Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: h1BoVvvYXco7jdTv+pMd6Eh0+XxgalFyMDB51FOqJCo=
Subject key identifier: 4F:F1:39:15:E4:D3:9C:18:61:D6:87:46:D1:55:85:6F:B4:C9:11:B1
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 019CAD22A82FF9024A48D2D648CA302D4001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0F7C
Signing time: Mon 02 Mar 2026 06:00:55 +0000
Manifest this update: Mon 02 Mar 2026 06:00:55 +0000
Manifest next update: Tue 03 Mar 2026 06:00:55 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: Trlv3m8dfVaUejS73PCB4tZaX27IyeTOVxz5OTKxNBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a8:2f:f9:02:4a:48:d2:d6:48:ca:30:2d:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Mar 2 06:00:55 2026 GMT
Not After : Mar 3 06:00:55 2026 GMT
Subject: CN=4ff13915e4d39c1861d68746d155856fb4c911b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:5e:c5:dc:ee:4c:bb:96:29:23:84:51:9f:
b2:15:17:45:49:5f:55:27:df:f3:a4:3b:e7:68:c5:
96:dc:db:fc:03:ef:36:fb:f6:73:fe:1c:32:b0:83:
a2:07:b9:7c:a1:eb:b6:d8:bf:3c:cd:5e:34:03:08:
d9:1a:31:20:0d:e9:c6:d3:82:97:e0:52:6e:27:ed:
32:6d:0e:4c:6f:b8:40:b4:7e:32:9b:93:2d:b1:31:
06:d0:7a:a3:c7:7c:e6:7b:8a:b3:35:25:65:92:b0:
98:c7:76:ec:34:b9:9e:e0:e5:99:a5:31:54:de:28:
b0:11:d1:75:7e:1d:a2:d4:bb:52:e6:82:fa:c9:84:
fd:31:cf:d3:1a:09:aa:fe:e5:b1:d3:63:49:97:2f:
3f:31:fe:20:75:5d:d0:e4:49:9c:8a:ed:be:e4:0f:
b3:57:a6:a9:74:f5:93:52:31:b6:1d:fe:77:cc:9e:
36:ae:06:e3:74:75:f8:e4:cb:9c:60:59:2b:2e:f9:
04:ba:40:cd:31:9b:e2:19:2d:67:ce:5d:0e:a4:4b:
b3:d7:73:af:c8:7d:ae:81:d3:69:20:9d:28:08:1d:
bf:48:6d:f8:49:e5:e3:59:40:02:48:8c:a8:09:55:
cd:25:27:e6:13:2e:f7:d7:82:44:d0:14:c2:47:02:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F1:39:15:E4:D3:9C:18:61:D6:87:46:D1:55:85:6F:B4:C9:11:B1
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:a3:83:90:97:cb:62:ab:dd:56:9c:79:32:6c:3e:6a:c0:
7f:4e:02:05:74:41:ec:87:7a:0e:2e:4e:7f:ab:8f:3a:bc:45:
96:39:0d:22:96:cb:5b:97:91:a9:28:8d:48:35:47:ec:4e:1b:
49:e0:ba:7a:db:d7:d9:9b:67:ef:cd:47:34:42:26:3f:80:96:
d3:00:2c:4a:8e:07:b6:ce:52:82:d0:40:fd:0d:7e:9c:06:d6:
0e:c0:8e:93:7e:9b:b7:3d:f8:ca:64:69:97:43:b4:90:e9:09:
9e:4c:98:9d:c4:d8:cf:19:b6:1e:81:17:4c:1a:bd:68:f3:c4:
de:9f:33:ec:ab:87:6b:12:b8:1f:fc:3b:ea:db:57:4d:ce:e8:
99:20:c2:40:46:bb:0c:42:ff:02:9a:35:a1:92:35:fb:34:a5:
a5:6c:95:42:a3:76:d3:33:71:59:20:50:0c:6c:b1:81:7d:5a:
3b:f2:01:33:20:6b:c0:f3:22:53:a8:d3:3b:e5:4e:df:2d:e4:
35:ab:c4:85:4c:d4:f2:19:0e:b5:c2:5a:d9:78:91:d7:4f:8a:
b7:ad:19:e5:eb:af:32:18:a9:13:de:bf:37:31:6f:4d:a4:d4:
dd:8f:d7:6c:38:f8:04:c3:dd:c3:ec:75:e2:08:f8:6e:a5:8e:
c5:45:03:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:29 2026 by rpki-client