Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
File: YbpsRtyHsDEnih_K32Js1p32I9I.mft (raw, json)
Hash identifier: Eqqe04yQ5Pjb9Hbp8OkhsVNoXXIm5WseUyv+EDjkwv0=
Subject key identifier: 53:93:67:87:DF:CD:7F:03:5B:E2:1B:5F:9B:39:6F:EB:6C:FB:7E:28
Authority key identifier: 61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2
Certificate issuer: /CN=61ba6c46dc87b031278a1fcadf626cd69df623d2
Certificate serial: 019D3977F765C58DD3B1CEE2D5945CACBA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
Manifest number: B1
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: YbpsRtyHsDEnih_K32Js1p32I9I.crl (hash: p6Dl5DdGpKderqmolQBtp7uqECk7OZCUtrNgnVlWscM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f7:65:c5:8d:d3:b1:ce:e2:d5:94:5c:ac:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba6c46dc87b031278a1fcadf626cd69df623d2
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=53936787dfcd7f035be21b5f9b396feb6cfb7e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:17:76:0e:2f:c7:e4:dc:75:76:56:f3:b6:
68:5f:22:87:d6:ea:3f:10:85:dc:8b:b0:07:bf:48:
27:a8:77:29:f9:c4:d7:54:71:4c:2c:11:66:fa:44:
8f:b5:79:aa:0f:63:9c:a0:6c:2b:58:ea:2f:68:a9:
1b:a0:e9:83:0c:ae:3c:4e:9f:dc:d6:9e:fe:fa:a5:
ed:a8:6d:7d:03:b2:3a:14:ed:d0:47:2c:d8:ca:59:
8f:4a:43:8f:6e:5f:05:fd:17:3a:5b:64:3e:a4:8f:
d6:62:d1:0d:ad:70:43:0b:7c:4a:43:bd:77:e8:00:
77:65:f1:50:b8:18:b3:6e:9b:ff:47:c0:18:c5:9c:
d4:5d:ab:d2:25:a8:fc:40:e8:e3:e3:94:47:2c:c5:
11:91:39:75:4b:ce:8b:03:07:1f:6e:e7:75:91:8a:
8d:44:d8:83:83:ed:e6:23:f3:33:95:2b:95:66:ad:
0f:42:c4:fa:6e:bc:1b:a7:60:84:2b:19:7b:57:9d:
8f:17:3f:d2:51:06:0d:64:25:b9:53:64:bc:65:6d:
8c:6f:f8:5c:51:d3:cf:97:c6:38:be:fb:80:7d:d6:
df:8b:bb:bc:16:19:c5:3a:93:b0:ec:51:b5:09:67:
9c:24:28:cb:cb:24:b2:62:7e:86:b2:22:a6:72:f1:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:67:87:DF:CD:7F:03:5B:E2:1B:5F:9B:39:6F:EB:6C:FB:7E:28
X509v3 Authority Key Identifier:
keyid:61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c3:31:f5:d2:f7:61:a5:3f:20:7b:67:5d:21:71:b7:8d:f4:
ed:64:89:32:46:ea:31:ba:fd:2a:74:00:75:25:b6:90:2f:59:
c1:b6:0c:b2:d8:1e:34:8b:ba:43:f7:22:08:4c:83:86:69:d2:
2b:75:f6:5a:0a:46:ae:d4:0f:7c:8d:82:f3:d1:2b:14:24:e4:
ef:e5:db:dc:82:b2:2d:c3:88:6d:69:ec:73:7f:03:66:18:8d:
93:09:f9:4b:d8:67:1f:c8:92:71:ef:dd:7a:6f:ff:35:6b:1a:
43:67:7d:b7:1e:f2:c3:ba:26:e3:be:70:2a:11:75:60:57:62:
5c:a0:bd:68:08:6b:92:47:e7:44:1a:10:c1:fe:f3:33:a1:fe:
a4:ca:e2:1c:d1:a9:8e:c6:36:52:29:99:68:8c:62:5b:e5:e3:
10:a5:8f:ac:2c:00:c1:19:9c:55:47:8d:ae:6b:c0:53:4c:81:
d6:b4:a1:5e:1f:4e:8c:e0:1f:62:3c:b0:87:18:ba:c8:5b:96:
5f:00:40:db:20:09:c1:f7:9b:88:0f:d8:95:99:db:9a:d5:49:
72:ed:2b:35:78:d9:e5:88:bb:51:70:e7:4e:ed:3a:c7:0a:ce:
08:35:c1:a3:92:5c:29:8c:e5:67:90:b7:f8:d0:b3:7a:2f:49:
d7:30:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:51 2026 by rpki-client