Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: G6iqZldk2SlxuBt7ATwyfLiFeBAC02jKWCGaiQtO5uk=
Subject key identifier: B1:AD:7F:2C:95:64:6A:8F:B8:01:D8:51:A3:96:3B:2B:B0:8F:DD:4E
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 019D98F484DD4D5F9576625B894212DCDBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 0968
Signing time: Fri 17 Apr 2026 01:00:54 +0000
Manifest this update: Fri 17 Apr 2026 01:00:54 +0000
Manifest next update: Sat 18 Apr 2026 01:00:54 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: NYAB0InhugeqIeDbrOmxzAXo1Ts1tSNmger/BugDXuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:84:dd:4d:5f:95:76:62:5b:89:42:12:dc:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Apr 17 01:00:54 2026 GMT
Not After : Apr 18 01:00:54 2026 GMT
Subject: CN=b1ad7f2c95646a8fb801d851a3963b2bb08fdd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:ad:77:bc:e5:af:c5:be:3b:f7:c9:20:70:
32:89:cd:b9:d5:df:4b:bb:9e:4f:4e:7a:5e:5a:69:
cf:29:c8:98:b1:0d:83:b9:31:8b:c4:22:ab:3d:5b:
0b:2e:dc:61:1f:19:06:7b:0d:da:03:79:7d:3d:5d:
a1:b7:4e:05:61:92:76:99:5d:d7:da:4c:28:38:ea:
68:0d:d8:49:96:fb:88:0c:99:ea:23:84:24:d3:7f:
ff:ba:34:60:ee:e0:2a:3a:80:c4:3f:91:6e:ca:54:
0f:0f:d4:43:6c:78:83:c9:c0:2d:dd:3d:15:f5:a0:
c4:09:90:87:bc:f9:46:1e:f9:ba:51:0a:78:f6:7c:
88:c1:c3:1c:5c:6f:ae:10:f7:bd:43:02:40:e4:1d:
ea:e3:f3:6c:21:d1:0e:6d:3c:e9:a1:24:c6:64:28:
90:ce:c4:a7:8e:2c:e5:ff:ec:87:10:8f:09:0f:57:
14:04:f2:f5:6b:00:60:58:ce:2b:a9:94:3a:2a:f0:
b7:e3:26:14:21:d6:ad:f0:b1:cb:94:23:33:09:ac:
53:e2:b2:99:e1:0a:27:3a:16:18:ca:e1:d5:c7:30:
19:83:cc:b4:92:05:be:37:24:b3:64:36:60:73:91:
7c:a6:77:78:ce:4d:9c:3d:0e:4c:bc:43:d3:56:f6:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:7F:2C:95:64:6A:8F:B8:01:D8:51:A3:96:3B:2B:B0:8F:DD:4E
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:46:bc:56:34:95:30:f7:c5:4e:9b:1f:ce:d6:9f:21:6d:
c7:f1:90:f0:00:4d:2c:7d:25:12:73:ca:1d:8c:a4:c6:e7:e5:
6d:68:e8:8c:1a:57:7a:b0:d5:51:68:4d:de:cc:9e:ce:d4:84:
e2:43:09:31:72:f2:ef:bc:e6:e6:12:6b:fd:4a:fd:ca:31:49:
ab:b6:75:30:1e:57:d2:a5:09:03:7f:09:a2:4e:77:4c:bf:2b:
af:5b:c9:2e:58:98:37:e9:52:c0:3e:ea:df:59:09:70:72:8f:
8b:5d:9b:c1:68:e8:da:f6:75:89:ef:93:7d:c5:23:35:54:10:
93:7b:cf:39:f5:78:82:19:a9:44:5b:69:61:9f:31:c1:0b:70:
1e:4c:33:c8:91:19:bc:f1:c4:9b:1b:4d:39:18:35:82:84:da:
ad:b4:6a:ba:69:38:e8:84:97:e5:14:d2:09:dc:88:87:0d:d3:
6d:b6:e0:43:9e:69:d7:8e:32:6d:b7:a2:1a:da:0f:cd:69:3f:
25:0b:3e:7b:44:bc:3d:2b:1a:c7:c5:c3:73:5b:1c:e0:fa:ed:
9b:5a:ab:39:4c:9c:2d:4c:20:42:e9:fc:ee:d6:80:8d:4f:c9:
98:4d:f3:25:8f:3c:fb:91:5b:d8:94:e2:ee:ed:17:4f:f7:e7:
b9:95:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:05 2026 by rpki-client