Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: 0XEMJG6O++wYW84CMICf3d338mRx3EwCpC157OWpj9Q=
Subject key identifier: F1:0A:BD:4F:FA:45:A5:44:73:60:61:91:73:08:38:F5:C3:D1:2B:74
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019CAC0F9EDAD589381BC5502C753E0DF533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0F3A
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: kbno7iEcUFXxdW2xhp80XKjheroHujO9Uct9vqZTulM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9e:da:d5:89:38:1b:c5:50:2c:75:3e:0d:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=f10abd4ffa45a54473606191730838f5c3d12b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:67:95:7c:00:03:15:fc:81:46:f3:1c:41:
f2:df:47:24:a5:77:1b:98:ae:6a:dc:7e:9e:b5:dd:
3f:36:04:60:cd:3c:33:98:e0:27:12:bf:89:11:e3:
59:69:aa:2b:21:01:fa:6b:50:ad:35:4e:28:ca:0d:
b0:8b:d9:50:f1:91:99:3a:48:dc:2d:5e:c2:80:f6:
28:37:79:7d:70:7b:97:22:c9:07:e3:48:8f:a9:de:
86:f7:32:c2:e5:5e:c0:d2:13:f9:b0:91:cc:13:b3:
d8:fb:b9:61:bf:28:a9:7b:e6:75:bc:a5:8d:6c:ad:
35:39:33:7c:d5:a2:5a:7f:e1:a0:e0:cd:34:c2:1d:
61:3f:39:70:50:5d:3d:d7:bc:19:86:6c:e8:ed:86:
b3:d8:f6:7f:cb:ea:b3:71:71:63:07:52:9d:39:f8:
29:2f:e5:51:06:02:76:4b:b8:4d:40:4b:18:30:36:
f9:64:89:3d:26:7c:40:72:77:b1:8c:88:3d:7d:a8:
3f:30:9b:fe:fa:bd:8c:9e:50:ad:9a:b9:14:16:26:
7a:b6:95:59:25:fd:16:6b:33:65:f6:c2:ea:30:b7:
34:d2:67:ac:2b:ae:04:98:e1:3b:81:3c:6a:06:94:
0d:2b:63:84:75:35:81:cd:92:3b:c3:98:fb:70:d2:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:BD:4F:FA:45:A5:44:73:60:61:91:73:08:38:F5:C3:D1:2B:74
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8c:3f:17:25:ae:ca:43:6b:5e:6b:44:fa:58:f7:ed:d6:0e:
68:c5:5a:99:fe:3b:55:24:c2:30:55:e5:a4:e4:bc:7d:9b:be:
54:f1:f5:d1:40:43:9a:6d:ba:c3:e1:60:48:e0:f5:ac:b7:97:
08:63:f4:1a:9c:66:60:00:02:c8:d0:a4:c3:6e:de:24:f4:f8:
b2:72:04:b5:f1:d2:ea:d8:6a:64:9c:3f:d1:a0:9a:1a:fb:d4:
82:36:ac:fa:44:0c:a0:e5:6e:c6:d5:76:04:48:1a:e5:75:df:
bc:8d:91:b7:ed:be:20:82:4d:54:19:be:24:0e:14:8b:be:18:
44:67:24:20:4c:25:2f:87:16:51:19:59:62:10:d7:b1:4b:07:
40:fa:0e:77:82:d0:4b:71:cb:2e:95:8f:43:aa:6c:31:39:f9:
06:c2:bf:7b:df:ae:23:be:16:c9:7f:12:a2:72:f4:73:ca:00:
4f:83:66:5b:b2:09:11:7d:13:59:07:ef:f1:d5:51:ec:e2:b6:
eb:b9:93:e7:f7:1e:cb:61:48:e2:a0:a0:37:7b:50:f8:e7:e0:
4c:a0:17:81:bb:2c:45:ca:1c:ed:e1:f5:cf:4b:85:1d:9f:12:
eb:7a:27:6f:55:39:3a:95:81:7a:d3:3c:69:29:5e:56:1c:48:
45:b9:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:42 2026 by rpki-client