Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: YjzlLKnIpGadxgdCMK3/RD2JO1Kz4exoTUt1EJuzP68=
Subject key identifier: 85:AD:32:07:1C:49:CE:59:00:BE:D3:32:98:7D:A7:89:B4:CD:4B:F5
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 019D98F44F4FCAB07650405289B745D1D572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 184F
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: OkQfSqTTbHvcfDc84Yg3GjCUDcVLtS+D2SVEq4Wi4s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4f:4f:ca:b0:76:50:40:52:89:b7:45:d1:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=85ad32071c49ce5900bed332987da789b4cd4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:00:d1:17:58:f9:83:5c:18:78:e5:cf:ac:
11:a0:3d:de:08:96:99:78:bf:55:ce:aa:8e:4b:bf:
f7:18:e3:71:63:e0:71:52:0b:bd:b8:98:36:5b:88:
e6:3b:03:86:f8:98:8e:30:57:61:45:ad:c3:01:3f:
b9:41:b9:2a:66:b3:6d:bf:28:8e:8b:ef:d6:ab:4b:
05:0e:5f:7e:aa:81:da:7d:6d:cf:46:1c:c0:a3:3e:
71:e2:5a:a2:f9:76:86:aa:d1:7c:79:3c:cf:07:65:
59:be:e0:36:3d:f1:e7:82:b8:aa:76:62:33:92:90:
fa:0e:57:d1:94:cd:90:04:a1:15:b1:3c:5a:69:5c:
bf:6b:14:f1:e3:45:5c:8d:ba:5f:9f:f4:94:6a:e1:
f7:4b:5b:d9:0c:d9:35:fc:d4:9a:5d:5b:3e:7f:ee:
d8:22:f5:3a:2c:c7:f3:70:34:01:62:47:5a:6c:5c:
bf:f7:56:f2:fb:db:f2:28:c3:c2:12:87:e2:57:6d:
23:cc:8d:25:79:bb:d8:ae:4f:c4:32:4d:ee:eb:a9:
65:65:23:7f:a6:de:83:3a:41:9d:ce:35:3a:19:31:
0b:57:a6:b8:82:02:c7:3f:35:84:3a:3b:d0:1c:de:
81:f2:8e:1d:19:ea:ea:82:55:c7:90:da:51:ff:a0:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:32:07:1C:49:CE:59:00:BE:D3:32:98:7D:A7:89:B4:CD:4B:F5
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:86:77:22:a2:a7:30:c1:b2:35:ba:6f:ad:5d:62:e7:b9:
ed:d5:4c:fc:97:30:dc:ab:af:c5:a5:40:c2:4a:bb:77:24:f2:
ee:af:14:27:e1:cd:bb:a7:de:83:c2:d0:5a:b0:0e:57:56:0d:
c1:42:3d:ef:e0:33:ab:a6:82:8e:61:a1:e5:16:93:4b:a3:82:
cd:60:35:7e:9e:93:20:69:fb:b3:66:ee:16:71:fd:05:22:cc:
9d:48:32:ae:c4:79:51:84:e1:8a:4c:74:5c:a9:54:d1:92:56:
4d:b3:a9:1c:1b:bc:6e:13:96:ab:12:fb:31:d5:c2:70:b3:88:
1e:60:73:9f:35:80:66:55:31:ad:04:29:03:ff:5f:24:bf:a6:
b4:97:4a:00:2d:70:2a:c5:7d:08:84:74:69:b7:85:56:54:e7:
14:ab:7f:3d:f1:e6:3f:d1:cf:82:4f:ef:c0:ca:3f:ff:8c:b4:
bb:80:04:68:36:d9:5e:8a:a8:2c:ac:b0:6e:f4:99:26:9b:e9:
3a:2f:e0:c9:c9:b7:d4:a5:bb:40:fd:3f:17:d6:85:41:0e:52:
fb:4f:d4:d2:3b:04:a3:23:3f:61:1e:79:3f:f6:2a:b7:34:57:
de:d0:67:10:42:1e:b5:bc:eb:c6:73:44:47:55:a1:c4:5b:04:
e6:9b:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:15 2026 by rpki-client