Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier: eyRsUSVLUE/xNPKcJ8/kZ1TwgN1ARIKk+8s6Os8vdRs=
Subject key identifier: 94:CE:CA:F9:D3:65:95:CF:64:7B:77:2F:BE:33:57:1F:98:30:22:A3
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial: 019D3865C21A8E892BFD5CE55CA8540A0738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number: 06D3
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: eU5GGvZctwupMRZg9RKG66d3HkmTyQHCh1Jex1K0/3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c2:1a:8e:89:2b:fd:5c:e5:5c:a8:54:0a:07:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=94cecaf9d36595cf647b772fbe33571f983022a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:da:7b:d9:69:7c:a6:b7:43:96:ff:53:57:
37:63:2c:75:6a:ff:4b:20:e9:97:1e:99:99:64:c0:
9a:75:6d:d1:e9:83:91:5f:ee:ed:cb:9b:65:5f:23:
2f:7b:a4:1d:e3:de:33:72:5d:14:b5:50:89:3b:5d:
28:0d:5b:32:e8:eb:2b:4f:5f:7d:e6:3b:79:21:0a:
ac:cc:e4:82:77:b6:5f:a9:28:4b:93:7b:76:e8:cd:
6e:4d:13:d9:40:ee:00:f4:df:ec:09:bd:b7:4a:83:
5d:af:b1:66:30:60:19:2f:f5:0b:05:bb:f6:3c:0b:
40:b5:1e:6e:09:23:00:54:36:37:7c:b7:46:a4:7d:
41:98:4c:ac:cf:ad:9a:d7:0f:85:0c:d1:5c:ed:2f:
85:93:42:5b:9d:c6:c9:70:e7:bf:b4:d9:e4:ae:84:
8d:80:e2:30:a0:71:46:ed:f5:71:2a:48:c3:e6:bb:
1c:a5:df:e0:57:b4:7d:11:76:36:e4:16:ee:00:9d:
15:77:b2:fe:86:95:1b:99:f3:e1:49:4f:67:65:81:
76:5f:e9:2f:b5:d2:7d:9b:c8:28:a1:1f:41:91:3d:
bc:92:9d:67:15:93:3a:e3:69:e2:6d:8c:ed:41:91:
8b:6b:4b:2b:85:a9:f3:21:20:62:c0:fc:7b:17:25:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:CA:F9:D3:65:95:CF:64:7B:77:2F:BE:33:57:1F:98:30:22:A3
X509v3 Authority Key Identifier:
keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:04:a4:bf:ca:c2:95:16:53:e6:2a:cf:24:ca:90:a0:e9:
46:08:af:20:26:29:5f:e8:b3:59:10:d0:9e:fb:6f:cf:59:88:
cb:fe:b5:fb:46:cc:f3:50:8b:ff:f2:cc:6a:55:13:93:4b:49:
2d:19:26:cc:db:77:db:4f:39:1d:33:cb:53:51:4e:fe:ff:61:
18:ba:1d:15:33:e5:c1:38:ea:a6:5c:16:6d:c0:91:4e:83:c8:
56:7e:6b:06:9f:d3:55:b9:1c:a0:cd:5f:2e:80:29:c9:d1:4b:
45:4c:9b:02:d4:f8:b9:d7:9b:6d:96:e2:47:e0:22:37:11:e4:
20:6e:b5:5e:55:ea:77:c0:d6:85:33:e4:01:b5:ce:e4:0c:a4:
dc:e7:75:7a:ab:8d:4f:aa:44:f5:07:63:15:9d:f5:13:b5:05:
db:03:5a:04:cb:ee:3b:d2:75:54:42:fa:01:c1:10:70:ce:16:
fa:59:06:1a:13:f2:4d:31:9b:c1:1f:7d:15:43:c3:de:1f:f9:
9c:ae:30:4d:6e:ac:da:61:a9:dc:50:4b:cc:8b:2b:95:d6:40:
3c:be:b1:55:39:24:47:e4:71:43:80:fb:f9:c6:fb:67:81:99:
67:48:93:6e:ee:57:88:b0:5c:70:b3:87:fd:f4:a3:8c:61:5e:
ab:6e:f7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:39 2026 by rpki-client