Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: G/fcOVvvnj7pNWviVT9ssRtcRXuf53OBX1x1tYynE28=
Subject key identifier: C4:6B:E1:E3:13:76:8C:38:B9:58:71:B4:19:EB:EB:B0:30:43:F0:69
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 019D3752FD1C83BED2E0E1DBE200F7452671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 11EF
Signing time: Sun 29 Mar 2026 02:01:18 +0000
Manifest this update: Sun 29 Mar 2026 02:01:18 +0000
Manifest next update: Mon 30 Mar 2026 02:01:18 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: npa03g+/eZM7PD1aPi8ZBUmAuZpnVnnBLKuf3z1rEZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:fd:1c:83:be:d2:e0:e1:db:e2:00:f7:45:26:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Mar 29 02:01:18 2026 GMT
Not After : Mar 30 02:01:18 2026 GMT
Subject: CN=c46be1e313768c38b95871b419ebebb03043f069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:7f:ba:9e:d1:85:45:8c:a3:9d:4b:6d:d9:
f6:68:d5:c6:0b:78:50:43:f5:64:42:ae:4d:89:0e:
2c:96:3a:11:72:cf:46:5f:7b:08:af:86:4c:96:5b:
ab:c1:0a:14:1a:07:6f:d1:07:d5:f3:b7:79:b0:22:
47:40:dc:e2:75:36:10:82:94:d3:2f:74:7e:05:22:
ac:74:72:11:04:fb:2a:91:cd:40:da:3c:0e:3e:4c:
1f:71:3c:b8:e7:2a:c9:bb:10:bb:3b:fb:b3:1b:0f:
64:b4:69:04:e9:e5:1d:62:b0:84:ed:72:ed:a9:53:
79:72:e7:24:fb:b0:d1:b4:5a:93:42:07:d4:2a:51:
a6:8c:ea:a0:e5:75:0f:1f:8c:7c:7f:b5:dc:64:0a:
16:be:f4:31:0f:38:80:c5:f9:0d:14:60:31:be:74:
34:9c:ec:7e:ca:67:44:17:61:d8:65:a0:3e:29:4f:
70:7b:8e:a3:af:ef:6e:d8:7a:37:67:b5:f9:72:7f:
be:c6:14:a9:e1:6f:70:f5:52:12:bc:23:ba:8d:8a:
f1:41:db:ac:6b:b8:bb:e9:23:60:c2:80:60:64:4d:
21:a8:97:35:b4:02:25:5e:f8:80:35:da:1a:b3:6b:
92:eb:7c:bb:02:97:b8:20:ab:9f:b5:53:74:b2:a0:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:E1:E3:13:76:8C:38:B9:58:71:B4:19:EB:EB:B0:30:43:F0:69
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:75:73:a5:59:10:6d:4c:9b:fa:1e:d2:db:57:68:a1:82:d1:
d6:f8:bd:59:04:c6:cb:fd:2e:3e:3c:32:e1:5d:00:eb:95:b6:
3e:cd:cc:49:c0:6b:36:4c:c9:9d:07:cb:48:2c:65:e4:21:af:
21:e9:36:af:25:2e:25:31:a0:df:a9:b8:2b:b1:3c:9e:74:39:
2c:07:d6:c8:94:c6:0e:84:63:8c:dc:9c:5d:73:d2:10:0c:a3:
fa:ec:28:90:c3:b2:65:9c:da:ca:f4:34:27:a5:64:62:66:49:
1f:fc:d5:1f:5f:f3:6b:d6:e9:35:a6:8c:4f:fb:36:20:e9:05:
dd:92:fa:3b:4c:ff:2b:0c:bb:03:b4:55:e4:c4:c1:07:10:d2:
6b:b1:ce:c4:2b:59:b5:44:ad:56:f9:44:c8:5a:b5:77:c8:64:
55:17:b5:3e:46:4d:81:16:5d:fe:3f:6e:d9:58:e7:9c:0a:fc:
85:b4:d9:15:5a:30:cf:8f:51:00:bb:7b:6a:94:16:32:87:ec:
31:d0:e1:48:18:09:01:7a:c8:ab:4d:6a:5e:84:e4:0c:51:61:
91:73:2d:f7:29:6c:3c:ad:6c:10:66:e8:63:f2:b8:33:cb:fb:
8b:67:02:39:ac:8e:ed:eb:74:eb:7e:68:01:1c:ad:3a:76:79:
c5:2c:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:59 2026 by rpki-client