Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: yBff5zxiFppqBhCwLdEzfOGbicHf1iwMK/rkRu95pFs=
Subject key identifier: 4C:56:4F:27:80:24:A2:45:BA:80:A7:75:7D:40:77:BD:F5:96:3F:64
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 019DA48AA213B0BB5CB7CCD08A7251ACA7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 070B
Signing time: Sun 19 Apr 2026 07:00:41 +0000
Manifest this update: Sun 19 Apr 2026 07:00:41 +0000
Manifest next update: Mon 20 Apr 2026 07:00:41 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: 95seEs/G/wZeQWHliJZ8FxESiEAiHbnJlq5qNQFiVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a2:13:b0:bb:5c:b7:cc:d0:8a:72:51:ac:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Apr 19 07:00:41 2026 GMT
Not After : Apr 20 07:00:41 2026 GMT
Subject: CN=4c564f278024a245ba80a7757d4077bdf5963f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:17:ab:f2:0b:d0:b6:99:49:75:89:7a:a2:
da:65:02:19:6a:4b:00:85:5a:e1:12:2c:aa:e9:34:
7d:c5:ef:3e:8a:f7:64:d0:7f:d1:f1:cc:f5:b2:ec:
6b:e7:1e:15:09:69:68:fd:8b:74:18:95:a8:74:28:
4b:9a:19:94:1b:c0:dc:54:4e:fb:6e:d3:42:13:77:
a2:3d:fe:d9:6a:87:3c:c9:e5:ba:6f:5b:c3:3b:02:
59:92:96:28:18:fc:14:92:e5:e6:bc:61:58:67:31:
f9:75:04:6d:4a:14:25:78:81:a4:5d:11:35:8a:d8:
7b:e5:2c:79:86:f9:b0:4c:1e:05:cf:67:eb:4a:51:
5a:bd:57:4f:ae:d9:b9:7f:6f:ba:bb:05:1f:a5:a9:
73:22:8c:13:74:44:fc:9a:3b:38:97:eb:fc:d0:a6:
2f:00:cc:32:2a:37:6b:77:8c:53:17:4a:d2:c3:32:
f9:d6:35:b6:71:10:e3:4d:32:93:49:17:19:70:3e:
85:f5:66:f3:3d:97:ea:3b:13:a7:7b:0c:84:be:7d:
47:cf:34:fa:64:44:9f:17:2c:d8:06:f1:2b:f9:79:
8d:17:34:eb:0c:3a:ac:df:b9:e7:30:18:ba:91:fe:
d9:51:1a:a0:58:fe:3a:51:4f:35:f0:9a:1e:ef:fe:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:4F:27:80:24:A2:45:BA:80:A7:75:7D:40:77:BD:F5:96:3F:64
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:dc:36:12:1f:52:03:18:03:d5:6c:f2:a8:70:38:07:be:0b:
31:f9:7f:f1:af:81:1a:ff:8b:18:86:0c:f5:56:67:c3:fc:88:
38:02:1b:f8:65:59:c2:9d:a0:85:cc:09:63:aa:ec:dc:31:2b:
9a:55:4c:69:f1:d3:1d:68:ed:48:3a:c7:b7:2b:ce:d8:fa:1e:
f5:cd:92:c2:6b:e9:a9:37:d3:26:7a:c1:e8:6c:37:63:38:f9:
f3:d2:38:96:28:29:2c:e8:ce:ed:71:67:5d:a4:18:40:f8:07:
e4:51:08:bb:c7:dc:3e:d2:cb:9d:32:17:01:8b:b1:9a:74:63:
d6:f8:54:2c:06:34:63:a7:f9:a7:6e:e2:87:70:2a:f6:f9:82:
b8:f8:d5:77:35:01:63:ed:81:51:6f:24:cd:95:d7:bd:20:26:
c7:51:7e:17:ef:4b:2e:e0:83:8a:09:cc:b8:65:d6:c5:79:5f:
32:c9:a1:d4:2d:5e:13:2b:d1:cd:17:40:93:84:7b:66:84:90:
cd:8f:64:84:2c:be:bd:df:ea:bb:4a:a3:0e:22:fb:d9:f5:3f:
4b:74:db:45:ed:aa:ef:e5:17:c8:8b:b0:31:bb:5d:7c:a4:dc:
02:71:e6:db:1a:8f:d7:90:4f:ab:66:11:71:1c:8f:c3:ea:7e:
db:a5:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:53 2026 by rpki-client