Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
File: yEg4FrQ75KdvYGCDK-xJkvpamM4.mft (raw, json)
Hash identifier: 7H/8Q/YNcJ6ux8S8iBu8nqVBYX1APTj28/L5Zm4lKs4=
Subject key identifier: 31:B1:1B:23:7B:4C:9D:3B:FB:75:14:37:4F:20:F7:70:00:5B:25:51
Authority key identifier: C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE
Certificate issuer: /CN=c8483816b43be4a76f6060832bec4992fa5a98ce
Certificate serial: 019D3A8B14F36A223EDB9286E7EC5494930E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
Manifest number: 08B4
Signing time: Sun 29 Mar 2026 17:01:26 +0000
Manifest this update: Sun 29 Mar 2026 17:01:26 +0000
Manifest next update: Mon 30 Mar 2026 17:01:26 +0000
Files and hashes: 1: yEg4FrQ75KdvYGCDK-xJkvpamM4.crl (hash: t/wVLZdBVYpQ9w2aAr7LMV2hCYzFYQSvVrqIwRw69SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:14:f3:6a:22:3e:db:92:86:e7:ec:54:94:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8483816b43be4a76f6060832bec4992fa5a98ce
Validity
Not Before: Mar 29 17:01:26 2026 GMT
Not After : Mar 30 17:01:26 2026 GMT
Subject: CN=31b11b237b4c9d3bfb7514374f20f770005b2551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:3f:e7:ba:7b:95:43:c6:68:81:57:a8:ef:
34:4e:26:84:b1:c6:e5:29:5a:20:3c:a2:e0:ad:c3:
6c:38:e6:a7:6a:2f:21:3f:0f:b5:c4:64:e2:de:6c:
18:b7:d0:9a:53:72:d8:40:ca:ad:a1:1b:b1:3a:70:
d7:49:e7:3a:97:6a:f3:e5:57:4e:c8:71:dd:2e:59:
aa:3d:10:ef:23:1d:4f:f5:fb:32:bc:28:33:04:f0:
36:40:5c:26:52:50:34:d2:6f:ad:9f:e1:da:1e:1d:
ea:99:89:05:65:6a:f8:5a:e4:fb:1b:74:14:ac:7c:
8a:99:e0:6e:a4:9c:81:61:7f:34:aa:a8:84:76:d8:
dc:78:12:b3:8d:ce:c5:c3:66:e2:4e:81:a1:71:b0:
8c:d9:23:8e:3b:59:5f:12:26:95:ab:d5:14:3b:18:
a9:ab:d8:ac:3b:78:93:c6:fa:be:0d:ab:45:3b:c3:
e4:19:77:e4:98:93:0f:d6:58:02:9e:d5:c5:4f:10:
b7:5c:43:d5:e1:b4:e6:3d:12:58:ae:f3:4d:f4:86:
c3:99:16:17:36:94:5a:62:26:6b:b6:d3:5d:73:82:
6f:ff:32:01:a7:c4:07:af:96:66:98:52:a6:10:c5:
38:9a:46:d7:f0:09:e7:6e:e3:e0:28:db:92:e1:cc:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:1B:23:7B:4C:9D:3B:FB:75:14:37:4F:20:F7:70:00:5B:25:51
X509v3 Authority Key Identifier:
keyid:C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:8b:ec:6b:71:f3:42:65:59:f5:f7:75:ef:e8:6f:eb:ad:
d4:0a:58:4f:47:98:d4:c2:6e:15:2c:46:42:32:93:88:bb:c0:
33:0a:a5:16:ca:7f:58:9b:51:ee:cb:65:4b:8e:5c:6d:1f:58:
78:f5:a9:e2:1b:22:93:7d:cb:48:76:84:ba:00:bc:08:93:9f:
83:00:24:51:ae:7e:de:de:b6:cc:81:18:e1:97:1c:48:60:ff:
b3:fb:1f:2e:fd:0e:76:08:5c:bb:90:c6:b0:08:eb:95:12:da:
2a:85:41:dc:8c:2d:3d:62:cc:bd:19:7a:a7:df:d6:3f:c7:72:
d2:07:3a:ed:50:7e:4c:a9:1c:99:99:ef:bd:2c:6e:e3:4b:db:
f7:f3:ca:b0:0a:eb:26:3f:e5:14:70:fe:9f:5b:be:bd:58:b9:
13:60:92:b9:da:97:fb:48:ad:e4:6b:ff:91:83:03:96:b5:6f:
ec:11:74:0c:50:fa:5a:55:2c:9f:cf:27:20:43:2b:6c:de:43:
50:fb:39:c6:11:1a:2f:f9:8b:43:ac:5a:c8:3b:ec:a9:b4:e4:
22:3d:f6:64:f7:9c:cf:aa:f2:74:8f:40:2f:f9:50:36:d9:f7:
09:a6:6e:41:a2:99:e1:da:59:ee:fe:c1:15:c7:bc:b7:2a:67:
3d:ae:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:48 2026 by rpki-client