Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: MGpxcn6pFYN4wIvfIM6q1wpIoThz8U0BY1o+I0JWGgI=
Subject key identifier: 58:45:52:61:60:91:D6:7F:0E:7E:80:A9:71:0A:FD:22:7B:29:74:5A
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 019CAA58644BBC130DE7AC8961B3C744BE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0CAF
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: QrpqgSGwvDA13Uq64LvT0vK+fG+JVSdscUOKGfIE8vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:64:4b:bc:13:0d:e7:ac:89:61:b3:c7:44:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=584552616091d67f0e7e80a9710afd227b29745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:e2:4f:19:17:65:7a:cb:86:4f:04:f9:6c:
35:04:81:4e:d3:3e:09:49:8b:33:16:e3:91:01:62:
e8:03:99:4f:41:c1:54:93:e6:5b:6f:0d:ca:86:05:
0e:0a:3b:00:03:7f:bd:d2:ba:87:d1:c3:5e:f3:2e:
fd:1c:f3:b3:ba:dd:4f:d8:58:0f:82:fe:56:a2:e6:
c3:e0:94:e1:49:7e:57:42:bc:f5:e6:db:58:e7:84:
45:e1:87:86:37:0a:17:6f:32:c4:7a:a6:d5:7a:6b:
0b:ee:79:04:dc:c8:a0:b1:d1:ed:22:6e:cc:5b:c4:
71:1a:3a:c6:cd:6e:cf:37:94:da:02:21:b3:f3:d2:
9d:27:9b:82:e7:f5:c5:b9:24:84:01:27:05:25:d4:
9f:34:42:58:23:98:e5:b1:f8:73:dd:b6:db:48:76:
88:8b:b8:44:a1:63:05:77:2b:fb:b9:a8:82:63:30:
3c:55:87:2c:c6:35:8f:56:e0:e4:8a:c4:b6:08:76:
50:0e:c6:4f:ec:1a:43:8c:7b:35:73:6e:bf:b1:3b:
66:a4:e3:49:99:b5:53:5f:24:8b:0c:c6:79:33:95:
84:cf:91:5b:a4:8a:a0:13:f4:44:58:18:11:94:b2:
eb:78:77:58:37:58:e8:db:b3:53:d2:5b:1f:3a:42:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:52:61:60:91:D6:7F:0E:7E:80:A9:71:0A:FD:22:7B:29:74:5A
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0c:38:35:f6:2d:2b:8b:44:88:89:15:3c:a4:51:a5:74:12:
95:3f:90:9a:f0:1c:3b:53:d2:28:bb:f6:5d:9e:df:d4:82:85:
3c:f4:44:b3:2f:5d:3e:65:62:b4:b6:68:a8:4f:ee:e8:76:d3:
56:2c:8c:3c:79:b5:0d:c7:49:9a:f0:ce:7f:f5:3a:6d:e5:d5:
b3:e0:70:35:ce:0a:8a:60:32:8d:1c:8f:3e:9d:46:d2:12:43:
ff:37:18:37:d9:ad:37:53:5f:59:de:1b:85:8e:f5:e1:37:76:
0d:fa:aa:b7:f0:6c:37:05:3c:14:19:6b:7d:fc:78:6f:a1:c5:
cd:f2:54:2e:81:95:68:e6:60:21:2d:29:1f:80:79:12:c4:87:
ac:80:ce:55:76:75:07:04:ce:34:c0:c8:b4:0a:60:9c:08:a9:
94:ae:0c:34:3c:3f:6d:4d:88:65:24:d7:7b:0e:ea:36:27:9f:
3e:74:1f:87:71:47:1a:f7:19:a9:fe:e2:5d:5f:71:f9:11:aa:
ff:4b:13:5e:2b:4b:62:a3:38:f9:9a:f8:35:f1:e7:d6:00:5a:
63:0d:43:4f:a1:bc:f9:5e:a7:50:2d:b3:23:69:24:81:d0:46:
9c:fc:9e:fc:dc:2c:36:9b:e5:fd:1a:e0:7d:be:67:1b:d0:cb:
04:c4:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:38 2026 by rpki-client