Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
File: yTLAXdVS5YBU2FWljWFhlVP1HGM.mft (raw, json)
Hash identifier: YBv5eYaU2wc4jXkcoMFZedrgW6ITLlL7WxSgWZPj8gg=
Subject key identifier: D1:53:BC:49:4E:76:B7:1B:CE:87:E0:C3:FD:A0:05:42:F8:D2:6B:72
Authority key identifier: C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
Certificate issuer: /CN=c932c05dd552e58054d855a58d61619553f51c63
Certificate serial: 019D37F7588786930C944B0681964D48BD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
Manifest number: 0315
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: yTLAXdVS5YBU2FWljWFhlVP1HGM.crl (hash: 6qOMrj0buEPGz1v3Wu3n/SxAp4kjc/D4t1yqFFxDwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:58:87:86:93:0c:94:4b:06:81:96:4d:48:bd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c932c05dd552e58054d855a58d61619553f51c63
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=d153bc494e76b71bce87e0c3fda00542f8d26b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:13:f9:b2:2f:da:4e:06:0c:69:28:d1:b2:
8c:0c:0c:aa:44:59:0c:ba:8e:01:84:23:24:d1:90:
8c:0f:be:49:c1:d4:5c:33:92:00:f7:b4:d9:51:2f:
53:02:de:92:5d:2c:f8:df:ca:d8:a3:32:e9:ba:87:
a5:61:7c:b8:7d:d4:7f:5d:55:d7:c1:9e:52:0f:26:
63:df:7e:a0:4e:ad:90:a3:0c:04:71:93:4f:e5:3f:
2b:29:fc:dc:28:2d:bf:b4:c8:d3:b3:f1:a5:f9:b9:
ea:13:cf:ce:f7:d8:df:d6:65:38:13:0b:ff:70:51:
17:10:76:45:a2:f8:4b:8b:cc:54:86:9f:e3:f4:bf:
dd:f8:7e:90:5e:f1:c8:f7:b2:c6:e2:00:71:6d:5d:
fc:d0:d1:7b:01:f5:fc:ff:17:0e:c6:1a:3e:33:d9:
df:1e:12:ee:d6:f2:02:4f:64:a5:6f:ec:78:78:26:
85:80:69:ed:23:61:15:f9:5b:4e:e0:36:c5:41:73:
47:f2:df:cd:48:91:a6:86:08:7d:16:b0:8a:a8:ec:
81:95:d3:27:76:81:91:79:61:97:f0:db:b6:6e:4e:
5a:b8:99:92:95:a5:93:99:53:25:5a:23:4d:30:28:
63:fe:c6:83:19:3f:4c:67:75:be:2e:3c:fc:e2:db:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:BC:49:4E:76:B7:1B:CE:87:E0:C3:FD:A0:05:42:F8:D2:6B:72
X509v3 Authority Key Identifier:
keyid:C9:32:C0:5D:D5:52:E5:80:54:D8:55:A5:8D:61:61:95:53:F5:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTLAXdVS5YBU2FWljWFhlVP1HGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/91332b-3456-4651-9305-fa6b98f8470e/1/yTLAXdVS5YBU2FWljWFhlVP1HGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:db:2f:43:5c:5f:09:f8:a9:b3:e6:3e:7b:79:37:95:e0:
22:eb:0d:22:d9:cb:18:93:f9:f6:c2:0e:54:a4:26:c0:69:cc:
58:97:d6:d0:69:60:87:0a:f6:46:30:9a:93:aa:63:31:e5:43:
18:8a:60:6b:b5:d4:a2:42:4a:92:14:96:97:fb:0a:24:ac:5c:
0c:ed:9a:a6:32:bf:95:4e:f1:9e:7a:b4:12:13:0e:1c:1b:2b:
32:3c:84:fd:70:09:09:bd:b1:9a:f2:f9:84:93:ca:d5:5e:8f:
8c:46:e5:68:23:ca:37:d2:54:93:8d:11:4e:18:b9:d7:59:97:
9d:80:4f:ed:c9:c1:d3:5c:55:5d:74:11:76:f9:3f:3f:d3:ce:
49:eb:31:25:74:0c:68:32:48:19:10:a4:44:83:69:9a:86:47:
1f:cd:d7:6c:c2:5b:8c:a3:32:f0:3d:fb:e5:7d:88:ac:fe:36:
cc:79:0f:8c:93:57:92:3d:dc:44:d5:79:f5:7e:ba:cd:e8:46:
7a:61:fa:55:28:d6:1f:24:a2:2c:6e:7a:0f:48:d3:67:85:c0:
6a:ac:fb:d3:dd:4d:5f:d3:51:54:a8:62:fb:c2:0d:08:13:28:
43:0f:20:b3:09:74:9f:e0:97:6f:a4:4d:56:91:4e:9b:02:2c:
a6:8a:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client