Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: owkorXNxhndVziOLzO3RM0mprzMbPH+3YgwZ/xtAO9M=
Subject key identifier: 23:AE:2A:B0:79:BE:1D:A4:F5:27:E6:54:2A:85:48:44:2C:F3:31:2A
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 019D37F6FC8167DB5F14A1F059F09114497A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 04BA
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: XNSwHy+R9l2LG1KQHesnXzJeoklKYFY5WGWTbRGxGFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:81:67:db:5f:14:a1:f0:59:f0:91:14:49:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=23ae2ab079be1da4f527e6542a8548442cf3312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:9d:1e:5e:5b:60:85:0e:3b:3d:f5:90:d6:
2d:f4:59:ba:8c:fa:1f:92:34:47:ef:55:5d:23:d8:
0c:34:8a:2f:b2:19:45:4c:1c:f2:db:3d:da:47:d0:
43:c2:b3:7e:1b:c3:5a:a5:68:c6:40:b2:4e:21:cb:
c6:76:90:ff:d4:26:30:41:67:45:3d:36:18:45:f1:
eb:83:a5:8f:5f:e5:e6:25:a8:2d:bb:d7:56:3b:a7:
83:33:c3:b9:ed:5d:fb:fa:d0:b6:01:88:0f:34:cf:
27:f1:9a:fb:99:08:c2:d0:0e:6b:38:09:2c:86:8e:
70:34:94:84:38:52:c8:ba:a8:8f:e1:93:de:fb:73:
82:d7:40:f6:db:37:2e:20:51:26:34:0e:a5:da:da:
2a:b3:5a:1a:2e:c5:43:86:57:34:43:fc:3d:ee:db:
7a:b0:b0:56:27:81:09:ff:f9:bf:fc:4f:1c:62:70:
6f:0c:75:3a:83:ae:a6:f6:e8:47:1d:b2:21:1e:87:
36:c7:16:66:b8:be:7c:b4:1f:95:03:3b:91:2b:0e:
17:33:4b:93:f2:e9:be:0b:36:e3:de:9a:97:08:dc:
3a:fc:07:32:b4:9a:af:0d:04:75:e6:5d:77:5f:62:
22:69:5a:76:4a:1c:5f:68:82:7e:05:58:0b:60:1f:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:2A:B0:79:BE:1D:A4:F5:27:E6:54:2A:85:48:44:2C:F3:31:2A
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3a:d5:e8:d3:1f:96:9e:39:16:58:54:62:c4:df:9b:b3:88:
d6:05:3c:4f:de:cf:90:b5:2c:51:d6:75:4b:b4:ec:7e:69:e5:
7f:c9:0e:62:b0:9d:07:5a:4b:e7:8d:2e:a9:4b:99:51:48:56:
42:80:d6:0f:49:65:11:e6:5a:29:99:1e:ee:be:72:64:30:9c:
c0:45:f3:06:73:1f:30:02:54:c7:ea:9f:4e:e2:8f:c2:91:84:
51:6c:ef:95:a3:31:72:74:5f:23:9d:9c:b8:6a:39:f4:24:66:
4c:b1:d5:e3:22:13:4a:81:87:8a:0f:b9:d8:2e:5b:ad:36:2a:
e0:af:a8:55:fb:79:7f:59:cc:fc:3f:0a:63:64:82:c6:04:0c:
3e:82:cd:e3:82:9f:67:2c:19:11:50:e4:87:cd:dc:2f:93:fc:
59:30:27:1a:e9:ca:fc:aa:15:f3:a2:11:84:58:ea:01:80:2f:
27:f0:cd:55:3c:69:16:4c:52:d0:d3:87:d6:1e:5d:9f:42:dd:
1b:1a:07:b7:64:d6:3b:e8:09:68:9f:b3:2f:69:86:de:1e:02:
65:0f:2d:e8:6b:0d:66:87:8d:a2:20:9a:8f:f3:9a:9d:53:b7:
68:6f:2e:d7:15:f7:3f:4e:cc:fa:5c:7a:a1:cf:85:2f:2f:45:
89:65:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:55 2026 by rpki-client