Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: WgskYj+thydF82GE/maDKr9sHHXe4k7aEsmkFBqNk8w=
Subject key identifier: 17:B7:51:11:C3:8D:BD:98:FE:BE:0B:AA:A9:5E:0B:C8:D0:DD:7D:72
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 019D39AE774ACAE262CA567B2D7F5A14711A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 1154
Signing time: Sun 29 Mar 2026 13:00:28 +0000
Manifest this update: Sun 29 Mar 2026 13:00:28 +0000
Manifest next update: Mon 30 Mar 2026 13:00:28 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: hohg9ib8lE/uhVDf8XCA4tERDCwVwNsAgVkBEKjKCqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:77:4a:ca:e2:62:ca:56:7b:2d:7f:5a:14:71:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Mar 29 13:00:28 2026 GMT
Not After : Mar 30 13:00:28 2026 GMT
Subject: CN=17b75111c38dbd98febe0baaa95e0bc8d0dd7d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:67:a6:45:5d:e9:81:3c:f0:b3:4b:50:e8:
07:0f:9a:b2:b6:cc:1d:ed:28:04:be:49:90:90:0b:
d8:61:5d:9a:a7:76:18:b8:49:b6:1d:e1:08:f6:93:
1f:8b:70:da:fa:28:f5:94:85:7b:74:d6:f0:39:8f:
9b:26:5f:a7:7a:5a:7a:10:d0:ff:96:53:b7:79:3b:
e9:7c:2c:33:07:e5:46:79:bd:f5:07:cd:12:9e:58:
84:8a:12:07:93:8a:bd:03:a6:55:62:fa:36:a3:be:
12:ae:f0:68:16:07:13:92:d1:36:f8:a0:9f:35:ae:
b6:6f:9d:ec:1c:b8:02:8a:03:9a:99:07:22:98:8e:
8a:44:a1:e5:0c:ce:5d:b3:93:e6:02:76:06:cb:cf:
b5:55:9e:86:11:83:cf:21:8a:f4:db:7c:37:57:29:
27:48:cc:e8:20:34:57:f1:35:34:e6:df:1a:53:c4:
c1:67:a2:88:c2:fc:79:c1:05:67:ce:e6:32:a7:77:
e0:35:a4:c7:00:9d:af:2f:36:40:6d:7a:be:d6:63:
9d:17:c4:9a:47:34:22:69:ef:90:82:aa:e0:3c:90:
06:d0:a6:c1:7d:21:5b:cd:36:ce:46:f6:bc:db:a0:
b8:dd:8c:b3:a7:07:d3:32:42:8b:e7:fc:83:38:42:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:51:11:C3:8D:BD:98:FE:BE:0B:AA:A9:5E:0B:C8:D0:DD:7D:72
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:1f:d8:3d:e4:a1:7c:9b:6b:c7:80:12:5a:7c:91:e7:53:
de:d9:68:d5:60:0a:89:39:48:88:a9:22:2f:fb:4e:39:fc:b8:
29:f2:4a:14:2c:e7:5b:2a:bd:f4:93:a3:79:72:25:b9:b7:af:
8c:08:a3:85:66:f2:c2:74:34:27:72:4f:ed:1b:54:a7:68:88:
66:6b:99:6d:d7:32:be:1d:91:01:7f:cf:f5:71:3c:0d:f1:20:
23:25:c5:43:75:13:15:e3:4a:c8:2a:00:a0:68:72:1b:79:d7:
0f:75:e7:52:6e:f1:8b:03:1c:f3:63:56:33:f4:41:1d:b2:e1:
55:5d:c1:98:00:9f:06:b5:70:2d:f4:5d:9b:f7:8e:5f:0a:bd:
bc:e6:fe:7c:af:33:93:7c:f3:50:e2:8a:8a:2d:29:58:fb:22:
87:a7:84:3d:4c:90:c3:d5:82:3f:d3:52:da:1f:d4:b0:7e:b9:
aa:d5:14:1d:1f:74:f1:ea:ca:92:57:f3:51:a5:27:22:05:4d:
69:05:6d:f1:5f:66:86:9f:8a:93:6c:25:f6:8c:fb:46:cb:d7:
f1:af:d4:cc:3f:49:06:5f:88:b6:38:6f:93:51:f1:57:80:2f:
93:27:96:3b:97:3b:55:ec:dc:e7:0f:47:b4:10:cd:32:2b:e2:
5d:32:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:38 2026 by rpki-client