Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: bQ4rX7aBsCUuGg632JF7m1A8KZSWvLBDSbbdI+gmKa8=
Subject key identifier: DF:48:97:10:E8:E9:D3:45:D2:03:A1:72:0F:ED:A4:98:40:65:E9:6A
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 019D37C011077FE5E6CC18CE21155E72BBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 1523
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: 5j6CYdRveP8zv5180O8AJQUMZRktG+D8dBlT4Vcw1zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:11:07:7f:e5:e6:cc:18:ce:21:15:5e:72:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=df489710e8e9d345d203a1720feda4984065e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:23:c0:75:82:80:fd:64:7c:24:c1:31:27:
bf:a3:1c:5d:5c:56:f9:06:40:81:3b:a7:f7:30:db:
79:33:fb:d7:05:6b:2d:58:e7:12:f6:cc:a3:ad:ee:
05:b2:0e:48:35:0e:78:a1:6b:e6:6f:f7:0e:53:6e:
97:80:2a:3b:51:d3:69:ef:12:63:de:2d:53:6e:d7:
11:cb:73:c2:a7:05:85:2f:ce:a9:ad:0b:c9:a6:fc:
13:bf:a1:79:39:f6:1a:30:3d:c5:95:07:e5:92:bc:
23:32:48:a8:87:1e:df:f8:02:1b:26:e0:6e:eb:5a:
b2:7e:ab:2f:18:6e:a2:d6:26:f9:a9:bb:4b:3f:bb:
61:ad:30:af:7a:55:3e:6a:0a:26:dd:60:19:85:d0:
fe:b0:db:6c:04:9a:3e:3f:a5:98:9d:92:38:95:1c:
24:26:14:0e:d4:60:24:be:d0:b3:3d:95:0e:67:72:
56:93:50:92:d0:e4:21:43:8e:79:16:38:22:d7:cd:
66:91:16:ce:89:46:15:4a:3a:8a:23:a3:ee:19:98:
5b:a5:ea:58:65:6c:f6:0a:c1:82:ab:5e:07:83:64:
1a:a3:51:51:5e:66:b5:43:ec:b3:75:30:d1:48:9d:
8f:00:96:25:16:40:6b:6a:28:1c:b0:d8:ba:26:d4:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:48:97:10:E8:E9:D3:45:D2:03:A1:72:0F:ED:A4:98:40:65:E9:6A
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:eb:37:9c:a9:41:50:a9:5a:df:46:90:a1:8d:45:0b:4d:7a:
3e:0f:90:1b:89:cb:36:04:f8:56:db:1c:7c:aa:5e:3f:58:60:
02:24:38:2e:a5:ce:1c:05:ca:7b:88:27:6a:12:a3:b5:0b:7e:
eb:0b:23:48:01:6e:3e:9f:d8:63:31:38:a7:9c:f1:c4:76:04:
71:fb:bc:8e:43:58:b5:ba:1e:1d:81:5a:0f:3d:c4:2f:6e:42:
e4:c4:b5:12:c0:b8:09:74:cc:4b:9f:a2:6f:5c:7a:55:3b:74:
8d:16:51:2d:5f:08:33:73:f7:cc:6f:3b:91:e4:a1:40:e0:2c:
a0:49:fa:9a:5c:72:0d:c4:d6:41:c4:1a:32:4d:21:44:26:51:
24:c5:d2:e5:de:ad:ce:75:ce:d4:41:2a:47:aa:49:55:be:a2:
12:d7:9b:56:31:bd:99:42:d5:93:36:db:d6:1d:9f:ba:95:9b:
92:99:31:b9:97:b6:4c:71:a3:8d:0f:66:49:9c:62:72:09:16:
0c:2a:ea:fa:8b:a8:5b:43:61:f8:f2:6e:77:89:f0:40:2c:62:
65:9f:bb:6e:b4:e5:fd:c9:68:dc:d1:a0:dd:d1:1e:e2:83:7c:
2c:33:ce:b7:9f:e2:74:bf:27:4b:88:57:3a:66:e4:66:e1:60:
61:f4:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:12 2026 by rpki-client