Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier: Lx29S1pqsg8AnsGEo4WOsQF61ca1HtfwgP8WeAZI+Zo=
Subject key identifier: 9D:C6:B7:94:93:9B:B8:86:99:67:47:8E:BE:69:C5:75:1D:99:3B:A0
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial: 019D2A3B44E0BAD9AC45D77DC55E527D8DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number: 114C
Signing time: Thu 26 Mar 2026 13:00:20 +0000
Manifest this update: Thu 26 Mar 2026 13:00:20 +0000
Manifest next update: Fri 27 Mar 2026 13:00:20 +0000
Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: ax+hPrpBShI/4i9c336C7tnZojrOKjy12t2ACOQ5Vx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:44:e0:ba:d9:ac:45:d7:7d:c5:5e:52:7d:8d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
Validity
Not Before: Mar 26 13:00:20 2026 GMT
Not After : Mar 27 13:00:20 2026 GMT
Subject: CN=9dc6b794939bb8869967478ebe69c5751d993ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:4c:fd:1a:99:b4:55:3b:55:28:4b:3e:25:
fb:5f:cb:df:45:03:80:1b:4d:45:bb:10:b5:cc:68:
18:c3:e2:50:7c:84:84:70:46:6f:ce:6d:4d:c9:04:
bb:43:ec:19:d1:a4:ad:6d:c1:d6:95:bf:11:ec:c8:
74:6c:c4:23:f8:ce:aa:ca:0f:72:b3:32:61:ed:a4:
21:b8:0d:3a:66:9b:eb:21:22:4d:34:71:fe:97:0b:
d9:bc:4a:ab:70:78:8a:11:d6:72:7a:1f:94:58:64:
c6:13:45:5e:6b:b6:3e:8e:8b:7e:22:09:3d:15:41:
ea:96:24:c9:9b:a0:fe:c0:87:eb:39:81:be:77:68:
97:46:57:31:b0:44:2e:73:e2:c3:03:b8:73:44:66:
32:d9:e7:f8:24:9f:34:f6:d4:81:ea:83:90:14:6f:
3d:25:33:dd:17:bb:4e:14:5b:80:89:c0:75:a6:01:
8f:46:ba:ed:86:f4:2d:c8:ed:4c:4f:ea:96:4b:02:
45:3e:12:7c:18:19:f3:5d:bb:fe:3e:0c:1f:21:3c:
23:bc:2f:f0:32:e9:67:18:80:bd:d1:18:bc:04:16:
a4:e5:a4:76:97:72:ca:a1:8e:7a:82:6e:0d:d1:60:
91:e6:27:26:56:80:a7:ac:f8:da:f2:1e:2e:87:b8:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:B7:94:93:9B:B8:86:99:67:47:8E:BE:69:C5:75:1D:99:3B:A0
X509v3 Authority Key Identifier:
keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:55:6a:56:95:8d:2f:ec:cc:b2:4e:af:45:79:95:de:b4:6a:
92:af:99:83:a6:a4:81:93:bd:d4:5a:53:c1:7d:ed:7b:4d:14:
f9:7b:b6:e6:0b:6c:b8:f9:32:18:1d:0a:92:1f:3a:05:4c:78:
35:f8:5b:10:02:3a:28:0f:31:d7:d5:26:f8:56:fa:96:09:3d:
80:19:55:12:56:e9:0e:ad:3f:dd:a5:c3:41:8b:70:7b:2d:35:
2f:d3:da:1a:6f:d0:60:6b:4e:97:44:87:9f:87:61:2c:20:96:
3a:e9:d2:3d:d1:4a:1d:10:b2:12:b4:9c:36:be:2a:d0:9d:a0:
69:fd:e4:ba:45:67:4e:13:74:08:66:63:2e:93:46:b1:96:44:
b9:c6:ba:df:5d:07:35:6b:30:07:78:76:31:33:68:73:24:06:
64:98:01:67:19:6a:31:fb:1e:f8:1a:39:67:d4:dd:4c:b4:60:
2e:68:33:8e:f0:0f:df:50:6d:f3:2d:23:e9:11:2a:aa:38:86:
8e:0e:d7:fc:d7:6a:9c:ef:54:2c:94:0a:b1:a9:17:01:57:0e:
6d:1a:bd:59:0e:cb:2e:bd:c4:d4:5a:a7:91:2a:12:45:6c:97:
6d:15:1f:8e:2c:c7:91:c9:59:b4:7e:5c:97:d0:40:2b:ca:ab:
1e:32:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:18 2026 by rpki-client