Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier: rvBeoN9IvISyrBPQtMC5AXdIGJ791+hEr7FJnWH5r1g=
Subject key identifier: C0:26:47:31:91:CD:4E:56:6E:0D:81:4E:A0:0C:7D:12:61:63:91:E4
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial: 019D27DF927A81D9F4F20DF5533E05D2CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: tH+vWS+gfw17RdTCYAo+nbAD/8Xu4OJteSPqPNVNhe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:92:7a:81:d9:f4:f2:0d:f5:53:3e:05:d2:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=c026473191cd4e566e0d814ea00c7d12616391e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:8c:4d:df:1a:b5:ea:c6:68:b8:b3:be:13:
4a:86:97:d7:1a:1b:6c:a7:42:71:ed:e8:e3:61:f2:
fa:c4:ae:da:21:5f:2c:03:83:00:e4:44:e7:e6:ef:
64:ff:f4:e7:08:70:84:a1:a2:c0:62:76:d3:bc:75:
b2:fe:81:72:14:ba:cf:b1:49:aa:dc:ee:13:9c:1d:
a3:67:f7:62:48:d9:09:85:7f:67:f0:7e:c5:9e:20:
74:7d:4e:85:db:bc:c0:6a:a4:13:33:09:a2:89:4f:
20:94:b1:b5:b6:df:c6:e1:7f:4c:da:b9:6e:14:6e:
a7:90:20:ce:79:46:b9:46:68:98:8b:65:05:cb:bf:
5c:a5:84:29:f6:b2:b2:08:4b:17:b8:7c:f6:50:91:
4f:c7:0e:08:5a:ce:a2:7e:d9:6d:72:2f:35:6a:61:
eb:e7:c4:97:1f:2c:50:ce:e0:eb:b2:f4:a5:7d:1e:
df:bb:4c:38:76:31:22:b8:dd:99:0c:65:14:be:8c:
c0:05:fd:22:f9:62:23:6a:76:9c:f4:cb:d9:3b:2b:
9f:51:52:cb:f1:07:64:03:61:0e:b8:69:ae:2b:8d:
5e:5c:eb:58:40:b6:fd:6a:80:64:c2:02:28:b8:04:
d8:99:bf:f4:b5:a2:ff:47:f3:f0:2c:35:31:23:b0:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:47:31:91:CD:4E:56:6E:0D:81:4E:A0:0C:7D:12:61:63:91:E4
X509v3 Authority Key Identifier:
keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cc:46:b2:89:c3:19:71:83:4c:5b:53:74:73:cc:9c:ec:ac:
df:bb:a4:a3:d5:5e:d1:41:d9:ba:7b:0f:8c:bf:11:91:a2:96:
75:9e:87:27:13:d3:4e:9a:60:c9:19:34:a9:71:0c:59:83:2d:
a5:d4:8c:76:17:27:83:de:7b:66:b9:33:27:86:d5:b4:b5:60:
47:59:cb:0f:4f:1b:2e:c7:20:59:76:97:ae:67:88:b7:af:ab:
f3:ca:8b:15:6e:1c:a4:af:cd:f0:25:b4:a0:75:fb:f9:25:2a:
62:b2:f7:5a:9c:bc:7b:9e:9a:e7:41:b7:4b:6f:ca:cc:20:85:
29:61:e7:27:cf:cd:3d:c7:8b:e2:cd:74:c0:4d:6d:9e:5b:08:
8d:ec:0f:e4:69:92:93:c6:e6:1b:82:e0:a6:3a:fd:e1:18:15:
eb:4f:38:bf:b7:f7:83:5a:de:5b:73:df:74:6c:6e:f2:04:69:
ba:be:0e:7f:69:29:be:bb:7e:17:f0:a1:97:06:c9:de:d1:72:
cb:ba:bb:ee:14:10:08:bb:05:a4:3f:c8:d8:71:70:30:f3:a0:
ae:98:11:a2:a8:80:24:1b:dd:48:d7:a7:03:b3:bd:17:12:d4:
c1:c2:36:71:2f:a8:41:10:44:4e:24:b9:22:da:ed:b8:1a:de:
dd:60:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:02 2026 by rpki-client