Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: qc+UDF42id9r1WfDowEjfCrGtaOkZx4FV9dYn6fic48=
Subject key identifier: 7E:02:DA:50:D9:3A:CB:5F:C6:14:2B:6E:EA:8A:10:2D:AA:3B:8D:68
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 019CAD5A2DCE5026E6F248D3A01F7CAC9AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 08CF
Signing time: Mon 02 Mar 2026 07:01:34 +0000
Manifest this update: Mon 02 Mar 2026 07:01:34 +0000
Manifest next update: Tue 03 Mar 2026 07:01:34 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: W0X5GgHuDMsbnIWz6LNOGe9o+i6tKDG4I907mzt4tAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2d:ce:50:26:e6:f2:48:d3:a0:1f:7c:ac:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Mar 2 07:01:34 2026 GMT
Not After : Mar 3 07:01:34 2026 GMT
Subject: CN=7e02da50d93acb5fc6142b6eea8a102daa3b8d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:55:ae:b2:33:4d:dd:13:da:6f:3c:85:c8:
87:22:1c:b9:97:78:3b:6f:e8:f8:d7:a5:32:59:a2:
df:4e:ee:2d:e5:a2:c8:6a:41:95:63:27:d8:b4:42:
06:df:c2:2e:b4:29:cc:bf:e8:2e:3f:4d:e4:8a:7c:
54:bb:f8:d9:78:9a:9d:8f:08:26:9d:ca:d5:88:82:
e2:b3:14:73:bf:17:7e:20:63:b5:76:93:03:b0:e0:
13:f6:e5:5c:0c:db:20:9d:cb:06:c3:b8:1d:39:93:
78:e6:11:34:d2:0b:29:94:70:18:c1:30:57:cf:e2:
af:d1:9a:c7:b7:ec:83:b5:e8:08:53:97:cc:9c:ce:
46:f3:96:8d:a8:7e:5f:e2:3b:95:1e:81:ac:5b:b4:
2a:1e:13:fd:0f:f3:40:80:f9:28:48:ed:17:37:9c:
d6:b2:d3:53:cd:f0:8f:e4:31:91:4c:ac:81:47:36:
9c:c6:5b:08:70:74:33:2a:ac:a4:1c:35:89:16:77:
2d:0c:26:8a:53:1b:df:1b:bc:fd:65:0d:ee:58:1a:
be:b2:55:1e:77:43:f8:f6:e0:d7:0b:a9:31:a1:be:
9c:9f:e4:8a:d8:01:f4:91:a7:01:71:b4:ff:75:6d:
4d:4a:2e:e8:04:64:a7:07:b0:09:d9:db:97:6e:f6:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:DA:50:D9:3A:CB:5F:C6:14:2B:6E:EA:8A:10:2D:AA:3B:8D:68
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:00:14:bc:5d:64:46:74:d8:45:a3:1c:22:f8:4d:d4:c9:
e1:93:81:c7:1c:e6:28:df:cc:8e:2e:21:43:1d:2a:45:80:35:
4b:a1:29:5f:34:f3:71:b6:dc:0c:fc:d4:ef:da:54:ec:c6:73:
10:48:39:e2:38:b5:4c:6c:f5:e3:bf:31:a8:dd:46:84:4c:cf:
27:e3:f8:83:72:cf:0f:aa:48:cc:9d:8f:97:4d:3e:b0:9f:6e:
d5:e3:c6:af:ea:d6:fa:ca:c8:09:31:f4:88:bb:53:35:91:43:
8c:8c:01:4f:0c:72:da:8a:dc:fd:7f:f6:af:c2:77:dd:76:f5:
67:59:16:10:74:de:a9:49:98:84:26:62:d5:76:53:bb:2f:34:
f9:ff:e8:44:56:75:a6:a4:04:f9:e5:a9:54:2f:57:2c:51:f5:
ab:aa:4c:da:93:42:a9:27:f4:36:a6:68:06:dc:76:f8:19:98:
69:e6:5e:6f:5f:d7:a3:12:d3:54:0d:27:a3:ff:bd:1a:37:89:
de:16:c3:22:f6:70:a3:ec:16:8e:31:67:09:9b:aa:65:e0:cc:
42:3e:8d:bb:69:31:cb:4e:ec:ea:94:aa:34:7c:f3:37:6f:d9:
a9:ef:74:46:27:f0:0d:6c:13:c2:6a:61:0d:87:53:71:78:90:
5d:00:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:19 2026 by rpki-client