Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: JSMJ0j8PtQqREvsql+OgNMTGEPogNUJ+dPOMOTghdQE=
Subject key identifier: 3C:89:75:49:23:A9:8F:F0:B6:21:F0:69:80:DE:98:7A:59:5B:BA:D2
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 019D99CFBAF3E693131D1359F80ABEE07279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 1850
Signing time: Fri 17 Apr 2026 05:00:20 +0000
Manifest this update: Fri 17 Apr 2026 05:00:20 +0000
Manifest next update: Sat 18 Apr 2026 05:00:20 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: WcyLu+JZ+t9aBsNdFMIp367EoytM/9QBZ60RCwZ6Wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ba:f3:e6:93:13:1d:13:59:f8:0a:be:e0:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Apr 17 05:00:20 2026 GMT
Not After : Apr 18 05:00:20 2026 GMT
Subject: CN=3c89754923a98ff0b621f06980de987a595bbad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:ab:9c:71:e3:3f:c6:59:a8:85:e9:fd:8e:
d8:fd:62:f0:cc:79:35:6f:ff:d5:c1:d2:3e:b0:4f:
be:7c:19:86:cd:c2:00:07:c6:2b:b6:45:59:75:97:
e6:cf:3e:5f:44:dd:36:9e:0a:75:9f:c8:27:4a:bd:
32:27:c0:89:e3:2d:d5:a9:e3:71:ac:df:a2:aa:6e:
3e:d3:9d:f2:60:b0:c7:45:2a:61:b8:32:b6:62:ae:
8e:5a:7a:3a:87:63:84:5b:49:8a:f2:ea:01:d9:8b:
73:59:3e:8e:6d:15:15:5c:12:8f:80:4c:57:d1:4f:
b4:b7:88:f3:28:f0:65:38:98:7e:91:29:13:bc:bf:
60:89:f5:25:fa:32:5b:16:e2:cb:2a:03:6c:bc:1c:
b2:3a:1e:d5:e3:56:38:80:ba:4f:32:23:b8:99:97:
4b:79:8d:40:59:7c:d9:83:b1:44:84:03:20:39:52:
1f:97:d2:3d:c6:0b:a7:cb:0f:55:6b:66:1e:31:c5:
a4:df:a4:ea:f3:67:cd:04:74:92:df:f9:ec:89:65:
68:5b:31:67:9c:7d:b0:13:b0:6f:db:f1:37:d3:2f:
35:4f:e8:8d:95:6e:5a:02:81:46:b7:d4:0d:55:13:
67:40:e3:53:ef:22:06:03:e3:40:08:b4:f3:a7:3b:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:89:75:49:23:A9:8F:F0:B6:21:F0:69:80:DE:98:7A:59:5B:BA:D2
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c9:5c:36:a8:78:06:fc:b0:df:d9:e9:c2:ab:49:f1:b2:64:
52:7d:49:aa:d9:1d:73:e3:21:a5:9a:fb:1e:77:49:b8:34:69:
5e:51:72:9c:3f:fc:b9:ec:c0:ed:e4:32:d9:6c:b5:d8:47:0b:
a9:c3:94:5e:0b:14:37:b0:74:7a:18:8f:84:8d:1d:05:ac:db:
3e:fa:3d:62:2d:49:d4:c4:22:62:54:cc:f2:63:62:d0:d1:63:
3d:a6:0e:e8:78:64:88:9b:63:de:9d:67:71:6c:a3:ac:14:cc:
80:f2:4b:5f:6d:dc:8b:99:36:59:05:48:50:7e:9a:6b:04:82:
f0:90:cc:3f:1b:6c:41:9b:23:d0:2b:f1:59:58:bc:94:01:b8:
6d:fb:54:e5:d3:5d:0c:b8:99:da:4a:83:3c:33:59:e9:f8:61:
17:c2:09:cd:63:77:57:02:25:b5:53:bc:8d:b5:11:09:cb:36:
ce:2f:ad:89:82:05:94:04:8c:bd:d7:f4:31:32:70:58:96:f3:
01:35:86:de:fc:5a:b5:bc:cc:8c:63:c3:6e:07:91:24:c5:f3:
c7:f3:b9:0a:0f:05:49:10:7b:14:c3:33:52:c6:cb:5f:f0:0c:
50:08:f4:3a:0c:b6:81:99:16:64:39:3b:17:10:2c:90:2a:be:
4d:ec:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:44 2026 by rpki-client