Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier: dRazGC1OaALivEqPj0+NfvxWkGYohHqDgzFXdeLPFrM=
Subject key identifier: 30:1C:24:C8:33:98:C0:39:BB:16:14:FE:95:88:A1:A6:43:27:FB:6B
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial: 019D3752D004BBAA6911A149B3985E3013D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: FP1JkW2na6NXrAPz/3uJAedfaHmpraIhQZBi02JM6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d0:04:bb:aa:69:11:a1:49:b3:98:5e:30:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=301c24c83398c039bb1614fe9588a1a64327fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:db:a1:a1:d4:38:8e:ce:d0:d0:f3:d3:fd:
f4:01:13:4b:c0:81:c4:1a:7e:0b:0c:22:57:8a:22:
4d:50:11:2f:06:b1:f3:57:24:98:05:be:a7:8d:a5:
7f:88:d6:a8:13:1d:44:0a:7f:3d:05:f5:2e:3b:73:
c6:ae:cf:9c:23:5c:2f:b6:96:18:40:9f:8a:e1:96:
37:a9:5a:1b:4b:a3:3e:2a:85:4b:27:ad:bc:64:25:
40:72:6e:39:8e:31:2e:b1:2d:b2:77:0d:9e:40:03:
22:53:60:5f:e2:1d:71:b2:8d:69:08:a0:69:9b:d2:
7d:f5:c8:84:b2:b2:d1:ee:74:a1:b3:76:9f:6a:03:
2c:f3:a4:35:ad:d7:e4:10:55:98:d7:cc:fc:82:8b:
26:ed:86:17:08:38:87:de:25:80:6d:17:f1:20:fb:
61:15:af:0c:fe:21:df:80:b7:38:cb:55:ed:10:35:
a1:3c:61:c8:9b:a3:49:45:3a:7f:54:e0:67:4c:40:
2f:b5:8c:06:b6:f7:bc:0b:3b:8a:58:17:95:ff:d9:
26:5d:40:00:b8:53:0c:6f:91:8a:97:24:df:af:4d:
dc:65:41:f1:cc:51:b8:a1:26:ab:cd:5b:64:c5:e0:
e2:58:a9:70:04:ed:fa:4c:f8:6a:8e:9f:19:a0:ff:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:24:C8:33:98:C0:39:BB:16:14:FE:95:88:A1:A6:43:27:FB:6B
X509v3 Authority Key Identifier:
keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e7:05:f5:e5:47:ba:67:06:3d:73:78:0a:a0:05:f1:2e:8e:
2f:b2:12:b3:5c:14:1d:2d:95:d3:89:43:8b:d1:85:97:72:e3:
0c:f9:dc:24:8f:95:20:f3:e2:09:8b:f8:b2:37:7e:1f:b8:0a:
cd:49:bc:cc:cb:6b:39:dc:44:52:3a:ba:d8:2f:6a:5d:87:29:
6b:cb:14:96:68:80:04:62:77:0f:4c:ce:0f:f6:17:92:38:68:
20:0f:74:55:45:bb:a5:b9:67:8b:d7:f9:8d:6d:ce:7b:4f:12:
5a:fe:ce:c7:5c:d4:b7:d5:77:da:23:f0:5e:8b:7f:a3:75:9f:
1b:58:32:9a:42:26:39:0f:53:b1:c7:f4:31:82:1f:c0:d2:c5:
4c:08:85:ab:7c:8a:2b:d8:eb:ec:14:d7:d5:b2:36:cb:a8:a4:
33:ff:b2:9e:e8:63:c9:f1:4f:61:8d:eb:d5:fc:2e:8f:97:a9:
80:66:77:e3:79:a2:c9:a8:30:9a:d4:00:9a:03:d0:5d:80:67:
73:02:ec:2f:46:ba:22:87:f2:17:65:6f:27:85:5a:5a:35:87:
85:1c:46:f3:21:40:99:57:35:3e:be:bb:fb:6e:56:8c:90:34:
88:a7:df:c4:86:63:05:52:c1:e3:d8:26:ec:9f:1e:28:d6:cb:
57:da:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:22 2026 by rpki-client