:3f:53:76:fc:e6:e3:
de:01:b7:08:53:8c:cf:f3:24:29:74:21:74:e3:ec:64:24:59:
32:40:ae:7c:d7:01:92:99:1a:dc:d9:4d:90:70:55:10:67:7c:
98:c7:71:f8:b0:51:a8:09:c7:33:40:80:46:47:7c:eb:57:a1:
90:58:ad:1a:ef:eb:1e:a7:1e:27:b6:11:d6:37:9c:4b:bc:09:
e8:74:ab:af:43:7b:4f:59:06:6c:68:83:c4:6c:c1:43:f4:ee:
ab:d4:70:3e:ab:b9:18:a7:7f:e8:29:ff:4d:c9:ca:aa:72:2c:
9c:ea:ee:bd:6b:2e:13:fc:2f:16:3f:6f:b8:50:1c:c6:f1:c7:
b7:0e:ce:85:1e:25:14:7a:86:7d:e0:5a:4b:0e:ab:de:63:0e:
f2:dd:51:56:56:36:fc:1b:23:46:8b:00:8d:c4:99:2f:a4:a5:
0c:70:61:5a:89:1f:21:02:fa:a8:3a:25:6b:39:37:4f:eb:e0:
55:6e:b8:af:89:41:e9:f1:13:f8:34:36:2e:5b:ab:5e:03:d3:
9a:32:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:57 2026 by rpki-client