Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File: ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier: dJotyebVOs8F0rY388hgAx1+7tDzGOOnaR7S6RaPpXA=
Subject key identifier: 06:E0:E6:B5:40:19:89:4D:FA:A4:EA:80:C7:64:26:36:0F:9A:E5:B1
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer: /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial: 019D2703F5FD77091F6CB03022CC0834574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number: 092D
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: i7/Ju1BUDprLHnCvdFR7WWrLPVaCzcySr3c7ZW9exGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f5:fd:77:09:1f:6c:b0:30:22:cc:08:34:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=06e0e6b54019894dfaa4ea80c76426360f9ae5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:6d:1f:b4:30:31:43:5c:61:35:34:b4:05:
2f:ef:72:f1:f1:7c:47:63:20:05:4a:52:69:48:64:
7b:ed:66:7b:02:70:7a:12:3e:b4:e4:55:21:7e:76:
14:de:5a:8f:3c:21:b7:aa:be:3f:3c:9d:48:df:8e:
b9:cd:5a:35:25:f9:82:8f:07:98:c4:c6:92:c1:98:
00:c9:78:f7:cf:f2:4b:b2:ee:66:6e:6c:7c:bb:80:
2d:30:60:e7:84:72:c0:82:f6:4c:a9:6f:5a:c1:25:
3c:09:7b:12:72:05:ae:36:2e:76:98:51:c2:db:74:
0d:dc:1e:e2:3c:52:08:ce:c6:8c:c6:4a:18:56:f6:
15:d6:ef:17:14:13:0d:7d:35:ab:7f:a5:0f:e4:0d:
18:fe:b4:66:50:54:43:ca:72:ef:a8:65:14:46:19:
a7:75:8d:9d:0b:a9:0a:c9:ce:47:e5:3a:50:8b:9a:
78:b3:bd:52:6f:89:1e:19:64:72:7f:33:f6:da:d4:
d5:cd:47:17:9e:82:64:71:60:66:a7:4f:7d:78:a6:
19:66:67:43:69:09:2c:37:1a:a9:67:9a:4d:5f:10:
7b:43:1a:23:d9:47:62:4a:97:55:a8:f9:34:de:5d:
48:45:42:55:f7:b2:f1:61:5f:c1:02:f6:5e:5d:80:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:E6:B5:40:19:89:4D:FA:A4:EA:80:C7:64:26:36:0F:9A:E5:B1
X509v3 Authority Key Identifier:
keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:ad:0a:41:1f:20:7a:d0:e3:3d:84:74:22:d7:87:d5:9d:
4f:b0:0b:46:26:8a:7b:f3:fb:d5:a3:44:d6:f9:47:d5:0c:4b:
3f:e3:08:2f:ad:0a:df:c4:42:a4:81:25:ea:1a:d8:33:c7:73:
bf:77:60:83:97:84:83:92:92:37:54:91:c0:bd:84:b0:fa:2c:
06:1f:3e:01:68:da:01:21:74:a6:48:47:9e:26:82:08:f8:6a:
65:1e:e1:01:42:a5:e7:ee:bb:31:39:95:65:37:46:91:0b:c0:
3d:ec:23:36:77:95:59:2d:fd:72:3a:09:26:4d:f1:d0:fd:67:
23:48:19:c7:52:a5:7f:b0:c1:fa:46:a3:fa:1d:88:91:d4:87:
8d:61:bd:41:e8:0e:8a:f8:fa:fb:61:0c:de:35:9f:fc:f9:c1:
ac:0e:56:92:77:34:a3:0d:a9:d7:ea:e0:cf:a8:88:63:ae:3a:
4c:26:c0:d3:83:03:ee:07:db:fa:d1:cd:af:2c:25:7d:3c:94:
00:92:37:46:b2:3d:bd:b8:76:f7:91:12:e5:87:a9:7e:67:91:
00:3e:36:a0:7f:40:72:6c:7d:bc:fc:dc:01:46:c4:d5:e9:ee:
ed:82:df:f1:70:a0:c7:b9:08:bc:a3:56:dc:25:a9:1c:3f:cc:
69:ba:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:40 2026 by rpki-client