Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
File: Yefv0ZrydUeUJswZJcW8Ls7ums4.mft (raw, json)
Hash identifier: B6JLAm4zXQgPmcdGEAWnPf9pO3qMu/XD2MVryn4b0qM=
Subject key identifier: EA:7D:B3:26:DA:88:AD:1D:BF:A4:CD:63:F5:BB:82:37:56:16:36:95
Authority key identifier: 61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
Certificate issuer: /CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Certificate serial: 019D265F9299AF64CC6749FC343D3AB6610B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
Manifest number: 1797
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: Yefv0ZrydUeUJswZJcW8Ls7ums4.crl (hash: yeB6gNleTYcZWhlLVdluB0rSpSNh68xSej1Afyv8mr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:92:99:af:64:cc:67:49:fc:34:3d:3a:b6:61:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=ea7db326da88ad1dbfa4cd63f5bb823756163695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:5e:2b:30:04:d5:68:d6:73:77:8b:a3:d0:
e0:eb:a9:c6:e0:12:3e:27:bb:75:3c:1c:2f:72:a3:
d5:09:4f:5c:5f:94:c2:55:8b:3c:b6:5a:65:ed:aa:
33:57:96:57:5b:f2:09:2f:c1:05:e0:40:70:a1:fb:
1b:4b:f6:02:f7:89:f7:35:09:5e:6e:a5:0f:cb:c2:
f7:91:4c:3a:bc:e4:ab:5c:d0:cb:1f:dc:fe:7d:d8:
af:4f:c3:b1:65:dc:6d:0a:d1:e7:ca:7d:b0:c0:85:
eb:51:5e:30:1e:51:d5:45:1e:6b:90:ce:01:e7:92:
27:52:9d:a4:5f:0e:e7:0e:e0:d7:4b:09:b9:b9:aa:
7f:1e:64:af:4a:78:3d:e1:8b:7a:7f:1c:d3:0e:f5:
80:45:ad:78:4b:27:d4:be:6d:b9:57:86:80:c4:16:
2e:a7:ee:71:1e:73:5b:98:b1:87:78:af:13:6e:12:
4e:20:12:a4:f4:86:46:20:b5:5b:e9:d7:c3:60:01:
fe:f2:20:6f:a7:70:06:66:f1:1d:e4:09:ff:d0:68:
e0:5c:82:66:77:6e:91:a7:81:61:11:ba:78:aa:4b:
22:2c:b4:96:0a:d7:a4:4c:64:28:44:c3:e0:a9:3d:
e3:95:ba:f6:31:f8:9e:cc:78:67:da:b7:11:19:66:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:B3:26:DA:88:AD:1D:BF:A4:CD:63:F5:BB:82:37:56:16:36:95
X509v3 Authority Key Identifier:
keyid:61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:38:74:87:e3:49:5c:ee:4b:a6:79:2f:83:df:49:e1:2c:01:
65:da:a3:2c:21:55:59:dc:b1:8c:04:e1:4f:24:43:7e:b3:80:
c7:36:b9:82:ed:34:d0:8c:2c:5c:52:85:7d:64:24:49:01:71:
5b:33:44:fe:1c:10:c8:6b:a5:03:f4:61:3f:1d:d7:c5:7f:4a:
dc:b6:88:65:48:b7:42:b8:c9:3b:55:55:4f:c9:d9:14:d4:f7:
99:42:72:7c:be:d8:c9:fc:fa:bc:89:33:e0:ae:29:d1:bd:3b:
6c:fc:cc:29:5a:20:ac:c3:35:d0:ac:3b:d4:20:8d:a9:0d:62:
8f:07:d8:1a:50:35:20:0e:d6:29:92:2d:31:5f:f1:81:e2:df:
ef:52:3d:b4:3a:72:3e:b2:ae:e1:a0:5d:a3:f1:3c:51:5e:04:
90:02:d7:88:01:1c:c3:6f:f6:4b:69:f8:56:74:b8:81:78:ab:
6b:37:c4:5f:9e:41:bb:6c:04:73:b9:de:a1:3f:da:a2:d8:fe:
a9:65:4b:62:fa:0c:31:4f:24:6d:ca:5d:ed:78:c1:aa:71:02:
74:dd:01:87:76:c7:8c:53:8e:e2:cd:9e:49:3f:d0:5e:22:30:
61:90:14:ee:2a:1a:1d:cf:1d:72:9e:2f:0f:37:94:a9:32:0e:
85:d6:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:18 2026 by rpki-client