Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File: Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier: hU8xn1uqPRFM0Hqb7wrp3A2VLgcjNgDWHi7AYY6zXCs=
Subject key identifier: 08:8B:DD:F5:F6:82:C7:12:0E:76:FA:86:9E:A5:0C:95:7F:82:D1:5B
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer: /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial: 019D39AE9385F6DACEABD3A4BD68FDD082C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number: 0E8D
Signing time: Sun 29 Mar 2026 13:00:35 +0000
Manifest this update: Sun 29 Mar 2026 13:00:35 +0000
Manifest next update: Mon 30 Mar 2026 13:00:35 +0000
Files and hashes: 1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: Ta4RXsO6MlwRUUEYxWvhY9fzXboYFypcbUtgMZVPmhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:93:85:f6:da:ce:ab:d3:a4:bd:68:fd:d0:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Validity
Not Before: Mar 29 13:00:35 2026 GMT
Not After : Mar 30 13:00:35 2026 GMT
Subject: CN=088bddf5f682c7120e76fa869ea50c957f82d15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:64:7e:73:b9:28:10:82:55:fd:da:78:0d:
bd:2c:07:16:52:18:8e:00:a6:9e:15:a8:71:4d:ef:
eb:3b:0f:96:c7:bb:1d:f4:cf:29:a7:dd:8d:02:78:
ec:6c:01:6b:70:14:51:7a:21:3f:43:47:18:85:9f:
69:67:b4:b6:ba:ed:11:b9:c4:67:61:36:15:64:6b:
fc:f4:8e:63:2c:d6:16:c7:dd:e9:16:93:ac:b1:7d:
4a:95:d8:67:d3:a0:52:c3:df:51:7b:04:41:1b:9d:
c4:88:2c:e4:35:e0:25:62:2f:eb:ed:a3:e8:90:f3:
2c:ba:f7:d1:c7:4e:b2:e7:e6:1f:58:88:cb:e9:c1:
92:67:62:55:da:79:cf:1a:9f:90:ec:61:de:ca:96:
8b:79:98:48:51:c3:3d:00:03:9b:77:da:a4:e2:34:
6c:83:d1:31:ed:6f:4a:3f:a1:a6:9e:8b:a9:73:40:
9d:77:8c:23:97:dd:5c:db:41:50:fb:86:0b:18:35:
e3:ec:26:ef:14:b6:81:b1:19:bd:96:7f:ae:a0:07:
c6:80:26:86:62:ee:c8:5b:58:69:b7:7f:c4:3e:f2:
f2:b3:ac:93:7e:f4:af:f7:da:f1:e9:69:e6:75:75:
c2:41:88:c3:68:bd:8c:d9:b0:56:c0:da:3d:6b:a2:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:DD:F5:F6:82:C7:12:0E:76:FA:86:9E:A5:0C:95:7F:82:D1:5B
X509v3 Authority Key Identifier:
keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c4:17:97:0f:93:73:62:0c:c5:f0:1c:2b:b2:da:6f:7d:bb:
36:52:ca:ce:b2:94:37:29:f5:51:29:d0:13:1d:53:d9:77:bd:
10:fe:e8:6c:cd:01:60:1c:4d:23:27:8c:ac:2d:f7:95:0f:7c:
19:60:14:c7:bc:32:78:a0:9c:7c:a0:6e:ac:a2:75:44:49:1d:
f8:5d:7e:98:80:af:cb:6a:42:c0:60:26:ef:91:dc:9e:f4:7c:
b4:52:3c:cd:50:c5:49:fb:d4:2b:7c:d5:ee:48:a7:59:c6:f5:
73:dc:b2:1a:d1:71:da:8a:b6:bf:73:b1:44:b5:9e:3e:57:11:
cf:74:7f:f4:78:54:89:91:24:66:3d:ab:9f:4c:1f:bb:b5:e7:
f6:b8:f6:28:48:7a:8d:e3:ab:1f:f2:04:e5:a1:19:9a:c3:64:
a2:3a:93:f1:d1:f6:3e:ae:53:88:fa:81:84:77:14:d9:4f:96:
45:0f:f1:99:5f:65:30:e9:b3:1e:b5:1a:4d:37:0e:8b:08:fb:
a1:66:6e:0e:15:e2:80:8a:03:77:06:17:37:30:bd:e8:be:37:
12:5d:4d:85:04:f4:e5:40:92:a3:fa:1f:03:c4:ee:7e:2f:5c:
21:d9:1f:96:a2:f6:ea:8b:37:2e:63:b4:81:35:e3:a4:09:06:
40:15:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:05 2026 by rpki-client