Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
File: YmJJH6XuZw3MLCvhaY436ZMXSSM.mft (raw, json)
Hash identifier: Ci9nsMphXaRIp7QbV5tIwYStLnLaQvWAAbThV5Ycvms=
Subject key identifier: 30:B6:B5:8F:16:9F:8C:2D:BA:3B:97:7A:B0:17:6E:9A:C5:CE:BE:36
Authority key identifier: 62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
Certificate issuer: /CN=6262491fa5ee670dcc2c2be1698e37e993174923
Certificate serial: 019D27A8806978C38DBFCA5D61417D6426A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
Manifest number: 0318
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: YmJJH6XuZw3MLCvhaY436ZMXSSM.crl (hash: bn/CO53gfv9AcsmbGSF1lYPQNHasincnkVlsCzdVr+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:80:69:78:c3:8d:bf:ca:5d:61:41:7d:64:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6262491fa5ee670dcc2c2be1698e37e993174923
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=30b6b58f169f8c2dba3b977ab0176e9ac5cebe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:34:45:50:99:cc:0c:f7:d0:e9:13:aa:9e:
3c:c6:b7:2b:ad:c9:79:04:a8:8e:13:03:39:48:8e:
8e:53:7d:b0:21:79:01:d1:37:5a:bf:e9:2e:6c:69:
db:cc:7b:48:09:44:49:fb:22:16:cf:ca:47:3f:75:
4e:8a:0c:1a:aa:3b:1b:4e:d8:3b:63:ae:71:f7:1f:
30:36:ca:3c:ed:68:c3:56:a6:90:18:37:71:71:3f:
f9:29:19:00:e2:94:d9:f8:db:5f:6a:34:53:a3:24:
fa:3d:4e:03:8c:2d:ce:a6:05:3b:85:69:9c:ef:da:
77:c0:01:1d:8a:c9:3f:25:14:67:ba:c3:6a:bc:33:
8f:c9:a9:13:e2:0a:1f:79:0a:e0:05:c9:2c:58:92:
82:94:a3:ff:1c:a7:c0:46:59:f0:ac:4f:04:21:b7:
0c:d4:75:2d:54:b8:49:fd:60:f5:91:fe:9e:ff:7a:
d1:1d:5f:9f:46:01:aa:34:9a:79:d6:20:25:33:d2:
c2:55:f7:b9:63:9b:bf:6a:e1:8c:40:4d:e1:86:40:
cf:8e:59:1a:77:8d:3f:e0:de:ef:3d:06:33:c5:7d:
02:47:81:02:85:43:15:82:90:03:a5:37:c4:1c:58:
c6:3b:8f:89:d4:0e:87:44:0a:1e:f2:62:f3:79:fd:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B6:B5:8F:16:9F:8C:2D:BA:3B:97:7A:B0:17:6E:9A:C5:CE:BE:36
X509v3 Authority Key Identifier:
keyid:62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:71:72:44:37:0e:92:ce:b7:7a:04:92:27:f6:73:ff:46:88:
70:ee:5b:c5:5f:ae:39:af:0f:45:d4:53:d3:8b:ce:39:44:07:
e4:04:f3:97:9e:71:0b:b4:ad:90:c9:ad:36:6f:ef:ad:08:24:
12:7f:2e:66:53:ca:a1:7b:fd:8b:6c:e5:3d:63:22:b5:17:8d:
5d:37:d1:0e:83:21:44:80:0f:b1:88:5f:a9:26:e2:16:23:56:
9e:be:ef:39:d2:5b:ff:d5:08:91:00:a5:55:df:4b:7b:d1:e1:
97:a5:42:38:77:4d:72:06:4b:01:30:89:98:bc:ff:b5:77:d4:
12:68:a6:bf:24:f8:0e:01:59:63:e3:63:f5:3f:16:91:23:e8:
95:53:1f:57:a0:35:5e:96:47:81:97:c6:18:96:f1:37:97:72:
ff:2d:fa:9f:28:45:d8:a0:4d:e7:0e:22:b7:f3:47:36:59:c5:
bc:39:58:ed:4f:4d:b0:3c:64:c0:61:f6:a6:28:e9:f0:79:c7:
bb:d2:ce:76:a9:49:1e:1d:7c:6b:60:45:0f:e9:11:09:90:f3:
42:64:4b:66:d7:55:dd:27:d7:f2:e3:c8:fa:2e:65:07:7f:40:
fc:6a:c6:13:aa:44:56:ea:ff:cc:01:61:81:70:1f:9a:05:a2:
67:33:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:17 2026 by rpki-client