Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: LaXvb5T52Qg8OrGwxZbH7QwxPlvVN+YisBmV9M1Mo1o=
Subject key identifier: 51:CD:84:F1:3D:9C:56:62:D2:3A:0A:C6:83:83:07:52:D4:A6:43:9E
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 019D38D2AD3662F7DB64F2315A3FAB84D3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 1178
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: rnHCCl0cLxCXfgOFx8BzX9oZd++U4xdy/QPD2Wd1BMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ad:36:62:f7:db:64:f2:31:5a:3f:ab:84:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=51cd84f13d9c5662d23a0ac683830752d4a6439e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:10:b6:d0:9a:5e:27:97:e6:04:76:61:f7:
c5:77:45:a2:61:0b:e3:70:ec:21:e2:73:f6:a8:09:
69:ef:cb:bf:82:66:1f:2c:0e:62:d5:1b:a3:85:d1:
9e:1e:1d:8c:a5:9d:d8:43:8e:bb:3e:a4:30:6b:11:
e7:ee:d7:5d:1c:19:b9:28:ad:76:18:e7:8e:c4:ee:
ca:17:56:a8:af:06:08:cb:72:29:8c:64:58:3f:ff:
c9:c7:01:e8:1f:16:e7:f6:af:20:7c:9a:03:a0:33:
66:25:5a:1d:0d:51:01:84:90:88:f0:b9:78:f6:62:
95:20:56:e6:75:16:46:bd:8f:d4:35:35:8e:6a:2b:
ef:e6:85:42:1b:29:a0:f1:fa:6c:44:46:c2:6d:16:
d8:ca:3d:c2:bd:87:98:0e:61:a0:3f:b6:f7:6d:2e:
c7:c4:a7:41:17:1e:1c:cc:f1:8f:d7:b4:8a:c1:53:
52:e8:bb:ab:2f:14:fa:d4:8f:f0:fd:3c:c1:8b:e0:
dd:20:1c:ba:79:5b:19:2c:0a:9b:42:a2:d4:40:91:
91:b8:c1:20:90:2f:c9:60:6f:fc:b0:f6:f5:be:37:
6e:d9:c6:af:0f:ea:6e:a9:32:fb:a5:0b:e0:a6:50:
fa:57:95:a3:2e:44:3a:20:63:54:83:88:44:e9:66:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CD:84:F1:3D:9C:56:62:D2:3A:0A:C6:83:83:07:52:D4:A6:43:9E
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:96:e6:16:4a:dd:11:9f:73:7c:9b:de:5a:af:be:7f:32:df:
b0:82:b6:6e:25:54:2c:e5:61:4c:e2:40:d1:6e:1a:f0:f1:82:
b5:dc:10:0f:6a:f5:61:a9:6f:1c:24:5c:b9:3a:a4:e4:22:b8:
d8:33:01:c9:16:e9:2c:bf:0b:92:25:26:6b:26:88:0e:eb:d7:
ea:25:c9:32:96:83:e1:dd:c3:af:73:16:ba:15:88:fa:53:0a:
09:80:f6:53:30:08:f4:61:ae:63:40:f2:9f:1b:af:d4:bf:2d:
e5:fd:11:f8:03:08:a2:df:e9:4f:73:de:8c:e5:d7:98:1e:c7:
38:98:d4:99:ab:e8:fd:fe:ec:3e:9e:d3:3b:29:e9:19:c9:23:
8c:45:55:68:b4:48:e1:49:f0:93:3c:5f:24:ab:05:ab:75:5a:
10:3c:cc:60:9f:53:5a:36:72:3a:01:84:7c:78:4b:c0:c2:7f:
91:01:61:1e:1c:3d:ac:88:be:e3:d9:93:7d:80:a7:65:47:4a:
a0:a9:07:fc:b3:3c:69:1c:10:54:34:49:88:8e:68:65:c5:b3:
20:ee:9e:2f:e0:a0:38:80:d9:d3:c7:ec:b8:be:d9:53:d6:63:
86:88:13:2e:c9:75:85:dd:db:b8:3c:b5:98:81:a8:6c:de:f6:
f0:3d:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client