Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: PROR+UicOLaUh2rM1xz4f4HCPEHh2/N6c5gzIUh8YKM=
Subject key identifier: BB:F3:BA:5D:0E:6B:5C:B4:BC:27:39:8E:27:81:CA:14:C8:5E:A0:F9
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 019CAB6AE345FC97688EB7123AAA3C7D5A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:34 +0000
Manifest this update: Sun 01 Mar 2026 22:00:34 +0000
Manifest next update: Mon 02 Mar 2026 22:00:34 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: 8St92MrMsvaIOr67i+IwYyBkGsEcwdJ2m72maZDmP0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e3:45:fc:97:68:8e:b7:12:3a:aa:3c:7d:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Mar 1 22:00:34 2026 GMT
Not After : Mar 2 22:00:34 2026 GMT
Subject: CN=bbf3ba5d0e6b5cb4bc27398e2781ca14c85ea0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:7f:7a:d1:7c:b2:7a:8c:fe:8a:11:be:9c:
b5:4d:17:a5:3b:13:d1:fd:5f:8b:0f:4b:91:e4:be:
c7:f0:f1:0b:0d:d2:c5:d2:2d:24:a3:0f:ac:dd:82:
ea:92:7c:0c:38:2b:06:eb:b4:4b:93:15:ec:16:a4:
b3:d1:e8:3c:92:ba:b6:75:d7:72:9b:6b:ef:06:5a:
e0:be:23:45:bb:1f:d1:91:68:90:4e:60:e5:34:bf:
1a:da:c3:1f:1e:dd:4d:3c:1e:55:99:4b:32:5c:7e:
76:df:03:cb:5e:fb:b2:92:4d:72:06:31:62:f5:48:
b8:cb:2e:d1:1f:3b:26:02:70:5d:27:f5:21:d0:e5:
2f:77:97:7c:df:52:37:25:80:df:60:97:a0:ea:40:
83:1f:cc:9a:b0:4b:d5:5a:90:36:bb:72:bc:eb:32:
77:5b:16:fb:c1:ac:a2:39:8e:5b:ac:34:68:92:97:
b0:22:a8:2d:a1:33:cc:d0:39:05:90:9f:b9:be:90:
de:a5:88:10:52:53:77:ae:74:c4:e0:cc:13:43:9c:
93:4c:b7:58:a1:05:7a:89:d1:d1:68:ae:eb:6d:88:
85:c9:1c:e5:d2:aa:95:7f:65:af:67:f0:9d:00:7c:
08:f7:02:f2:08:87:dd:18:26:65:c0:b7:26:8b:a9:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:BA:5D:0E:6B:5C:B4:BC:27:39:8E:27:81:CA:14:C8:5E:A0:F9
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:98:b4:52:1e:86:d8:72:1a:39:01:e7:0f:9b:53:f6:d9:d5:
a8:9e:37:f7:ac:0f:f3:0d:22:07:7b:bc:84:af:09:f6:ea:73:
fd:c3:00:04:ad:fe:6f:11:45:7c:a7:79:c6:27:01:65:4a:2e:
76:05:bf:9d:a4:b7:74:19:5a:63:bc:6b:5d:ee:fd:7c:03:42:
57:f0:10:b7:d9:70:9c:03:af:07:a8:09:cd:ce:26:8d:99:2f:
aa:f6:f3:58:51:37:c6:bb:8c:0d:49:1d:fd:98:eb:a6:50:fd:
be:87:67:61:fb:5c:de:58:98:a6:a9:29:2e:db:e6:33:7f:ab:
66:9c:e6:57:87:1e:d7:43:7f:39:dd:be:e6:f0:64:3c:cb:d5:
f1:93:09:1b:11:dc:1e:40:be:18:9a:8a:a5:16:3e:a9:87:f7:
9c:33:63:68:eb:25:cd:cc:1b:50:68:75:00:40:8a:4d:fb:19:
1f:e9:7a:74:07:fb:e1:aa:ef:c1:92:70:55:a9:03:08:48:97:
b3:ff:f0:e9:1c:65:44:31:5c:1a:f5:f7:4e:6e:47:87:38:b2:
86:4b:1d:99:09:ad:1a:10:91:11:34:37:51:27:fb:d9:8a:e8:
2e:3a:7e:32:3f:d7:21:13:f2:0e:25:b8:95:43:7a:8f:72:e4:
e3:01:2f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:30 2026 by rpki-client