Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: ua8tO1ogZ/SMcUzXqxEbvq4b0icGviI/Fgcch/2K8x8=
Subject key identifier: 56:CE:E3:3A:2C:0A:69:4E:13:8A:C6:F5:F4:DE:5B:D3:CD:75:DD:F1
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 019CAA58A81FE0F833B364E72C6302815C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 17:01:02 +0000
Manifest this update: Sun 01 Mar 2026 17:01:02 +0000
Manifest next update: Mon 02 Mar 2026 17:01:02 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: PiP6TvERlKWZjZC3SrjBkHLZaA3s5DFKbuHvbr7qILQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:a8:1f:e0:f8:33:b3:64:e7:2c:63:02:81:5c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Mar 1 17:01:02 2026 GMT
Not After : Mar 2 17:01:02 2026 GMT
Subject: CN=56cee33a2c0a694e138ac6f5f4de5bd3cd75ddf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:0d:f4:9d:8b:7d:c3:a6:80:31:c1:e0:96:
47:06:26:07:df:0c:1d:fb:d7:b7:e0:0c:ce:04:e6:
db:07:79:6a:7a:0d:97:c0:71:4c:b7:23:38:f2:5e:
2d:70:4d:1c:6f:21:39:a5:f5:b5:a8:8a:ee:98:10:
1c:2c:e9:f0:94:26:57:2a:bf:17:5f:37:ec:ab:78:
ed:8b:06:44:52:e8:72:6c:a9:df:42:ce:d6:86:64:
1a:81:b1:79:ef:c0:0a:ef:80:8a:f8:b0:cc:38:cd:
78:67:fa:17:eb:93:e3:e4:b4:f4:ba:35:8d:78:33:
4f:b8:0c:09:7a:7d:e9:73:2b:dc:87:5d:3c:0b:3a:
c8:89:9c:b4:b6:88:f4:1c:4e:7b:25:90:15:61:e5:
02:50:8f:9e:90:8b:51:e2:46:ec:bd:4c:6e:a2:bd:
80:b0:39:c9:ab:bd:15:8b:d0:37:31:15:4e:dc:86:
9c:03:35:90:04:48:1c:74:b4:98:35:b8:15:79:25:
f7:00:0c:e0:5d:19:d6:df:9b:57:3f:d4:ee:e8:b1:
07:72:7c:4b:3a:ce:97:50:2c:24:e4:e5:af:29:86:
dc:16:83:8e:df:0a:ce:f1:01:90:ac:31:d7:a1:55:
64:b8:02:5a:95:69:34:75:e7:4b:b2:bd:85:17:1a:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:E3:3A:2C:0A:69:4E:13:8A:C6:F5:F4:DE:5B:D3:CD:75:DD:F1
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c5:73:02:11:8f:21:0d:67:74:92:d5:c4:64:83:25:dd:a7:
bc:0e:6f:85:ac:2f:06:1d:54:53:2e:12:17:96:ef:c7:4d:f4:
4b:d4:4c:2f:39:dc:37:41:8a:3c:9a:03:e6:7d:2f:58:ac:b7:
12:c8:bc:89:1a:8d:dc:3d:36:11:30:da:a5:85:2d:47:53:e5:
bf:cd:26:07:df:a9:aa:3c:e0:f7:f5:33:f7:33:1b:dc:02:b5:
65:f6:46:dd:9e:1f:68:09:8a:7a:69:61:5e:17:1c:b3:60:46:
8b:84:c2:dc:0c:9d:6a:25:a8:94:d7:2b:f3:94:72:a0:ca:88:
c3:c7:22:21:a7:f5:70:7c:bf:85:e0:2a:b9:f9:9b:18:71:4c:
51:af:61:a3:90:10:4d:f4:03:36:df:b7:9c:af:62:f5:69:13:
cb:09:29:9e:db:58:18:6f:84:ef:c4:ab:9b:ef:73:ed:cc:c9:
2e:a2:ca:0d:7d:c6:95:de:cf:8a:2e:6a:da:a8:2a:c3:f5:35:
3d:99:95:87:07:05:d8:34:c9:aa:dd:92:f8:8b:24:62:f6:83:
b7:07:ca:b2:fb:bd:68:e9:4d:61:f7:4e:db:58:f1:46:9f:be:
6a:da:e0:ba:b0:e3:9e:8a:65:93:9f:61:e2:a2:28:47:0b:41:
14:09:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:53 2026 by rpki-client