Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier: WEsE/h4YHWvqDM2haKTIKeB3ZJz+QHHwi449TTffGRs=
Subject key identifier: 17:1F:3A:A0:36:34:30:E6:12:EF:BB:A6:DE:C1:54:0B:0E:E4:38:C0
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial: 019D28BB5612DC6AF3C14273B258B411204E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number: 0FBC
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: pjGuNzdQ+a8wV6ZgJR67kEYcK6nbhPjD3gnwcCmAL0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:56:12:dc:6a:f3:c1:42:73:b2:58:b4:11:20:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=171f3aa0363430e612efbba6dec1540b0ee438c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:bf:b2:f0:e4:2b:20:da:5b:85:47:b3:82:
de:04:da:0d:b1:ab:43:96:76:96:6b:7f:e6:e8:41:
f9:75:81:a8:60:44:e7:1b:d3:ec:82:88:29:c7:c4:
9f:fc:82:3c:6d:cc:54:f9:d0:25:3f:ff:a0:09:03:
87:af:93:24:4d:0a:f4:95:c3:5e:b5:fb:00:22:6c:
81:99:77:b5:1b:ca:a0:0a:db:4e:f0:b1:a2:f1:28:
fd:b6:af:11:82:d1:bd:9c:2c:ef:45:fb:dd:37:a1:
13:20:d9:7b:a5:0e:92:cb:1d:c6:33:75:86:af:0d:
e9:9b:19:88:49:35:40:4a:0e:3e:b9:f6:7f:43:e0:
b6:62:1e:48:8b:03:cf:0d:5e:ff:f6:d0:ba:76:ff:
4d:cc:e9:37:d9:77:e2:98:e8:a2:f3:f0:3d:25:8d:
97:32:c4:b7:c2:33:dc:af:58:e0:91:c7:b1:ab:a6:
bf:fc:8c:dd:d2:fc:6a:a4:d8:13:54:ea:4c:27:8c:
a5:28:20:56:bd:60:59:63:c6:60:78:c4:12:78:d2:
5f:1e:cd:86:00:b2:e5:8b:87:d0:ef:0f:48:01:3c:
df:2b:5d:2c:04:40:39:f6:7b:40:6f:62:77:f7:f3:
98:fa:35:95:4f:1e:15:eb:d7:35:5b:d2:6d:35:86:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:3A:A0:36:34:30:E6:12:EF:BB:A6:DE:C1:54:0B:0E:E4:38:C0
X509v3 Authority Key Identifier:
keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1f:74:f6:8e:25:08:c7:10:3c:d9:6f:89:8b:6d:3c:56:37:
48:83:2b:9e:f7:31:44:c4:1e:5f:09:20:dd:aa:2e:28:53:54:
8a:07:88:48:ae:bb:8b:2e:36:83:f5:c4:bc:d2:5e:27:05:aa:
1d:42:1a:cc:16:a3:92:67:b8:8b:0b:31:4d:98:72:a6:3d:3b:
09:92:00:c1:46:39:c9:32:e9:0c:d2:b2:12:d8:b2:48:55:61:
12:8a:70:98:90:95:8b:05:88:d7:6d:fc:c5:23:86:91:44:e2:
dc:b7:c6:40:68:d8:e4:61:85:6e:c3:54:74:6c:ed:be:2a:2a:
8a:d3:f6:22:9d:de:55:30:4a:ed:00:9b:0d:c5:35:82:b7:ea:
17:0d:fc:d3:11:60:a4:65:7f:cf:7f:61:3d:31:f3:ea:81:e8:
72:61:03:a8:9e:a8:19:4e:2b:64:c4:38:00:f1:4d:33:70:12:
6e:9e:19:60:1b:d0:41:67:7a:28:09:08:1c:33:10:11:a4:42:
0b:28:6f:0b:86:64:a4:43:77:24:a1:2f:04:67:1a:f1:50:20:
54:4d:f4:14:e4:ef:1e:1a:60:88:44:bf:07:45:81:aa:07:68:
be:95:82:28:34:90:bb:04:2e:23:36:45:cc:94:9f:d3:5d:84:
36:cb:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:32 2026 by rpki-client