Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: MR0ARkCV3YVpON686n/sx5gXsC4wpwQ5QXhEOIuYbtM=
Subject key identifier: EE:1F:A5:EF:4B:6F:B7:B4:95:5B:84:BC:BE:27:A4:4D:75:59:09:B7
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 019D37C0E25EDBEF431CD74B8F4DB0451AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0D93
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: L4NqV98IhaAsp7hIoKDG6XF8grziMjI+vPH1b2RJYB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e2:5e:db:ef:43:1c:d7:4b:8f:4d:b0:45:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=ee1fa5ef4b6fb7b4955b84bcbe27a44d755909b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:a6:76:76:4a:35:db:cf:78:81:3e:02:b2:
26:2c:db:6c:50:27:be:75:33:ab:af:08:af:3a:0c:
81:ee:0a:51:b8:ea:38:c9:c0:b1:72:16:af:e7:7b:
2f:87:0c:80:15:68:cc:f1:5b:9c:be:fb:25:bc:99:
9c:13:8c:86:ac:2a:dd:e0:11:87:fe:40:8c:41:77:
d5:4d:84:1a:03:3e:4c:f5:e7:90:3b:95:69:0b:1c:
a1:f7:3f:b3:80:a6:8e:27:b8:3d:bf:17:89:e2:d9:
ac:14:94:fd:bb:ba:8f:4a:8f:25:a7:a5:66:16:20:
07:df:f9:94:54:1c:ee:91:e2:9d:39:bc:f0:0a:1e:
6d:a4:59:42:9f:50:b0:97:b4:22:d2:08:03:c6:d5:
07:52:5b:69:bc:37:30:df:9e:01:e3:b4:44:85:36:
7c:b5:07:62:63:2d:1f:26:43:53:19:cd:30:07:ea:
1c:6f:e8:98:47:a0:df:e2:6b:74:fa:6f:69:ad:92:
e1:d1:de:40:ed:16:d5:0a:77:ce:e9:ee:b5:aa:57:
b7:d6:4a:b3:48:92:67:c7:62:da:86:d9:b3:bf:95:
34:ef:f0:52:dd:3f:35:7f:47:ae:fa:7e:3d:fd:2a:
26:9d:50:d0:68:25:44:11:5e:3e:de:6a:3d:1c:66:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:A5:EF:4B:6F:B7:B4:95:5B:84:BC:BE:27:A4:4D:75:59:09:B7
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:ae:ce:7f:1b:7b:06:94:1c:1c:ee:62:6d:c3:29:4e:3b:80:
01:92:fd:43:e4:fa:f7:54:8f:dd:7c:e5:70:1c:35:b7:4a:e3:
2f:fd:96:59:d5:8c:38:fb:3f:60:3e:22:33:0d:ee:89:e4:99:
af:aa:67:31:14:51:34:7b:bd:a8:b8:d6:9e:c3:75:11:15:a3:
2a:a9:28:8c:fd:4d:41:09:bc:f6:e3:6c:a0:4e:f8:f5:f2:a8:
e9:1e:38:9f:93:67:06:2a:96:04:3d:34:32:4d:ba:45:f5:2d:
a4:08:5c:23:54:9c:ed:49:e9:c9:eb:bf:df:c8:46:d6:c3:b1:
e1:ec:40:54:56:21:f9:63:21:e8:bc:b7:19:11:05:05:c3:0c:
6f:a1:ca:6b:48:dd:23:62:22:c9:4c:24:34:05:4f:3a:47:17:
85:54:88:d0:9d:22:32:89:09:da:f7:fa:d8:74:4c:ec:74:8c:
84:1a:eb:af:d3:e8:fc:da:ee:94:44:5d:e3:30:84:ad:dd:cf:
e9:bf:d7:b8:b3:66:1d:42:03:ac:c3:9e:c8:69:e2:31:b5:64:
ca:ab:c6:5a:97:d7:b2:9e:cf:ab:3c:57:60:bb:58:c8:42:e4:
c4:e5:56:5d:b1:64:db:6d:72:f2:ab:e9:20:6b:13:57:3c:4c:
5e:35:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:55 2026 by rpki-client