Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier: xM8v4Vi8J7S+J5VGiqkwj0e5IMeKM5Ly6Kitokx+gWk=
Subject key identifier: 93:BD:7B:2C:0D:C0:22:3E:3C:B3:B5:88:D3:D0:F2:33:EC:CD:7F:25
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial: 019D386655451E99C4DE52301DF025596357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number: 138D
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: JfVO+Mfh1EnHSms7mdAXVwYqVqm5Z7cBqlHbDSD5VR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:55:45:1e:99:c4:de:52:30:1d:f0:25:59:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=93bd7b2c0dc0223e3cb3b588d3d0f233eccd7f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:c0:97:a5:73:06:28:0e:1f:68:ae:34:51:
61:ab:a1:20:9f:26:42:1a:9d:4a:dc:fc:e4:34:ea:
bc:ea:89:fc:ee:13:d2:1d:50:09:cc:b8:31:4b:21:
0b:c7:e1:76:64:0a:9c:63:fd:2a:18:21:eb:18:d2:
8e:07:eb:a7:14:48:a2:0e:97:ac:ed:32:ee:fd:fd:
a1:bb:90:f2:9b:e8:17:2b:97:0b:92:3e:e7:a6:19:
59:41:c5:2c:85:b5:67:ea:56:2c:3f:bf:65:a4:a4:
40:c1:95:3b:93:9c:1d:83:a1:08:f2:15:e2:59:bb:
ec:60:40:32:61:53:6b:ff:73:d9:74:23:1e:40:b7:
19:9d:0b:9f:9e:00:bd:8c:4c:8b:1b:4b:cd:3c:46:
73:91:4a:8c:12:51:5d:70:65:7d:67:e7:d6:e5:f7:
82:d5:26:20:06:a4:24:a0:34:10:9a:69:f8:d0:e7:
75:53:10:5a:03:83:fa:c2:fd:55:57:a0:d7:e1:e8:
02:36:99:e3:be:33:05:d8:f0:8a:20:40:fd:92:3a:
93:03:46:39:22:ff:15:5c:1d:63:56:4b:70:86:b8:
27:97:97:68:a8:c5:8f:29:b9:7e:67:27:ce:fb:1d:
8d:cc:d1:31:e4:4e:86:75:61:46:57:6b:fa:c7:6f:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BD:7B:2C:0D:C0:22:3E:3C:B3:B5:88:D3:D0:F2:33:EC:CD:7F:25
X509v3 Authority Key Identifier:
keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:2e:ef:b5:aa:9f:03:1a:75:0d:51:24:5e:89:60:6c:e8:
52:41:32:e9:e0:12:23:ff:22:a7:a3:b4:7a:a5:a0:20:66:52:
55:67:d8:85:8b:33:53:1a:e5:50:9a:13:81:4c:5b:09:2e:a1:
7a:aa:83:14:3e:a4:77:91:22:95:d9:45:61:c3:fe:89:59:c8:
64:d0:9a:ad:cb:15:b2:43:d4:31:02:8a:98:93:2d:b4:a7:e4:
70:0f:2d:e9:f1:85:f9:af:70:bf:48:15:d3:72:1c:5e:c4:a8:
c0:53:a7:96:a6:3c:17:2c:28:9e:77:ba:ab:31:f2:21:c7:3a:
1d:a8:9a:62:bf:33:6f:71:cd:f4:21:21:d1:ea:fd:41:59:91:
df:47:b3:bb:f3:7c:c3:d0:4a:7e:23:01:b6:21:8b:0b:ea:ee:
2d:21:e4:a9:13:84:33:27:94:aa:70:93:2d:72:25:13:ce:65:
49:62:ed:9e:9a:85:4c:d8:f7:b8:c3:d9:fc:27:b9:81:83:23:
2d:26:46:22:f4:2b:fe:2f:26:9f:e5:6a:e3:bb:7d:aa:47:17:
bf:80:10:fb:9c:dd:53:20:c6:ed:9b:23:2b:e1:0a:e7:23:78:
18:7a:47:93:1e:95:a3:9a:b9:ce:95:5f:44:00:da:63:2c:ca:
26:8f:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:23 2026 by rpki-client