Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json)
Hash identifier: DdU3+Zf2a71t3GmrxiuW3UYlg2VfuMz54YueV9GwlYA=
Subject key identifier: 17:54:3A:75:F1:B7:92:C1:82:DE:12:30:39:95:87:91:8E:F4:F1:6E
Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866
Certificate serial: 019D270409C95FDC6959CF5A4DE0BCBA4F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
Manifest number: 052A
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: PtKbm8R7RMbEQsmhgmuczLAa+zxbc+ox45tqEVry0ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:09:c9:5f:dc:69:59:cf:5a:4d:e0:bc:ba:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=17543a75f1b792c182de1230399587918ef4f16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:73:72:b8:0d:77:97:c3:83:ff:02:7b:39:
d7:86:a0:a1:3a:ce:37:b7:3a:80:c5:d1:3b:8b:83:
da:ef:de:7c:cb:91:e9:6a:07:b2:fa:7b:5d:65:2c:
72:b3:f8:f7:b4:b3:82:7c:18:a9:a7:3c:3f:35:2f:
5c:96:8b:df:cd:eb:3d:a3:2b:9a:59:5a:3a:b2:7c:
52:36:e4:de:36:3b:72:9f:47:f9:34:48:ff:71:be:
95:d0:05:c5:12:2d:fe:df:2e:0d:7f:fb:6a:8e:3e:
df:8c:54:c5:0c:f4:6f:ba:f4:fa:84:9a:99:5f:94:
b5:c6:b7:e7:3f:74:b7:a4:74:86:18:8c:b1:a0:bf:
73:31:63:34:22:d5:d4:47:6d:19:85:0c:56:b9:23:
aa:61:43:e6:c6:09:3d:2c:40:ae:ef:55:a1:f7:6e:
78:8c:74:96:08:aa:c3:10:a2:58:7d:62:c7:40:7e:
9a:11:27:7a:d3:98:7e:36:f0:17:66:7d:fd:af:da:
a8:75:9c:d1:4f:af:b7:21:9b:e7:fb:cb:c3:61:72:
4e:50:d4:a5:40:cc:c1:0f:d7:c7:40:db:4f:8b:8d:
18:35:85:33:cc:1b:f6:b1:9a:04:be:fd:72:12:86:
2c:3e:ef:2d:ea:14:60:74:32:fc:7f:d6:b0:44:2a:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:3A:75:F1:B7:92:C1:82:DE:12:30:39:95:87:91:8E:F4:F1:6E
X509v3 Authority Key Identifier:
keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:18:a3:b0:7c:38:14:af:5e:c8:45:fd:0a:40:b1:45:d7:61:
94:1f:66:ce:6e:37:3d:1a:00:2e:79:35:bb:a6:b2:b9:df:7a:
4d:60:e6:b3:1c:d5:eb:c2:62:98:4c:b8:24:c2:24:b6:41:c7:
39:c6:2e:a6:6e:41:85:80:a4:4b:c3:88:5d:12:ae:f5:b8:35:
2c:e1:70:c7:bf:3c:6e:84:0c:21:b9:d1:01:2e:e7:11:cf:82:
1a:de:e9:41:08:26:38:4e:94:87:be:0d:38:4e:a6:04:82:5e:
58:00:af:85:15:ee:93:66:49:f4:a2:a4:57:6c:16:ad:79:a8:
a7:19:c4:14:90:d8:29:b9:8e:46:47:c1:65:c8:35:be:18:81:
f5:26:9c:05:6c:f9:7c:88:05:7a:de:21:26:61:22:06:69:be:
43:88:b0:6d:82:2c:14:fa:09:4e:99:37:29:60:20:4d:74:68:
91:a0:54:fb:14:38:08:fb:e4:52:df:34:d6:64:b5:74:9e:36:
70:8f:93:2a:63:87:ee:4e:97:a7:ec:bf:a3:b2:56:bf:ac:25:
cc:86:b1:2d:fc:18:cb:81:14:b9:57:c3:b5:3e:e4:d2:ef:83:
e6:41:1d:39:db:9c:ce:06:ad:08:89:77:f6:ac:a3:35:38:51:
3e:66:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:23 2026 by rpki-client