Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier: buXiCHW2c9YVIqWw9QB6yOXp5opTE5eDh1VkXmm3KwI=
Subject key identifier: D3:25:F5:42:C7:E1:BA:75:15:52:9E:20:3C:2D:E1:8D:87:4B:B7:28
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial: 019D9AE2F343D7A06AE9677A757AC696D2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number: 0566
Signing time: Fri 17 Apr 2026 10:00:57 +0000
Manifest this update: Fri 17 Apr 2026 10:00:57 +0000
Manifest next update: Sat 18 Apr 2026 10:00:57 +0000
Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: CnR2TZAUG+jLw9ZbihTobp7BQ8wiLz9WlL0P5e5buMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f3:43:d7:a0:6a:e9:67:7a:75:7a:c6:96:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
Validity
Not Before: Apr 17 10:00:57 2026 GMT
Not After : Apr 18 10:00:57 2026 GMT
Subject: CN=d325f542c7e1ba7515529e203c2de18d874bb728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:ef:89:c8:c3:bc:f0:eb:70:1f:8f:b3:c3:
9c:f0:f6:90:cf:c5:45:19:f7:10:10:7d:9d:c6:a0:
f4:b2:45:79:ea:5e:ad:b9:bc:95:24:19:a4:bf:45:
93:04:26:de:19:0c:97:fc:c4:8d:b7:dc:a0:b7:b6:
14:a1:48:7b:0f:a0:d6:c0:2b:f6:ae:62:86:49:e7:
7e:b9:c9:2b:72:5e:45:f2:2d:ed:1e:2a:db:69:71:
42:24:88:42:86:d1:19:c7:bb:86:17:53:f6:99:68:
bf:36:05:6f:5d:7e:da:08:d3:e9:f1:f2:e4:2a:68:
ef:ae:10:b9:5a:39:92:71:50:0d:12:4f:27:5b:9f:
b0:76:5e:79:44:f2:a6:45:d2:1e:0f:4c:3e:e8:55:
77:ad:ea:00:88:35:23:c2:d3:3b:8b:2f:57:29:97:
59:b1:61:08:0f:e3:3f:b1:06:4f:6f:a9:78:5f:d5:
e2:88:f4:d1:a5:49:d7:b6:26:f5:2e:12:78:5f:67:
a0:d2:65:75:e3:bd:27:1f:c1:9b:2b:f5:dd:57:7d:
13:e8:ce:28:50:25:9e:22:17:d3:cf:7e:38:db:04:
fe:9b:9a:d6:ee:75:9c:74:9a:00:83:70:c8:6f:a4:
5b:25:09:da:02:a2:c9:02:a8:07:89:3d:b4:82:67:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:F5:42:C7:E1:BA:75:15:52:9E:20:3C:2D:E1:8D:87:4B:B7:28
X509v3 Authority Key Identifier:
keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c1:d7:91:cc:83:31:ff:2e:f0:35:f3:8d:ab:3c:2d:59:35:
c5:f2:7c:c1:b3:50:87:da:7b:5c:41:09:6e:36:48:0f:0e:64:
2e:bf:4b:91:a4:fa:4b:86:14:17:d7:33:4f:7b:77:35:a6:7d:
01:09:50:77:f9:21:64:1e:2d:7f:b0:31:bd:9b:a1:17:7f:73:
41:06:fa:3b:8d:65:6f:d0:b2:9a:fe:26:3c:fb:e5:12:32:3a:
4c:a9:0b:e5:ce:18:4f:b3:c1:42:ea:cc:c6:4b:8e:cb:06:ac:
03:68:c0:02:6d:43:c7:cf:6b:ec:e8:78:fd:06:b1:cd:de:bd:
0b:f9:ec:ff:bc:71:5d:a4:54:59:97:c4:bc:b1:64:7f:83:2a:
dd:a8:01:d8:cf:9f:cf:c3:5f:08:f6:dc:4d:2a:c3:a8:20:27:
0a:02:b4:91:38:84:1f:f4:22:9d:b8:79:cc:a7:91:cb:8f:e2:
27:4a:ef:4b:4d:dc:30:ef:a1:b2:65:52:67:97:e2:e3:9e:b8:
2a:41:4a:9a:df:d5:80:59:1a:72:ba:1b:2d:4f:98:bc:96:56:
e9:1e:f3:4b:8b:39:e6:35:a8:df:86:55:87:e3:58:80:a0:6f:
80:34:e9:4a:95:e3:b6:ce:68:b1:59:84:66:22:c2:b6:d2:e5:
16:dd:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:16 2026 by rpki-client