Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json)
Hash identifier: /z2twKtdd8Z6Ri9gjW6Z01pJGykAYkiPIe1mWJrJQ/A=
Subject key identifier: 7F:46:DB:44:CE:70:40:57:36:31:E7:B5:9B:91:FD:EB:B0:39:AB:0D
Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Certificate serial: 019DA3E6366AE6AB81125B72D916A4DD6AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
Manifest number: 14E1
Signing time: Sun 19 Apr 2026 04:01:06 +0000
Manifest this update: Sun 19 Apr 2026 04:01:06 +0000
Manifest next update: Mon 20 Apr 2026 04:01:06 +0000
Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: jOi4rdSnKMK2KpezgUxRBfZUuQVIhRGh1wWAP3sQevk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:36:6a:e6:ab:81:12:5b:72:d9:16:a4:dd:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb
Validity
Not Before: Apr 19 04:01:06 2026 GMT
Not After : Apr 20 04:01:06 2026 GMT
Subject: CN=7f46db44ce7040573631e7b59b91fdebb039ab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:0a:13:82:0a:da:d1:69:4e:ee:88:67:69:
97:0e:d0:9c:d0:af:10:d8:a0:8c:3d:73:6b:6e:73:
75:a9:6a:34:fc:f7:3d:a2:fe:51:52:dc:64:97:4d:
a4:77:61:cb:a9:ce:f3:5b:3b:5d:54:9f:40:58:3c:
f6:fe:33:6b:ce:f1:0f:82:9e:f2:65:12:e0:05:cf:
85:0a:92:44:2e:39:0d:cc:a4:00:d0:7e:af:e1:05:
95:0d:32:ec:d4:f6:d1:c4:a9:30:65:1a:94:fc:10:
cd:e4:6d:a0:46:e1:e0:1a:1c:fa:3e:ed:b4:e5:a1:
cc:f5:a6:50:4f:cf:4e:a8:55:06:c6:8d:b8:60:25:
3b:90:a7:8f:f2:79:d3:ca:1b:d5:66:16:ab:86:41:
71:2a:4b:9f:70:b9:0d:6b:97:a2:e3:4d:a2:7c:31:
09:75:bd:f1:e2:e3:97:21:04:79:9b:07:40:cc:2b:
0c:87:cb:06:ee:6f:6b:90:cf:4b:ce:e2:49:da:0a:
d7:b4:ec:af:f3:98:9e:10:2e:16:fa:26:2c:3b:5a:
96:51:e1:92:80:06:14:39:02:7f:df:f3:fd:37:d7:
9f:dd:c1:db:15:7b:c9:50:cb:57:0d:a2:04:8e:e5:
d5:cd:fb:f2:b8:e5:c6:2b:2d:92:55:8b:d6:47:d0:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:DB:44:CE:70:40:57:36:31:E7:B5:9B:91:FD:EB:B0:39:AB:0D
X509v3 Authority Key Identifier:
keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:19:be:c8:d3:25:dc:dc:2b:0f:68:51:d8:f9:24:8b:94:5a:
0f:9e:57:78:8b:26:56:08:ac:14:29:37:48:3b:14:7a:7d:b5:
3e:ce:4e:1d:cf:21:6b:16:f1:6b:15:34:5c:28:72:f5:76:24:
78:cd:31:ee:01:c3:e7:e9:21:2a:c0:12:6a:d0:7a:c7:1f:61:
83:e6:20:ea:3d:e0:1c:c9:87:a8:7d:fa:03:6c:a1:99:fb:be:
9f:9f:e4:18:56:fd:f3:8e:14:c6:ad:d4:51:a8:d2:81:ac:3e:
4c:6c:af:e4:cf:21:89:5d:98:fd:40:d9:8f:00:48:f2:4c:31:
18:41:f7:24:d6:9d:c0:98:f8:78:69:cf:9c:fa:b1:1b:ca:0a:
88:18:3c:78:55:90:4b:74:33:63:4d:bb:c8:0c:f6:29:8a:d7:
a7:11:8a:e1:a2:68:11:af:41:7e:61:db:e3:ff:35:45:c1:b9:
63:bf:f3:3e:f1:5a:ac:5a:91:c3:92:6e:bf:c3:31:1f:87:f0:
aa:a4:97:99:63:46:9b:58:d3:d0:63:85:e0:01:ec:ec:1e:eb:
84:41:8f:eb:be:6a:da:18:65:0c:bd:6b:27:f4:52:1f:6e:33:
03:06:8c:59:95:29:ca:02:b3:cb:b9:03:d9:78:17:34:fc:59:
2b:e7:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:25:51 2026 by rpki-client