
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: JjW1JLjDreSelCgvmrc67SGtBHpirhOuasbEPNSKqGM=
Subject key identifier: C5:A7:66:9B:77:B5:47:5E:AA:99:36:A9:54:30:0E:93:8E:D6:95:56
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019CA945B84779F2BA3F96ACB183ADE752DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0F4A
Signing time: Sun 01 Mar 2026 12:00:44 +0000
Manifest this update: Sun 01 Mar 2026 12:00:44 +0000
Manifest next update: Mon 02 Mar 2026 12:00:44 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: G/E6gFjoaN7HJpPn3p8G8oc5pXJqJClHz0bl7vA+ShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b8:47:79:f2:ba:3f:96:ac:b1:83:ad:e7:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Mar 1 12:00:44 2026 GMT
Not After : Mar 2 12:00:44 2026 GMT
Subject: CN=c5a7669b77b5475eaa9936a954300e938ed69556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:27:ad:e9:0d:aa:bf:7e:4e:c6:2d:e3:52:
cf:bc:a8:74:88:a7:91:26:63:2a:1e:d4:f4:6f:8b:
95:59:3d:b4:eb:68:0f:92:99:77:94:0d:d6:db:8e:
3e:af:ce:0f:17:0a:a9:a0:5b:dc:8a:05:b1:9a:d9:
1f:38:97:e0:b9:23:47:41:81:1d:40:02:d0:87:13:
32:f9:41:2d:aa:07:be:99:4a:c4:99:29:9e:b9:0a:
f9:9b:29:16:12:09:90:ab:ce:9e:b8:c0:d8:52:95:
f0:e9:47:30:c2:f6:8d:0e:f5:c7:90:6e:07:20:c6:
07:a0:c6:cf:a1:2d:ce:26:7c:d3:06:de:d1:28:fb:
ec:01:df:98:b0:7e:27:9b:1e:94:3a:28:91:a7:3a:
fa:2f:5c:fb:c1:c6:77:de:9c:48:db:9b:64:3e:3c:
a6:d2:b1:57:81:dd:01:61:b0:3a:d5:71:81:67:e5:
38:e1:e9:ac:8d:42:c2:27:bc:7d:96:6a:70:c0:fd:
73:06:c8:a8:1d:de:19:b7:00:0c:be:03:c0:c1:ec:
35:80:9d:2c:58:38:9e:f6:f4:6d:42:94:9d:ff:93:
e7:f8:06:bc:40:fa:88:a0:5c:b8:8a:94:45:ab:25:
7e:98:88:59:e5:47:88:19:35:80:64:e3:fe:bf:29:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A7:66:9B:77:B5:47:5E:AA:99:36:A9:54:30:0E:93:8E:D6:95:56
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a5:28:93:11:44:6a:b0:0f:22:59:37:2a:e8:4c:54:e2:0c:
6b:5f:97:6c:a7:8a:c9:e8:cd:d8:a3:55:cc:6d:68:cc:22:d9:
3c:5d:f6:ad:03:df:b1:e4:7d:46:d0:8e:be:b5:bd:88:42:7d:
6b:7e:e8:1c:e2:fe:c1:9d:38:ca:c9:bf:38:6f:42:a3:6f:c1:
bc:19:b8:4c:02:42:ce:41:63:eb:00:e7:1c:7b:cc:ac:41:ea:
98:c4:e1:9e:d6:90:ab:ce:87:9b:1f:e2:18:6c:cb:05:c6:38:
cd:76:ad:e5:28:0d:a0:af:e3:b9:8a:c0:3d:38:e4:08:48:bb:
16:ff:ff:f5:a5:74:58:2f:5d:0a:57:ab:91:22:62:d2:8b:d5:
ef:04:98:1b:ff:59:f2:24:06:a1:b9:8e:82:15:da:7f:6a:18:
d5:42:44:65:bd:67:0d:d8:79:3c:45:96:36:13:fc:fe:f0:28:
09:57:3a:85:f0:65:c1:ee:97:1a:5e:01:48:81:4a:c3:fb:af:
3c:88:85:54:1c:21:4a:cc:eb:1a:35:d2:bb:8a:0e:82:50:f8:
b6:05:fe:46:81:f9:b6:21:6d:8a:a4:6d:86:d0:68:4e:8a:fb:
0c:31:cf:82:de:dd:eb:7c:08:cc:7c:19:56:dd:17:61:bd:d6:
36:d8:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:25 2026 by rpki-client