Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: Ngz1GMlRAypRTZZPwX6rIVDMK9s9kHvkIy3KD2qH0no=
Subject key identifier: B3:F0:78:1B:41:F1:8D:64:11:1D:A4:CC:94:03:44:63:A9:FE:95:DA
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 019D9AAB86C533C08E3D811783912856BE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 0DC8
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: qpa2KsGBe3FrlB1/ciKy57tGf+u/FaRkz+Km4/4E5V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:86:c5:33:c0:8e:3d:81:17:83:91:28:56:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=b3f0781b41f18d64111da4cc94034463a9fe95da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:89:f4:37:85:a9:88:53:7e:02:48:b3:d1:
86:26:f6:6e:71:d7:6b:a7:9a:70:05:ea:d6:c8:b0:
e0:4d:a8:a9:ec:74:a8:a2:4c:e3:74:8b:93:6f:e3:
07:e2:92:93:3e:be:74:5f:cb:a7:90:20:1c:7c:53:
0c:05:56:70:1e:57:e7:94:33:50:11:17:3f:80:8d:
c9:c7:73:89:f9:d3:fb:f1:9b:9a:85:97:53:e1:c6:
d9:09:82:ea:c7:66:35:53:e0:5c:f2:77:85:c7:0c:
0c:e1:46:5a:1d:75:3c:28:f4:dd:ba:6b:7b:58:d1:
7a:f1:25:cf:35:f9:f5:86:95:a9:36:02:12:cf:1c:
66:e5:5c:e4:80:59:2c:43:a3:07:7f:7c:61:8f:7c:
61:b9:11:1a:f9:f4:29:be:59:20:08:e1:98:72:23:
65:e7:cd:75:6a:bb:0e:b6:ef:27:66:08:01:f7:e1:
db:6f:64:eb:f8:25:3a:06:73:7b:71:13:e8:de:4c:
2c:38:e7:2e:0e:ec:be:c5:db:a0:0e:82:3f:a6:49:
b5:f5:98:ec:d7:fb:ae:13:62:a3:b1:b0:af:5e:b3:
48:2a:87:54:0d:dd:45:d7:ac:a6:09:f6:bd:b0:7f:
1d:e9:74:de:d7:da:6f:19:bf:54:d2:b9:fd:66:6d:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:78:1B:41:F1:8D:64:11:1D:A4:CC:94:03:44:63:A9:FE:95:DA
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:a9:3e:72:af:46:09:5a:47:df:f5:e9:67:c1:29:f9:bf:
0e:e6:b8:99:33:bc:e6:24:4b:30:e3:37:03:f0:e4:9d:63:a2:
56:51:e8:6c:c4:04:7f:bb:bd:7d:0f:65:48:31:e5:f9:b7:1f:
cd:8c:c3:53:3f:4b:b3:c6:ff:90:e6:f0:30:82:cf:5e:89:27:
43:4f:54:14:25:e0:f0:6a:c1:01:10:0b:4b:56:f0:5f:31:54:
c7:0e:28:cd:51:f8:f9:11:b6:76:4d:8c:66:93:52:43:df:89:
c2:9d:8f:5a:4a:76:a3:33:11:bc:61:da:53:2a:cf:78:67:b2:
bd:11:3f:d7:3e:0f:15:62:06:5d:fb:2f:b7:0c:a4:3e:f9:09:
e2:72:55:3c:23:91:7f:03:5d:03:8c:53:43:d7:37:d6:91:e1:
b5:37:b9:8a:1e:78:6d:db:92:60:0d:2c:71:fd:12:4c:4a:58:
88:ff:72:01:12:e9:2c:d7:17:86:c8:bc:7b:a5:af:2c:36:92:
7c:76:51:34:97:5a:3d:02:02:72:9c:12:53:2c:75:98:aa:d1:
29:23:41:b6:c4:63:3a:3b:2c:42:c0:45:6c:86:5a:dd:a8:52:
0f:c3:a6:1f:72:9e:be:a0:ca:1b:6b:46:cd:11:68:f9:e4:19:
4e:55:e3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:08:01 2026 by rpki-client