Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier: vckB6dWaO/rRAxE1gxfffrBz1faw9hurqbC8zdg9RQA=
Subject key identifier: AB:23:96:D3:F3:4F:0D:B5:F9:F1:88:C3:41:01:64:0C:CE:A3:B5:88
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 019CAAC6DE68847992E875635099D7F2D24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number: 0FB3
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: 7+iINOAIj/J0SzNKIltf5aEY3sVX4d+FuUXxEv8Ma5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:de:68:84:79:92:e8:75:63:50:99:d7:f2:d2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=ab2396d3f34f0db5f9f188c34101640ccea3b588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:77:9d:81:b6:27:08:f6:f0:5a:b5:be:84:
76:94:9e:3d:08:28:3d:7d:30:f2:46:c7:7e:d8:fc:
2d:61:5c:bc:65:4a:da:45:ec:5c:32:42:3d:a6:fd:
8f:11:77:55:ec:8a:a3:0c:81:95:61:7a:a9:58:7b:
6f:d7:cb:37:83:d9:4f:6a:98:e6:e1:06:cb:9d:44:
a3:a2:c5:27:af:00:89:18:98:d1:38:01:55:31:48:
60:2e:e4:1c:fa:cb:76:e2:26:c5:9a:0f:5d:31:01:
5a:53:48:22:60:a2:7c:c1:4d:be:c2:07:d8:4c:6e:
eb:37:1c:36:b7:c3:d1:48:ad:31:10:8e:53:a5:04:
7e:c0:94:4a:ab:90:25:73:af:85:31:82:c3:6d:a0:
ba:7e:2d:bc:02:36:ff:85:6d:c9:d6:19:84:48:d5:
28:5e:11:bb:85:fb:66:42:26:0e:fc:61:4c:68:44:
52:b2:f0:11:35:75:ca:62:22:58:28:a3:69:94:73:
90:e2:bd:74:01:a8:7e:29:7b:7b:21:00:a7:30:c6:
14:ec:5a:f7:2b:1e:71:f6:80:e5:bc:0f:0b:c8:c4:
4d:3a:f2:5a:90:7a:3c:6f:19:ee:d2:15:54:d0:b5:
20:3b:20:af:96:26:cd:6b:ab:c9:85:ca:9d:a2:7e:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:23:96:D3:F3:4F:0D:B5:F9:F1:88:C3:41:01:64:0C:CE:A3:B5:88
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:6a:2a:d7:df:a6:d5:b8:e1:88:49:5b:02:a6:e2:94:67:
e4:5a:85:f8:c7:26:93:26:4a:ba:a4:f4:14:7c:f0:4d:cc:6f:
54:cf:b1:41:d6:30:72:e4:1e:17:c8:5c:4b:84:95:db:e5:e1:
f7:f5:b2:59:90:2e:02:45:1b:48:6b:32:a5:32:1c:e4:6f:da:
b3:ef:c1:f6:93:35:6d:80:61:e4:96:bf:6e:58:23:9e:ba:14:
76:1a:fc:36:19:b0:04:6a:4a:e4:cc:a3:39:0d:2b:49:cb:95:
42:80:39:f3:d3:a7:98:52:01:d5:c6:88:72:97:f6:77:be:ff:
67:88:a9:7a:97:a5:0b:b6:27:70:e4:62:4d:e2:af:43:41:e8:
94:e6:6d:e0:b4:d0:b0:2a:23:7d:2d:a0:ce:b2:9f:af:a3:f5:
95:23:d6:58:49:5c:19:b3:14:0b:d0:98:f6:36:3b:2c:86:12:
9f:21:3b:6f:ce:48:c9:1f:89:59:ca:45:e5:24:54:cd:6b:e6:
53:e2:45:88:65:bd:0f:ac:da:f0:c0:da:e5:e7:83:56:bb:05:
24:a8:76:74:99:82:ff:76:45:ac:58:d8:e7:27:c4:88:06:77:
44:00:3c:f8:36:b0:8f:e8:2e:92:39:c5:b4:51:b0:57:81:0c:
59:bb:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:10 2026 by rpki-client