Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: 9Rw+meKYIERUGkHlBjc7uYMTBzohpPgVZcwAwC4QgLs=
Subject key identifier: 17:D3:68:5D:42:C9:C8:24:6B:44:DB:AD:B8:9C:CE:B1:DD:88:5C:24
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 019D3789BD80EE58AC7CDD8B3B5D7A8EAE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 039E
Signing time: Sun 29 Mar 2026 03:01:06 +0000
Manifest this update: Sun 29 Mar 2026 03:01:06 +0000
Manifest next update: Mon 30 Mar 2026 03:01:06 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: pDbCXe/Flx7Kp8HHTpG+zJtRrR0ivkSulbiRJ9QzcDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bd:80:ee:58:ac:7c:dd:8b:3b:5d:7a:8e:ae:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Mar 29 03:01:06 2026 GMT
Not After : Mar 30 03:01:06 2026 GMT
Subject: CN=17d3685d42c9c8246b44dbadb89cceb1dd885c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:00:34:7d:a5:57:5f:b5:01:4a:5e:f0:00:
37:ff:7e:05:a0:6c:fe:9b:7c:83:d4:e1:58:ab:81:
8e:a1:a1:b1:81:a7:dd:07:2c:fd:71:0a:46:d4:ac:
01:80:9c:2d:d3:59:c8:8a:fc:58:55:aa:b9:4b:20:
39:a8:c8:ee:8a:8e:5e:2d:ef:3b:9c:db:48:75:54:
75:a0:a3:b1:23:99:ed:fe:21:3f:1e:7d:ff:b7:b4:
6c:4c:43:13:37:c6:dc:29:48:0d:79:16:73:47:12:
61:db:aa:1d:bd:a9:22:01:50:10:f9:4b:93:b0:07:
bf:fe:0f:37:49:25:89:49:10:b9:88:d8:d2:e4:29:
87:26:53:15:21:58:e5:fe:60:58:3e:e8:21:13:60:
c7:46:85:72:4c:db:df:71:b1:18:0d:cd:2b:c2:35:
f6:f3:b2:2e:db:a6:1f:27:dc:f8:a7:26:e3:5d:e4:
ba:7b:96:b7:81:29:33:af:29:eb:65:77:6e:97:e2:
f6:fb:4d:6f:10:ad:44:14:bb:71:a2:6d:74:88:5e:
d9:12:b0:97:c8:9a:be:68:8c:95:52:75:fc:c2:79:
c1:88:9c:11:4c:f9:85:85:76:d6:2b:6f:d9:1c:57:
a9:fa:5e:86:74:04:0f:64:9c:d3:15:34:95:34:dc:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:68:5D:42:C9:C8:24:6B:44:DB:AD:B8:9C:CE:B1:DD:88:5C:24
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e6:71:87:25:2a:1a:22:48:be:4c:b6:ec:8d:fd:b7:33:49:
ed:99:38:dc:6a:cf:6f:22:3e:dd:b3:1a:5a:1c:18:70:c9:4c:
4e:56:2d:a2:f3:bf:4b:ba:92:57:ff:16:21:ad:4a:72:98:ba:
91:c4:04:5e:91:27:df:ff:0a:88:cb:ca:43:f9:35:dc:f4:cd:
c1:9d:4f:09:c1:0f:ee:10:a7:6a:c8:c8:40:21:5b:fd:84:d8:
4c:24:d6:fc:12:1c:6b:67:5b:de:ec:b9:44:a2:74:56:7a:af:
17:3f:c9:4d:19:54:6c:9d:a5:18:2a:f8:10:af:c9:cb:bd:ad:
06:08:60:de:a5:56:cb:e9:32:52:39:6a:37:fd:cf:64:37:9e:
10:97:2e:ea:84:17:83:a5:ee:0f:95:6a:77:ef:c3:98:99:c3:
16:1c:52:25:30:9c:f1:91:64:e0:6e:fd:33:68:93:90:ae:8b:
32:75:3b:be:a5:3e:54:66:d3:12:46:6d:ee:95:21:21:5a:ec:
9a:44:4a:3b:43:c7:e4:65:53:54:9c:15:37:0c:83:4d:09:5f:
fc:81:b0:5a:9b:b8:0f:12:42:4c:53:03:31:fd:c2:f7:f6:a3:
78:fe:84:65:e5:24:ed:99:d2:ef:05:2b:74:86:e9:66:f1:14:
ef:b2:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:15 2026 by rpki-client