Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: qndO1kPxFR8MvOT/pknfOeD8KlCuwZMUEZ1ZvQKnVi0=
Subject key identifier: 09:EB:66:4B:B6:FD:41:95:F8:2B:32:AD:D0:71:18:45:9E:DF:16:0D
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 019D382E3845FB2C3B5BDB303FA1385BAB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0FC4
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: DJECwD4vw+c+YxL3LkwhDwP1XQVLZtzufeuyQtZTK3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:38:45:fb:2c:3b:5b:db:30:3f:a1:38:5b:ab:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=09eb664bb6fd4195f82b32add07118459edf160d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:b7:a6:49:d1:7f:2c:c0:fc:6e:46:b1:72:
1b:89:c0:2d:13:d6:e3:78:c6:c8:5f:a3:6f:dd:66:
c9:52:95:5c:e9:80:2e:fe:df:e8:ed:5b:bd:7b:1b:
78:37:df:21:09:b7:40:17:17:36:ea:6d:40:2c:77:
7b:04:8e:35:db:56:c0:ae:81:7f:e7:c2:77:7c:c4:
a9:92:52:d8:d5:97:ba:62:4d:2c:de:42:fb:64:3f:
79:34:97:3f:dc:e9:c7:cc:e0:2f:a2:71:af:0d:cd:
0a:b0:2d:81:90:b6:10:5e:0d:91:5b:44:11:c7:05:
c6:cc:92:32:b8:3d:0d:d5:0b:5a:72:a7:f3:6e:40:
9c:4f:d6:08:cd:3f:08:83:e6:b0:0c:25:c5:8b:ca:
92:c8:57:2c:7a:fd:f5:e5:a2:e2:dc:04:b4:e7:a8:
d4:0c:52:99:58:05:2f:a6:32:89:ab:d8:b3:05:60:
7b:e3:71:ca:ca:67:18:b2:5a:f7:dc:58:40:37:31:
24:9e:86:7b:e6:0a:83:45:38:c4:c1:6b:f2:4e:1b:
e1:78:49:38:03:df:9e:3f:8c:f3:7a:c4:62:9e:0f:
4d:8d:cf:58:cc:da:94:07:a0:5c:a3:8b:59:00:1a:
59:bc:b9:76:41:f3:ff:7d:b8:a5:96:ad:a8:eb:82:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:66:4B:B6:FD:41:95:F8:2B:32:AD:D0:71:18:45:9E:DF:16:0D
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:b1:30:51:10:18:14:53:63:02:18:0f:c8:55:ac:3e:a6:
a4:c9:f8:b2:2d:eb:3f:0a:47:be:3e:cd:16:3e:eb:12:36:3f:
85:96:12:d3:63:42:c8:ff:83:ba:16:e8:96:0d:1a:c9:90:63:
70:a5:32:55:0c:73:cd:ac:c4:b3:f5:e4:35:99:62:fe:55:fc:
a1:72:f6:18:45:32:8c:a4:1e:86:af:dd:c4:cb:1e:a5:0b:7e:
f0:a4:fc:fe:ee:04:64:d2:71:72:b5:9c:ed:f5:b9:41:ec:cb:
38:b2:17:d7:7a:bd:53:cb:ab:05:e9:0c:e1:c1:3d:d4:67:04:
5e:17:6b:48:a6:4d:13:f0:1c:fe:d3:23:08:f4:3f:1c:e5:99:
d2:62:06:dd:4e:4c:82:59:14:10:ed:5c:b5:e2:d0:95:49:cb:
a6:a1:86:96:27:00:81:3b:4a:59:a2:aa:0c:e8:9d:0a:be:b6:
e4:f2:a3:c2:a3:71:48:98:1e:4f:88:9c:f1:c6:d4:d4:80:13:
eb:8f:0d:f1:b9:08:e0:ab:c0:8c:35:8d:2e:b9:d6:26:d6:87:
75:91:bd:76:2a:f1:ea:ba:fa:7d:87:aa:50:ef:c0:b3:d8:98:
1a:e2:36:c9:28:8c:a0:f1:af:bc:95:4b:d2:21:01:9b:b3:e5:
5a:2e:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:05 2026 by rpki-client