Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
File: ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft (raw, json)
Hash identifier: ikQ+PbZcBq9ODOA6CHSSosjh2+cQIZKsp6VTSXVdsuM=
Subject key identifier: 59:C6:5C:92:B4:16:BA:26:5E:F0:80:CB:B0:4E:1B:BC:E8:A6:A6:F1
Authority key identifier: CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2
Certificate issuer: /CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2
Certificate serial: 019D38660D0C95C34B88E911C1E54BE8F96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
Manifest number: A0
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl (hash: HhrknNbdQxb8JtYdq1HOjn1wQLSzmGpYmlOYaOxmqvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0d:0c:95:c3:4b:88:e9:11:c1:e5:4b:e8:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca69e1e53d8c2f3cff7f794b20f630c781f0dbb2
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=59c65c92b416ba265ef080cbb04e1bbce8a6a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:0c:e3:7c:ee:4d:8d:50:c2:ec:9a:60:92:
9d:b4:70:b0:f2:f5:60:5d:a9:a0:87:ba:32:20:37:
cf:01:18:3b:31:9e:15:8e:7e:cc:aa:48:5a:33:2a:
70:2e:b7:7b:95:ec:98:0c:98:1e:98:45:d8:b1:36:
ee:5b:03:2f:f3:f9:19:a6:f3:c8:4c:b2:06:1f:f1:
d2:94:aa:68:f4:8f:84:9f:08:bd:d6:9e:dd:da:01:
be:e8:9a:be:17:6b:c8:56:f6:33:85:1c:f4:c4:bf:
2d:df:6f:5f:c4:a8:f8:9e:7d:70:fa:ad:cc:69:47:
0b:37:93:80:17:9b:a7:91:f1:c7:b5:52:2e:69:e2:
4b:68:f4:54:56:a6:91:b4:29:ac:75:dc:c3:a5:05:
d6:a2:7f:9d:e8:c4:97:7f:e1:45:a6:3e:ed:9c:04:
03:20:8f:ce:d3:c6:e2:3f:98:74:7b:66:9b:67:fc:
cb:2a:10:fd:b7:67:94:1c:85:59:d7:65:51:5c:f9:
1e:9a:2c:75:0f:e4:bc:ce:8f:95:f3:c6:6b:8c:f1:
7c:be:b1:78:ce:bf:14:06:5b:01:38:c6:ab:ec:c4:
31:9e:38:1b:5e:3d:69:13:13:4a:06:7d:f9:7a:6e:
ad:31:ee:c5:82:75:ce:4a:33:e9:04:a8:b8:1b:42:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:5C:92:B4:16:BA:26:5E:F0:80:CB:B0:4E:1B:BC:E8:A6:A6:F1
X509v3 Authority Key Identifier:
keyid:CA:69:E1:E5:3D:8C:2F:3C:FF:7F:79:4B:20:F6:30:C7:81:F0:DB:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymnh5T2MLzz_f3lLIPYwx4Hw27I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/455555-c651-4fe1-a0a6-096fc372d531/1/ymnh5T2MLzz_f3lLIPYwx4Hw27I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:18:97:79:ab:c8:e1:01:ce:f4:c8:57:18:60:b6:05:12:
c1:ee:5b:9b:1a:53:8e:13:12:f5:61:c9:e3:f8:30:b7:e3:84:
5e:1a:55:f8:f6:0d:2f:d7:07:77:52:59:07:a2:fe:b9:42:1b:
a2:b4:25:0b:cd:93:ce:2e:16:8f:ba:34:50:0c:27:4c:5a:88:
91:ff:8e:c4:91:47:92:35:db:95:31:5f:55:e0:91:fb:fb:93:
c9:4c:94:27:e8:f7:d4:38:0f:bf:dd:2c:6c:1e:e2:9c:17:7b:
f1:ed:91:dc:34:c0:e7:95:56:bb:4a:cf:04:74:f3:16:a5:10:
37:bf:3f:d1:ed:f8:ad:6f:d4:bf:d9:c2:4d:9a:fb:a5:f9:86:
d0:51:31:1c:c2:6a:0b:a2:38:60:dd:91:91:e3:f7:7e:9f:30:
e3:24:ef:2f:e5:ba:c9:be:05:98:36:2c:1a:6b:5a:c4:12:bc:
68:fe:d7:47:eb:da:a6:aa:97:da:53:a7:68:4d:18:56:5e:8b:
b1:ca:fc:42:e3:79:48:80:5f:88:81:86:48:59:02:eb:47:9a:
8d:b0:18:a1:b1:22:43:37:33:0b:8f:70:b6:60:2d:e9:fc:24:
bc:80:8d:72:ce:99:52:af:f3:59:b3:44:4c:31:96:f6:b9:0b:
0a:cb:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:57 2026 by rpki-client