Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier: aTcFVhYXuS/968rFPYxesO5UP3z5VbTD7Nz1ZWc4hnw=
Subject key identifier: D1:76:02:4F:39:FE:20:1A:0E:CF:D9:7D:A3:31:B0:68:8E:3B:AE:6F
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial: 019D27DF8E667FDF6E6D834BAE0B6336BA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number: 11E7
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: vNTkZoTUUFu+g+EtojCMmQH901HDLnVgO4+ehpdA4xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8e:66:7f:df:6e:6d:83:4b:ae:0b:63:36:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=d176024f39fe201a0ecfd97da331b0688e3bae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:a2:29:0f:89:8b:bb:7d:aa:b6:ea:41:2b:
03:72:71:1d:60:c8:c2:5b:c0:9e:4f:d6:6a:01:f6:
a3:69:ff:fb:25:61:32:8c:2b:03:b6:d6:db:3c:ff:
d8:c2:6e:1f:c8:61:05:63:76:91:3a:eb:33:ab:4a:
20:f9:ba:5f:10:98:3e:9d:0a:97:6e:bc:44:05:ee:
11:b6:17:2b:16:e3:17:5d:ff:ae:f6:be:82:90:bf:
78:aa:cd:b4:df:7f:b9:6a:4d:65:fc:6f:47:4a:72:
f3:95:93:a9:df:44:2f:e8:bd:3f:cf:5e:b9:19:c2:
40:01:0e:5d:93:c7:be:06:6c:22:8f:8c:83:ee:87:
c1:36:54:f6:16:99:9e:52:c1:29:63:42:7c:c4:bb:
42:bc:32:44:b0:ec:dc:89:ae:b8:3b:16:3b:4a:05:
c8:d6:b8:13:97:f1:17:6d:53:5b:10:64:48:f1:7f:
51:f9:30:21:f6:2e:9c:42:54:dc:fc:09:3a:b0:70:
e9:97:c7:d7:ff:c2:9f:e2:fb:2f:f2:1a:79:2a:e6:
d9:a0:a0:7a:d2:f2:f7:24:cc:6f:67:4c:f7:78:23:
21:45:2a:f2:c6:5e:f9:24:3d:e4:83:74:2e:06:c8:
93:2a:d8:c2:c5:dd:38:34:0c:93:ae:fd:28:7e:4a:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:02:4F:39:FE:20:1A:0E:CF:D9:7D:A3:31:B0:68:8E:3B:AE:6F
X509v3 Authority Key Identifier:
keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:a3:ea:06:70:c0:c3:7c:92:98:6f:be:85:b4:44:1b:77:
63:c9:b4:87:81:77:50:e4:75:65:73:68:8d:5a:15:5f:c6:ae:
f7:fb:aa:4e:af:eb:43:03:8e:17:8b:24:8f:a9:70:f8:71:3f:
af:79:2d:2a:34:cf:4e:ff:82:2f:53:8d:5a:85:61:5b:18:97:
0a:4c:03:59:fd:bd:fe:a5:58:f9:f7:9b:0c:7f:bd:25:0e:68:
44:0c:d6:d0:7f:37:9c:8c:7e:d6:22:de:30:b5:2f:79:eb:b2:
36:3e:54:22:a7:5d:b2:da:be:65:c4:03:fc:8d:4f:e5:c9:c8:
b0:28:56:fe:f4:cf:ba:d4:6c:26:49:1a:86:dc:35:f8:8f:3a:
4d:70:9f:d5:cc:41:5a:11:cf:22:3d:96:bb:43:e1:f6:c6:f5:
f1:08:09:ab:9c:3b:39:94:e1:4b:7c:64:b0:ce:10:22:d2:57:
fb:90:80:a7:fe:64:55:6d:fd:ec:5f:9d:fa:bb:2c:cb:cd:37:
e1:78:16:9d:e5:8a:3e:5d:8e:0a:93:09:02:d0:97:41:57:c3:
15:bd:b2:81:b2:66:3e:0b:d3:d4:ad:99:10:5d:ef:77:ae:59:
0d:32:e2:40:50:1c:a6:87:01:b7:65:10:82:50:fb:82:3c:ca:
e1:f9:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:05 2026 by rpki-client