Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: wTEQX1OQEiI4eOeegz/EcqbJak1oGeo+E6N6HQco+J0=
Subject key identifier: EA:48:58:E5:CB:E8:DD:1F:B5:0D:1B:C5:24:FF:F4:F5:F8:33:02:BF
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019D9AABD83BD459B66BA060219BF2B029B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0FC7
Signing time: Fri 17 Apr 2026 09:00:46 +0000
Manifest this update: Fri 17 Apr 2026 09:00:46 +0000
Manifest next update: Sat 18 Apr 2026 09:00:46 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: 9hW9GAl9FPuwACw4rIMIev0mu/kTc/+8TtTpBmCRbFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d8:3b:d4:59:b6:6b:a0:60:21:9b:f2:b0:29:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Apr 17 09:00:46 2026 GMT
Not After : Apr 18 09:00:46 2026 GMT
Subject: CN=ea4858e5cbe8dd1fb50d1bc524fff4f5f83302bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:c1:32:28:4d:d5:3e:cd:1f:56:a8:0f:38:
d8:23:32:8f:78:f6:ca:0b:9e:2a:28:cc:0b:15:39:
46:f0:c6:f5:3b:f4:ab:fa:f3:73:af:2f:65:5a:43:
51:e4:2a:bd:3d:1e:88:42:9e:be:28:ce:71:c7:43:
36:87:40:ee:6d:f2:46:93:3f:01:1a:59:a5:55:61:
cd:7f:3b:6e:68:fa:ec:0c:fc:c4:17:51:cc:3d:f3:
1d:db:94:28:24:2a:15:47:cc:ae:a9:e8:55:e8:36:
26:e3:ea:2d:4c:2f:01:a2:47:ab:e1:4b:16:3c:43:
24:48:75:85:c5:25:2e:31:9b:0b:be:68:2a:5f:af:
cc:94:c9:9b:cd:b6:25:4e:6d:c0:44:6e:2b:98:6d:
87:ca:3c:8f:14:82:7a:83:41:61:df:f3:86:c2:f1:
cc:d4:5e:07:d0:a7:c3:ec:9c:31:f8:b5:f8:47:24:
35:ce:39:4d:99:a7:d3:aa:a5:04:ce:80:3b:e8:ac:
84:b2:48:e3:05:bb:09:cf:f8:99:36:10:1e:7c:75:
d6:cd:b8:39:c4:66:52:f6:28:fc:c8:26:6b:05:79:
65:bc:d7:36:42:51:70:16:f2:86:68:8b:2e:84:05:
ea:17:42:db:eb:e3:47:73:37:0d:1a:db:59:9d:67:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:58:E5:CB:E8:DD:1F:B5:0D:1B:C5:24:FF:F4:F5:F8:33:02:BF
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:7b:fa:5a:77:58:bb:dd:77:2e:a5:ca:91:89:17:47:30:74:
27:0b:6f:3f:7f:ad:1d:6c:ae:05:0f:2e:4b:23:63:26:f7:9a:
41:3e:cf:8d:ac:43:41:af:df:76:f9:14:a4:1a:7a:39:d1:30:
13:cc:f3:f9:2f:ee:bb:9e:c8:a0:2e:46:f6:32:de:5b:e2:60:
ff:dd:3d:bc:35:7d:4e:ac:2f:f0:09:16:73:1c:89:27:7e:85:
98:13:91:3c:76:55:42:4d:b6:d0:9b:0b:d1:60:05:1c:7f:12:
80:0e:49:01:d7:ab:f3:ba:bf:35:7c:09:f2:01:c5:55:04:31:
11:56:74:4c:2b:b4:f4:c5:b5:24:d6:fc:d2:48:99:15:5d:88:
2e:f4:bb:50:ac:4f:0f:49:85:bf:34:28:d3:96:1b:8f:e4:9a:
0b:4c:68:ba:8d:ce:f3:16:f3:87:41:d8:45:1f:61:74:6a:e4:
26:64:3a:3d:fa:56:da:5f:a4:59:78:aa:69:6e:7f:c0:5d:d9:
50:61:7f:df:23:80:6b:b9:4a:7e:94:92:8f:cc:5a:06:9e:41:
06:21:3b:54:8d:d1:f2:94:2f:a0:39:8b:d1:01:97:6b:88:e6:
e6:d8:94:85:aa:f6:41:13:58:e9:17:bd:0e:50:47:a5:16:3d:
7d:00:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:48 2026 by rpki-client