Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: +al5B0iCKxt0STBB8vTIOIEgokrGpBcXEohMuCzIR/Y=
Subject key identifier: 2B:FA:B1:99:BF:E0:20:28:FD:3F:9F:D7:BC:9B:9D:B9:41:37:36:F5
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019D9AE3939FD10A2B13B770A88676D5EE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 151A
Signing time: Fri 17 Apr 2026 10:01:38 +0000
Manifest this update: Fri 17 Apr 2026 10:01:38 +0000
Manifest next update: Sat 18 Apr 2026 10:01:38 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: e4QBeqO/tADXFrn0CCeebxFAbwpbHAAsa85aA7gNXmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:93:9f:d1:0a:2b:13:b7:70:a8:86:76:d5:ee:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Apr 17 10:01:38 2026 GMT
Not After : Apr 18 10:01:38 2026 GMT
Subject: CN=2bfab199bfe02028fd3f9fd7bc9b9db9413736f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:96:3b:ec:68:30:5c:d4:d7:8e:07:d7:42:
63:ae:e5:13:51:48:97:1b:97:83:61:6d:a0:f1:73:
a7:74:dd:21:85:ca:85:e6:15:46:61:bf:06:45:9a:
8c:9a:a1:0c:6e:ad:29:cb:af:d1:cd:7f:fd:b3:78:
b5:b7:40:87:70:4f:8b:37:a0:fc:75:3e:55:45:25:
d2:8f:f5:1a:4d:17:04:f9:03:08:4b:21:f2:6b:33:
ba:ad:62:4f:34:32:42:c2:ab:a0:a0:63:e6:1e:6f:
38:89:8d:9d:ca:c3:3d:5d:e8:98:8b:00:f5:a2:49:
80:71:81:ab:90:c2:a2:46:03:d3:7b:4f:ba:90:3c:
e4:35:92:ba:af:43:2f:5c:5a:89:0c:a7:a3:fc:c3:
0f:54:fd:f8:1e:f4:9a:a3:18:84:a1:a9:65:44:51:
92:3c:9c:bb:13:11:74:16:f4:36:f8:4d:63:db:93:
ba:c4:7a:60:97:19:5c:97:28:7a:5d:fa:f6:2b:9a:
d3:f7:b0:98:48:91:1a:6b:b2:a9:1b:b3:c5:eb:91:
44:21:44:f4:8c:5e:57:c9:23:11:48:da:9d:9b:c0:
1b:38:0d:c3:a1:17:12:b8:0d:10:bd:56:91:a6:26:
ac:a8:e9:5c:15:64:b7:1d:71:ed:79:b6:05:7d:82:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:B1:99:BF:E0:20:28:FD:3F:9F:D7:BC:9B:9D:B9:41:37:36:F5
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:69:11:2e:72:e7:29:cc:03:dd:a4:4f:ab:34:e6:81:78:
14:5e:73:30:45:26:5d:4f:6c:8b:a0:d4:b1:14:90:25:12:ae:
e1:c7:fc:a4:82:92:12:70:84:9f:00:07:a9:f9:0e:fb:15:1d:
85:e4:ed:9a:2e:bf:a0:69:0a:ed:70:33:77:2a:bb:43:22:43:
53:70:a5:95:9e:f3:7a:b5:9a:04:8c:85:0c:de:44:68:2c:39:
f4:36:a5:64:af:15:91:0e:72:89:23:0f:c5:11:8f:13:63:bc:
cd:a2:76:6a:6a:4c:cd:41:72:9d:9c:81:f6:9a:f0:cd:59:df:
c4:61:d4:e7:6f:14:f7:bd:63:a2:0d:ed:13:ca:67:77:2c:5a:
d7:55:a3:84:47:e1:41:fb:be:56:4c:3d:62:78:fd:8c:44:26:
77:07:5c:45:5c:7b:50:70:57:42:01:9d:59:bf:58:49:7b:20:
76:83:88:1b:16:8c:67:31:f8:67:9f:2e:07:c0:12:32:7a:af:
8c:3c:88:6d:d3:48:c0:29:e9:21:3d:3e:8f:f0:be:31:2c:a1:
2d:e6:9f:94:51:ee:dc:1b:ea:2b:10:b8:84:b8:7b:69:13:32:
f3:bd:04:ec:28:4c:89:47:33:74:c0:ec:f2:42:02:d2:ef:5d:
51:07:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:21 2026 by rpki-client