Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: Gb/d4t5JtRofRADnoW2R9igEO3dnm0t2m1Nx17f6fS8=
Subject key identifier: 27:6D:BA:55:4A:50:20:38:7F:FF:9D:11:0B:F3:0B:BC:49:C3:CF:0D
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 019D382E659773898B56617AFEE0067B466E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 0D95
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: 7p8UlTLFpDsm5lX8vKjurEpLEvymEKNgVGtl2S42Aks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:65:97:73:89:8b:56:61:7a:fe:e0:06:7b:46:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=276dba554a5020387fff9d110bf30bbc49c3cf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:1b:b2:c8:5f:fc:b4:8a:76:af:cd:b7:1c:
f7:90:e5:76:f0:f5:99:89:e4:66:b9:b8:50:d6:9b:
43:2e:07:13:0c:74:1b:84:37:6f:93:97:18:17:e1:
2b:bf:aa:b1:8d:48:52:b4:aa:74:d2:42:77:93:d4:
41:34:ed:08:a1:15:18:c8:34:7e:45:b3:1d:77:5e:
35:e0:b2:22:c6:12:4a:3e:f3:b8:0b:ea:8f:cd:23:
a3:e5:b2:f7:74:3b:e4:bf:4f:59:1e:b8:cc:31:dd:
56:89:a1:df:c1:80:9e:fa:b9:99:61:c7:73:23:f5:
9a:ae:92:38:47:fb:42:8a:04:76:20:ce:07:9c:64:
68:92:12:fa:87:79:3c:65:59:6f:e0:fd:1c:4d:05:
ad:aa:00:9c:29:17:e1:b8:8b:38:87:3b:73:cc:c0:
0b:aa:d4:42:e2:ea:ac:70:ba:44:d5:94:ad:5a:d8:
83:45:9a:e9:77:b6:d4:fd:94:20:af:6e:01:70:8d:
d0:7c:e1:bd:8c:26:76:90:17:28:78:4b:47:ca:31:
97:1b:dd:23:07:b3:03:02:7e:ab:ed:2f:d9:d8:0e:
bd:8b:7c:7d:34:55:2d:ba:5f:64:41:e2:83:72:e9:
c7:16:79:ef:48:01:d1:01:ec:2a:26:45:cd:6e:cb:
d6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:BA:55:4A:50:20:38:7F:FF:9D:11:0B:F3:0B:BC:49:C3:CF:0D
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:9d:13:67:e6:d8:2d:2c:4e:77:51:28:b2:25:0e:a2:98:
88:79:7b:95:b5:93:e7:0a:ea:c1:77:32:a4:14:7e:89:12:0b:
61:38:1c:47:2d:e9:c8:b3:c2:99:fc:3a:43:b1:38:15:86:60:
e4:91:02:db:56:5a:c6:35:2f:7b:fe:88:48:05:53:e0:57:0f:
5f:cf:51:0f:a6:17:cb:c3:31:82:42:96:fb:b6:5e:61:65:08:
b0:6a:b3:c7:81:29:00:bc:a8:45:30:e2:83:0a:b5:8e:00:bf:
15:12:52:70:b1:04:b5:2f:f1:34:f1:7b:9a:f7:28:14:b5:ab:
a9:bd:da:96:a0:b3:ea:2a:cc:e7:d7:f3:b7:77:0b:41:54:f5:
cc:c6:bc:1c:95:6a:c8:a5:96:33:10:e2:89:af:27:c3:6c:26:
b5:f9:b1:c3:55:d0:36:a4:bb:80:e2:f2:22:71:64:ac:38:bc:
67:9b:d9:f4:70:d7:7f:50:ee:dd:81:8a:c6:d9:6d:a3:cf:1c:
b4:c9:d1:ae:d8:e4:06:39:a3:1a:64:c2:8d:90:bb:de:e3:20:
a1:91:34:ad:2e:30:a7:e6:8e:53:df:2e:33:5d:c7:f7:04:87:
08:95:54:be:e1:39:87:f5:d7:c3:51:5d:7e:c0:b1:2e:88:12:
8e:80:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:45 2026 by rpki-client