Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: XFXwojFTKeZS0ytW/LqtzlLMKcebRPAIaOaLcn+r4GE=
Subject key identifier: AB:C3:32:31:33:27:58:EE:9B:B7:A9:72:4C:CD:AF:DA:C2:BE:F9:28
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019D3866AC2BF1DD5306A46AB6D3F0080E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 14E7
Signing time: Sun 29 Mar 2026 07:02:25 +0000
Manifest this update: Sun 29 Mar 2026 07:02:25 +0000
Manifest next update: Mon 30 Mar 2026 07:02:25 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: xVhEAKIElRBhxNXIxJE6y10rhUVCiFEOohpDCVJz/8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:ac:2b:f1:dd:53:06:a4:6a:b6:d3:f0:08:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Mar 29 07:02:25 2026 GMT
Not After : Mar 30 07:02:25 2026 GMT
Subject: CN=abc33231332758ee9bb7a9724ccdafdac2bef928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:d2:87:b6:57:80:f5:71:07:d5:80:4f:c3:
b7:40:f5:2f:77:5d:50:67:1d:c8:5f:50:dc:a8:02:
cf:22:91:c0:06:e5:1c:45:a7:58:37:b0:40:18:76:
5d:22:a6:cb:9b:f7:bf:20:23:70:38:23:bc:93:52:
74:39:99:39:8a:7e:77:09:46:be:e0:2c:cc:4f:47:
c2:5f:ae:97:70:0a:a9:47:ae:5e:a5:b5:7b:84:d5:
09:dc:71:8c:0e:3d:b1:b5:9b:7f:c8:56:f7:67:f7:
be:65:77:1f:50:60:a6:43:51:8c:98:1f:a7:3e:15:
a5:c7:79:6f:96:f5:4a:6f:66:f0:c7:cc:74:a9:19:
e1:41:73:3f:ca:4c:75:e1:c0:8e:7c:62:66:ef:59:
df:86:52:7d:8d:dd:e3:72:8d:ed:4f:52:73:45:d9:
b5:4b:32:a2:d4:3c:2a:50:75:3c:ca:28:d0:12:7c:
3b:d8:70:34:f8:86:52:be:3a:70:6c:99:a5:93:4a:
ec:c5:18:8a:5b:b2:fd:52:1c:18:27:0c:b0:3b:c8:
da:b4:18:6a:6a:86:66:ed:b2:90:63:ad:c0:b1:40:
53:04:a3:7f:4f:ce:58:9d:f6:69:88:92:cb:01:5b:
2d:f6:eb:22:6b:47:32:c7:8f:1d:7b:c9:6d:74:f8:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:32:31:33:27:58:EE:9B:B7:A9:72:4C:CD:AF:DA:C2:BE:F9:28
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:e9:90:d8:6e:76:3f:7b:5e:58:a1:0f:5f:70:da:b7:19:
0b:1b:be:a5:cb:94:f1:a7:77:89:87:0e:0c:d8:64:aa:55:c8:
4b:50:0e:00:87:c1:ff:b2:a3:6c:dc:c0:05:f2:e4:48:c7:7e:
d2:5a:90:d1:56:e1:3a:52:a1:72:00:08:25:b9:9a:3b:8b:7a:
e4:58:68:6b:29:bb:83:ef:1a:45:79:f2:e7:35:71:f8:2b:50:
79:ba:3c:9b:4b:de:b6:1e:a1:7a:c7:4c:eb:43:6d:13:10:87:
6d:16:8f:d6:71:bd:c8:bd:cc:f0:70:94:cf:e0:0e:49:e8:ed:
90:a5:3a:3a:8c:1f:ec:82:05:83:ba:08:de:4d:24:a4:af:a9:
6e:58:72:c5:00:0f:55:2b:b8:16:e9:18:4b:6f:f2:d7:b3:81:
64:27:30:8a:f4:62:98:4b:15:92:62:5b:fc:2a:a2:8b:f1:d4:
f6:0d:78:33:02:f7:51:08:cb:ac:17:c5:cc:6d:82:2e:d5:3c:
da:0c:b8:3c:74:15:0f:d1:3b:06:49:eb:0a:1a:09:50:0c:75:
d8:63:35:0f:cd:af:27:a6:da:b3:11:90:c1:d2:9f:5b:c7:ff:
0e:c4:d4:61:a1:d9:13:43:af:ed:04:d3:66:63:5f:83:13:1f:
10:7e:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:24 2026 by rpki-client