Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: mY8nmTD0Oz56Ov+B6SZNqeUgajc2CjfP04+ZQpF2ScM=
Subject key identifier: 4A:2B:85:7D:FB:95:2D:3A:23:61:1F:03:D2:BE:C4:3E:69:E0:EF:14
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 019D37C10066D7077C694E2F5B0D7109ACB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0F47
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: FHMMsgYk2nwI8ty0jSxJ34SBsgvlfyTGCS+c9C1EE/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:00:66:d7:07:7c:69:4e:2f:5b:0d:71:09:ac:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=4a2b857dfb952d3a23611f03d2bec43e69e0ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:d8:24:da:fc:23:cf:82:d2:35:60:76:be:
c9:dd:b0:dd:9e:69:50:4f:87:ff:1a:b9:e1:32:37:
29:41:e1:ec:c1:b0:c2:96:b1:39:c4:7e:b4:46:30:
c2:75:11:52:e3:f3:14:5c:8f:d1:f4:e8:fc:49:5f:
ee:d2:c5:af:c4:eb:09:d9:74:a9:b1:ee:b2:9c:cf:
59:b2:a8:6b:95:65:74:29:24:5a:c3:2d:f0:72:eb:
14:36:b3:d2:f3:d4:d6:33:31:bb:37:85:a8:3a:a7:
59:72:36:dd:c6:ed:04:9d:38:1f:44:f2:48:97:df:
64:70:c2:65:76:6c:c1:96:c1:91:ae:14:59:f8:2f:
44:91:de:a3:81:a0:60:11:be:7b:d5:9d:de:8e:63:
a8:d9:28:4b:43:d9:00:4d:7c:9c:38:80:75:99:1f:
6a:50:0c:60:60:92:25:63:04:87:3a:8f:8c:48:92:
c6:f0:55:ed:77:b9:53:e0:35:10:98:fb:90:c6:f6:
f5:46:d5:33:a2:e7:97:f4:e9:48:f0:65:d2:c0:e6:
dd:ee:9b:e1:e1:c6:c1:ba:cb:11:88:99:1b:4f:4e:
be:a4:74:6f:e2:fc:96:da:5e:98:92:52:a0:d2:62:
e9:69:8f:6f:20:be:3e:49:f5:24:d4:1d:11:29:8e:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:85:7D:FB:95:2D:3A:23:61:1F:03:D2:BE:C4:3E:69:E0:EF:14
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:76:c4:ab:02:58:9a:5b:10:ef:f5:31:04:39:96:8a:18:b0:
b1:35:82:1e:8a:c6:51:cc:8a:f4:8a:fa:6d:20:4c:51:6a:af:
bf:b1:04:96:1e:96:aa:fb:54:75:26:9f:c0:c4:65:12:0a:fa:
d5:7a:fd:a7:71:c5:9e:af:92:a7:d8:6a:ab:44:95:0a:1a:80:
04:ef:7e:ca:0d:d6:28:a5:79:da:4a:20:26:52:ad:fb:2b:43:
a9:aa:90:3f:b7:48:e1:e0:cf:44:9f:ec:a9:a7:c6:d8:77:c6:
1f:44:1e:d7:83:30:f3:b5:0b:f5:33:0b:36:06:4b:4f:2a:90:
9d:c9:4b:e2:ec:40:92:75:f2:d0:e4:43:c2:a7:d2:5b:46:77:
4d:8d:fb:a0:6e:5f:ff:17:55:09:50:4c:c7:08:72:4b:de:1d:
c6:b2:9e:db:7e:95:63:b9:14:0d:01:4b:6f:0d:53:89:a9:f6:
48:ca:6e:6a:e1:64:bf:95:ce:d7:03:83:ba:17:5c:2b:03:43:
d1:23:13:67:77:f3:ec:dd:31:2a:f5:dd:db:59:0c:e9:93:7d:
f1:c6:00:9a:65:0c:c7:5c:42:39:c5:55:e0:dc:f0:32:b7:5c:
83:b0:47:cf:6a:b6:d6:e6:36:c4:43:51:01:ec:2e:c3:e8:c3:
0a:23:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:01 2026 by rpki-client