Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: 6KJLx13JBskfJk+1Cj9Ash1ynMLFS+57LOdidCsVMkU=
Subject key identifier: 7D:47:28:9F:58:B3:1F:47:B7:14:14:C8:38:F1:42:CF:02:8C:3A:E0
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 019CAB6BE9DC3E6E4D0F43F97355024D3FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 068A
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: 6FUisiu39oZBX84PbUGVSzrM9j0IP9mDyhX7B/AxPgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e9:dc:3e:6e:4d:0f:43:f9:73:55:02:4d:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=7d47289f58b31f47b71414c838f142cf028c3ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8d:10:44:c2:a3:cf:97:c0:9e:87:34:5f:b5:
f6:a9:a4:4f:58:81:e7:9d:e9:15:25:ea:a3:94:6f:
05:de:42:2d:21:09:14:0e:2e:72:e3:3d:0a:f9:ab:
d7:41:31:08:a9:57:ee:d4:24:fb:9b:4b:d5:f6:37:
49:7b:47:03:de:69:25:ce:37:0e:92:c3:2a:e7:80:
47:d3:c7:de:55:74:97:12:b8:e1:c0:0c:05:6d:23:
31:e2:cc:17:b0:81:62:68:08:a8:96:e5:52:07:24:
80:64:09:57:54:e0:21:7e:a2:a9:29:47:ba:c7:0f:
b0:f5:4d:ff:15:c5:72:53:ec:46:4f:46:7b:0c:43:
05:be:dc:78:14:cc:f3:09:f4:f9:39:75:ae:d4:87:
5f:f2:b9:a6:05:c2:70:a8:7d:59:a3:b4:42:b5:a0:
9a:f9:d6:fd:fc:e1:02:26:39:0d:f6:15:2d:9e:b3:
ef:24:c8:bb:d8:b0:07:09:e9:84:58:ea:bc:ed:af:
0e:04:40:36:16:2f:59:fb:13:3e:95:f3:9d:18:12:
31:9c:82:c7:69:94:2b:3a:dc:94:a4:99:3f:18:3a:
9b:f8:71:38:c1:9f:26:e7:9d:7e:3c:06:15:17:02:
e1:7f:8c:9b:e7:65:9d:50:6f:90:ab:4e:7a:f6:08:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:28:9F:58:B3:1F:47:B7:14:14:C8:38:F1:42:CF:02:8C:3A:E0
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:af:56:3c:36:82:53:cc:9c:8e:72:63:e5:31:aa:31:73:22:
c9:3f:a9:af:cd:12:a2:6e:ac:47:04:5a:86:bd:2e:2a:87:27:
21:1b:1a:8e:e2:c6:29:ed:58:94:ad:87:e8:89:b8:d9:0c:dc:
48:71:e7:4c:0e:dd:2e:7b:11:b9:45:4a:47:ce:e2:37:47:11:
fd:d8:4d:94:69:05:65:e2:38:b4:6f:fc:53:0b:25:31:89:32:
39:f1:ad:38:3b:8f:4c:35:a9:0e:e7:71:18:ec:f8:7e:23:fb:
11:84:d7:33:88:c7:16:de:ca:24:a0:4b:dc:3a:31:3e:4c:6b:
83:46:f2:c3:06:01:0f:58:3d:be:88:cf:00:6f:e1:2b:c2:ec:
09:11:e9:b7:74:3f:0d:a4:18:24:95:5a:b6:38:6b:43:f8:68:
b7:06:f1:e3:63:37:a8:c6:71:b9:a3:86:d2:a7:25:50:ba:47:
4b:39:63:25:85:36:2a:72:14:1e:a0:47:60:db:2f:88:a9:95:
2a:60:1f:d5:b8:c4:62:3b:f8:d1:c6:a9:7e:b1:13:6d:12:d3:
97:3f:aa:3d:db:3a:96:bb:ce:17:21:12:2f:32:03:bc:fb:ed:
8d:06:e7:96:f9:d8:d0:96:10:82:ad:2f:17:ae:d5:cd:ed:3a:
19:88:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:15 2026 by rpki-client