Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: QlOVWjKzGHlBWbLSaN8b6LP04/0E8pRQDp9/FAkzRcc=
Subject key identifier: DB:BF:55:59:52:A6:FC:B2:63:D8:B9:0E:5E:E4:E7:30:98:47:0D:D0
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 019D3866473ED72CB2770FAC09E1BE33D813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: Ad703XisPX6gG/gFnIvsvsDjkqbYsJw1W+4NvjVh28Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:3e:d7:2c:b2:77:0f:ac:09:e1:be:33:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=dbbf555952a6fcb263d8b90e5ee4e73098470dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:bc:e3:0f:8b:b5:f4:13:f2:fa:58:98:3e:
fd:5c:2d:81:d2:10:e6:2a:2b:63:59:02:3c:bc:7a:
c0:3c:3d:1a:53:d8:32:fa:f3:6f:97:1c:cb:71:56:
5e:d5:a3:34:36:c5:e8:8b:0e:77:74:f4:91:99:5e:
fd:a6:55:47:3e:c4:8b:38:11:07:d9:a6:c7:7e:6c:
28:64:a2:3a:cf:23:60:10:64:99:bd:71:37:7d:e5:
8b:01:e7:5e:af:46:29:21:49:f3:89:7e:b3:88:7f:
d6:76:fb:ab:dc:6c:c5:ea:71:57:84:c7:2d:e8:b4:
98:dc:36:b7:87:77:d3:2b:5a:7e:75:a6:7d:d8:17:
21:1a:93:7b:05:34:d6:9c:00:64:dd:f8:fa:07:b0:
25:44:e3:67:8d:ac:c7:1d:27:73:bc:4b:10:dd:87:
bf:2e:a4:8d:b0:92:8e:7e:92:f5:e0:22:a7:10:2a:
5d:2b:7c:73:3c:09:ec:3d:f1:ff:2d:f9:5a:37:23:
da:3e:ce:df:b7:2f:65:51:bc:40:73:ce:41:7e:de:
04:1f:2b:13:a8:1c:ad:ee:12:d5:06:8d:14:b4:e9:
13:3f:a0:33:be:fa:e4:46:9f:d7:13:97:51:41:89:
2e:78:b9:da:0e:ca:55:73:ee:72:9b:42:46:aa:47:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BF:55:59:52:A6:FC:B2:63:D8:B9:0E:5E:E4:E7:30:98:47:0D:D0
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:67:d1:ee:48:55:b2:36:59:d6:9f:55:4f:d4:c4:fb:e1:e5:
bf:73:d1:7a:ac:a3:4e:4a:cd:85:51:6a:dd:d6:b0:3e:e0:e1:
f2:9f:53:13:9b:19:2b:f1:75:d1:e6:c3:b9:78:40:95:3f:72:
d2:3c:f6:76:28:0c:19:a1:0a:11:7b:a0:46:c4:93:7b:91:c2:
41:76:85:ec:dd:a5:43:56:9f:81:96:e9:a3:bf:b9:1c:0d:fc:
dc:ad:9b:7e:1b:3a:cb:c1:d2:a0:92:5d:11:c6:be:f2:9f:03:
56:c4:f6:42:7f:3d:91:da:c4:78:84:c9:04:36:98:2e:6f:bb:
57:da:84:f0:83:1f:a1:31:8f:52:60:11:b8:c2:14:9f:7a:f3:
cb:19:67:dd:92:cf:01:58:c1:76:49:10:5c:44:e6:e4:cc:92:
a9:45:a7:bc:1b:b3:ae:68:90:2d:70:24:8f:3f:06:a8:50:51:
4f:1d:1d:8f:d9:cf:a9:ec:b7:72:00:07:6d:f4:cd:52:b4:d6:
68:04:26:7b:23:db:c6:86:94:fa:2f:10:79:9f:38:4f:4c:d0:
4d:2e:95:d6:ca:66:54:8f:6b:71:4e:00:46:77:91:4b:a0:4e:
0b:a9:15:fa:2c:5a:8e:c9:01:08:45:d3:f4:67:5f:72:68:fb:
5f:05:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client