Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File: y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier: lKFwEQBYRwsapy41HjFgg0QIPGbzc1Fx1LdcEKNUZ/I=
Subject key identifier: 37:50:FD:08:01:7D:DE:82:C7:86:59:42:19:A3:48:78:7E:4E:42:FC
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer: /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial: 019D382E45AA269D3F209F4E0124AF3BA687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number: 0F94
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: fiOj2GANniNsQ3MTW7+8hs5NLUemKD2OANeeXZ2Fp2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:45:aa:26:9d:3f:20:9f:4e:01:24:af:3b:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=3750fd08017dde82c786594219a348787e4e42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:94:2e:cd:ee:1f:b5:9e:7f:8d:51:84:e6:
c6:12:c8:98:7d:04:93:33:f7:53:bf:86:11:f2:b7:
0f:4f:4d:73:70:c6:ab:07:dd:2d:f2:78:71:e3:be:
63:b8:6d:2a:35:2f:2d:81:53:86:61:4e:9b:eb:13:
94:a0:11:c8:bd:cd:9e:9f:e2:18:3c:75:aa:43:45:
b1:4f:1c:03:79:b2:26:92:fb:90:a4:dc:53:79:08:
62:c5:ad:65:f8:f6:36:5d:e5:d7:19:a8:ad:cb:f3:
ed:8a:cb:07:70:3c:b4:ab:18:35:4e:c5:d0:51:a9:
0e:38:bd:d7:c8:ff:44:44:74:bc:f4:5e:bf:d1:cc:
2b:91:f1:13:fa:c1:b2:a9:91:fb:28:a0:e1:5e:be:
d9:bd:f1:0b:c5:87:bf:b0:e7:52:6f:ad:eb:0c:ea:
34:66:5c:b6:ce:5a:db:0d:72:14:6e:83:e0:90:4d:
c0:7d:d1:91:9c:cd:5d:5d:a6:74:f1:88:dd:60:6c:
57:e6:49:d8:2c:61:76:ca:74:a7:6d:ed:98:9f:36:
02:2b:c7:ee:f0:b2:5a:15:cd:0f:47:b8:46:ac:2a:
07:18:e4:d1:36:ae:bf:ac:84:63:d0:fd:75:3e:b9:
f3:c5:80:29:e0:c2:27:73:b7:7a:c3:75:f5:86:d2:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:FD:08:01:7D:DE:82:C7:86:59:42:19:A3:48:78:7E:4E:42:FC
X509v3 Authority Key Identifier:
keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:98:18:f9:91:70:74:37:5b:0e:05:30:36:32:c5:8a:01:6c:
64:b4:31:8d:30:6b:a9:71:f7:c5:6c:82:9a:1f:4d:6a:24:5c:
83:23:50:e1:f9:3f:50:a1:a9:17:66:e0:f0:e3:05:91:01:c6:
2d:8f:75:04:c8:95:0d:55:00:6a:dd:f4:f7:47:5b:4e:91:b0:
60:ce:af:5a:07:f9:5c:61:b6:08:8c:cf:ae:d4:8b:63:04:bb:
f7:dc:51:a1:bb:56:fb:46:96:f7:ac:eb:0f:bb:33:ee:ed:70:
0b:29:3b:e4:d1:4a:fb:5b:30:8d:b8:4b:c7:30:2a:b3:c0:5c:
1d:b1:8b:f1:c8:a9:9c:1e:44:24:61:b2:9c:8b:e7:e4:b1:af:
85:e6:b1:e0:56:83:2c:b3:c2:e0:77:68:ab:ae:47:b8:c1:39:
67:ab:5a:a7:53:52:12:07:88:e4:c7:38:7b:41:c6:cb:3a:b7:
97:e3:e6:0a:05:4d:9e:89:a5:b0:88:55:ef:30:0a:c0:30:7a:
da:a6:4e:ba:cc:16:fa:eb:76:36:d8:e1:2a:4e:74:a6:35:30:
7d:04:6a:07:75:a3:ac:d2:e9:99:82:b2:4f:9d:17:e7:f5:0c:
3a:6d:aa:17:8f:22:d6:65:9d:4a:65:f8:2d:b4:b3:fe:78:c2:
5a:5b:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:29 2026 by rpki-client