Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: cuzKBzG3sVeqghYWavdopmhlTYgPboiax6S07X/VvVk=
Subject key identifier: E4:E1:A2:65:76:20:20:9F:10:DF:35:5D:47:82:C0:37:CC:17:9B:6B
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019D3909FDC1544F346C18F25E27918738BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0F83
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: T6h37Y9hsjx1VlGBmZ0Wmf7Uc5h5ZPT7OhsuxCWcCro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fd:c1:54:4f:34:6c:18:f2:5e:27:91:87:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=e4e1a2657620209f10df355d4782c037cc179b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:73:2d:c7:7d:f9:d4:82:7e:be:00:87:f9:
8d:dc:e2:d2:8c:a0:21:15:7e:c2:bb:25:7b:5c:95:
a7:ff:b1:9b:65:75:26:f7:cf:f1:30:87:db:fd:db:
04:0c:4a:af:61:3e:a8:69:29:85:31:06:ed:07:54:
89:ce:4d:d7:d0:d8:21:08:8f:53:e4:ff:15:37:ec:
e1:2f:13:95:69:7d:d9:b5:8f:75:a3:fa:5c:21:cc:
53:30:4b:73:6c:4f:6c:cc:26:bd:12:eb:34:a5:c6:
61:4f:a8:43:a9:f0:37:05:d9:a3:09:9d:64:e7:d8:
10:2f:00:ba:33:36:e9:5a:0f:8b:a4:68:59:2f:57:
96:db:a1:92:b0:19:f3:ce:5f:08:b7:c9:13:ea:8f:
90:c9:f7:07:9b:c3:12:2b:c8:08:6f:d3:64:95:4f:
ab:e7:db:85:4f:6b:1a:66:cc:12:3f:ef:3a:50:6f:
5c:c0:3e:78:cc:c9:21:78:af:dd:a3:a5:c4:3d:df:
c8:80:2d:77:fc:20:b5:3c:cc:68:24:4a:b7:c4:17:
07:df:36:59:f9:aa:63:7f:bb:9a:4a:fa:10:1c:31:
81:2e:fe:a5:6f:81:c2:b0:25:70:ff:f3:33:f6:8a:
c4:05:d8:be:e6:ed:3e:b4:2e:43:5a:cf:6a:c1:b5:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:A2:65:76:20:20:9F:10:DF:35:5D:47:82:C0:37:CC:17:9B:6B
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:14:2d:e1:be:8d:88:12:38:82:85:95:c5:03:75:d4:4d:55:
a6:3c:68:0e:b0:8e:e1:14:f5:fd:74:26:40:89:6f:89:a7:51:
cf:d8:7f:a7:fc:ba:96:b1:fa:4e:f5:af:30:02:a5:be:8d:1c:
94:6f:97:ad:ed:93:2f:1d:b3:c4:10:b0:7c:d4:c3:e0:4b:d5:
03:b9:07:d7:b6:4e:4c:89:d2:a8:7f:91:28:3d:c0:7d:56:77:
46:67:21:7f:36:52:67:93:1c:03:83:1b:b2:1b:9c:b3:d7:65:
c4:8b:e2:9e:f5:c3:5d:66:ba:ac:4c:93:e6:e1:9d:67:3a:20:
c9:3c:a1:2c:af:96:d5:eb:5f:76:ed:13:0c:46:ea:90:de:84:
19:f0:58:77:33:8c:41:71:ec:cc:7b:b2:84:91:54:8a:d5:8f:
9e:aa:6c:6c:8a:0d:ec:c0:5c:0a:df:62:6a:15:9c:d4:1e:10:
b6:e1:94:69:e0:01:6a:50:09:52:14:78:9b:4e:1d:73:37:ad:
3a:95:5e:b9:15:25:d7:f6:f3:5b:a0:61:97:cb:b4:67:0f:cd:
b2:6b:1b:9c:79:30:ec:d5:69:5d:ab:c0:46:1e:20:81:1e:9a:
3e:f3:39:44:df:86:33:9e:73:7b:9f:95:17:93:f8:41:53:d9:
3e:b9:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:26 2026 by rpki-client