Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
File: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft (raw, json)
Hash identifier: 30OQ1pDm98WSWw6LlqGtEzFIrk7YPilobnGrN/mKvY0=
Subject key identifier: 10:CA:8D:74:D1:70:B2:2F:6A:78:CF:96:57:D9:0C:8D:0E:EA:CD:4B
Authority key identifier: C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
Certificate issuer: /CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Certificate serial: 019D37527994FF90485F395243EE7435CCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
Manifest number: 105C
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl (hash: 0/LLqwUCDxR2cG2hrAT70I9JxG3OYyFumPPEMtYmFzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:79:94:ff:90:48:5f:39:52:43:ee:74:35:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=10ca8d74d170b22f6a78cf9657d90c8d0eeacd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:cf:fd:76:16:2b:c0:83:76:09:84:6b:20:
fa:6b:13:2e:03:88:3e:d9:7e:fb:61:81:96:90:c8:
45:6f:be:ca:c3:9f:45:54:f0:57:60:c7:51:d9:1f:
c5:53:ec:3b:93:41:45:0c:54:34:c1:1f:18:9c:21:
21:c8:ae:79:6a:47:13:a7:a5:42:f2:90:09:d3:d1:
de:5d:5f:5a:13:01:3e:0c:25:36:67:40:50:d0:a4:
54:a8:da:a5:1b:7f:c5:8e:74:a3:95:3a:50:d3:69:
8b:00:1e:ca:50:20:4a:49:f3:79:66:21:b9:38:41:
ce:d3:1d:12:80:c3:0b:a6:e5:e5:80:a4:87:58:6d:
2e:2b:57:3e:28:38:d4:3a:91:b6:61:2e:6a:58:b9:
49:6d:51:c0:ad:91:b7:b2:53:a8:b2:df:fa:01:29:
30:cc:98:e0:b4:b0:1c:7f:e2:26:3f:23:75:61:6a:
df:d0:1a:0d:54:9d:e3:9e:24:e3:30:81:fe:a9:bb:
e6:be:40:0e:ae:40:2a:05:2d:d0:02:89:48:30:4e:
06:0b:e6:ad:9a:25:08:a7:ca:8c:b6:3a:d5:91:01:
45:47:8d:94:71:ae:05:20:5d:58:b8:ef:bb:83:70:
3d:59:0f:19:af:a6:88:72:55:a4:6f:87:fc:c2:c1:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:8D:74:D1:70:B2:2F:6A:78:CF:96:57:D9:0C:8D:0E:EA:CD:4B
X509v3 Authority Key Identifier:
keyid:C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:45:71:bc:3f:2c:3e:d7:89:a2:96:a6:c1:f7:ee:ca:00:
11:4b:e0:c1:f7:32:bd:48:34:a4:69:c7:c8:55:39:bd:a4:d7:
af:db:69:51:4d:76:c1:22:11:46:ed:d8:b5:c2:52:8c:70:99:
28:e7:84:2c:c1:f7:a8:62:a2:ca:56:ce:8e:96:1e:f3:bd:6c:
3f:15:ac:51:45:67:09:6d:87:ff:43:26:0b:4c:0c:e2:ca:00:
29:6b:39:c6:4d:3e:36:ef:4e:40:db:7b:08:0d:92:71:2a:84:
3a:68:99:3f:32:6d:d0:e4:9c:ba:08:a9:3f:05:35:5c:44:3c:
b9:4c:76:23:25:54:0c:6f:10:9c:6b:ce:a2:56:f1:01:ce:9b:
6a:3e:45:f0:01:fe:14:69:53:e0:f3:1c:97:fa:26:05:33:ba:
73:de:58:64:ca:ae:bc:8b:ed:45:51:c0:c2:7c:49:32:1a:b7:
9c:f1:ec:00:27:0f:25:6b:cd:58:7d:65:13:2d:f9:ff:f0:a8:
ed:aa:f4:37:cd:b3:7d:43:fc:0f:d8:fa:33:0a:c2:ba:4f:94:
dd:11:e8:07:45:13:0f:b0:33:f1:b0:dd:bd:8d:ef:23:79:25:
96:a7:86:c0:b7:04:9b:05:dd:67:5d:d2:f8:67:c6:e7:93:7d:
5c:fa:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:39 2026 by rpki-client