Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: aCVsFBxRJYDwYFFm0NarYBFFu4bPL/Rre3UZ4rfWaiI=
Subject key identifier: 11:B8:3F:19:33:E1:71:DC:2C:AF:2E:04:9F:DB:C9:44:1F:74:11:60
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 019D9AE2FF812A57501B30A9A96744EEF75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 094A
Signing time: Fri 17 Apr 2026 10:01:00 +0000
Manifest this update: Fri 17 Apr 2026 10:01:00 +0000
Manifest next update: Sat 18 Apr 2026 10:01:00 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: WRV9a+WCjfHNqKdBirHlFhpvfSeVLanb9fXb4C33PZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ff:81:2a:57:50:1b:30:a9:a9:67:44:ee:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Apr 17 10:01:00 2026 GMT
Not After : Apr 18 10:01:00 2026 GMT
Subject: CN=11b83f1933e171dc2caf2e049fdbc9441f741160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:95:c1:bf:3c:ed:32:f1:05:3c:7e:2c:69:
2d:98:42:e4:1a:ba:76:d8:a9:14:a2:f7:e3:f3:62:
ae:75:9d:4c:fb:c3:c7:0b:f1:b2:66:8a:14:44:63:
df:62:fd:55:13:d9:b4:f1:ab:f2:8b:0d:b5:7f:c0:
01:05:2a:c3:81:00:5f:54:b8:7c:67:5c:b8:7f:c4:
3c:3d:f4:24:94:28:85:1e:9f:52:ed:ed:fe:b9:0c:
64:28:64:69:c5:ed:54:5b:a4:38:df:11:98:45:89:
57:f2:c3:39:31:66:7f:60:c7:21:05:c9:b5:0b:e2:
06:a4:02:bb:ea:3a:7f:cb:ff:ff:52:e0:96:60:83:
5a:89:e8:a0:38:d9:d9:e6:c4:9f:27:46:08:4f:06:
96:fd:bd:ae:04:34:87:5e:70:7d:9f:d0:63:f6:0e:
cb:f7:d2:50:78:71:a7:1b:cb:37:83:cb:a3:dd:d0:
7a:58:94:7b:08:aa:9b:62:e5:1a:4b:43:d8:84:94:
01:cb:bc:1f:7f:3a:fd:f1:4b:09:13:ea:32:4a:8d:
c2:26:3d:9e:b1:c1:02:47:74:41:2d:1a:b2:5d:4c:
05:d0:18:e5:ba:ed:0b:68:c6:57:af:85:99:fc:27:
bc:96:d1:05:01:4e:ed:08:00:dd:0e:09:1e:ae:eb:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:3F:19:33:E1:71:DC:2C:AF:2E:04:9F:DB:C9:44:1F:74:11:60
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3c:97:c0:7d:14:e9:54:76:61:e1:21:39:e8:9f:d5:34:4e:
ff:8e:37:bf:97:37:31:ec:ca:d1:3d:3e:53:f5:94:61:69:77:
6e:7d:20:3a:9c:95:6e:01:b0:53:fd:90:e9:25:aa:4a:61:61:
90:82:9e:e4:f1:5f:16:67:ee:43:0a:7e:eb:1f:f1:b3:24:57:
1b:ae:cd:33:52:11:ee:38:77:19:28:61:e5:0d:bd:c1:b9:07:
f1:40:f3:ad:98:b9:40:51:c9:6c:45:a9:4b:4d:9b:e1:b1:64:
53:29:e5:8e:cf:88:14:ee:d2:66:b7:1d:0a:84:6d:ec:f2:46:
97:d1:73:ab:82:91:a4:c3:59:fa:ed:19:6e:52:4f:3c:f7:08:
0f:c3:63:c6:2d:9d:46:40:e8:e3:36:72:a4:6b:f7:99:7d:ef:
c4:f8:02:ce:96:09:2a:e2:cd:34:91:7a:80:cb:1f:16:9d:a9:
89:58:fa:f7:fc:00:26:e3:99:57:e0:0b:54:77:9b:3d:d0:58:
30:1c:a3:8b:90:14:a1:67:54:58:5f:10:78:c5:f6:a1:77:4f:
9d:e2:61:bc:f8:0c:a5:95:32:77:45:56:30:8f:34:ef:04:09:
f6:95:be:eb:09:8f:f5:e9:20:a8:3f:53:27:b7:78:45:d7:72:
f6:17:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:56 2026 by rpki-client