Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: CAaPZJyCge4PaRuvsCfCv/Wr2UCxR7E+EXUT+SkQC9E=
Subject key identifier: 42:CA:B8:73:EE:CB:EE:43:BA:3C:AF:34:70:02:D3:70:F8:D0:B8:C9
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 019D27A8C5C1D8A28555913F1E47BDD95AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: N3XviYmZPtKsH2ONbidhVPOkYNF4LPezhzPNSrJdI1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c5:c1:d8:a2:85:55:91:3f:1e:47:bd:d9:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=42cab873eecbee43ba3caf347002d370f8d0b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:95:55:06:2a:9b:2a:6a:e5:36:66:34:cc:
e2:b9:55:d0:f4:b0:74:f6:44:cb:d3:ef:73:8e:af:
e4:77:75:92:2d:f6:a1:5a:01:c9:b9:6e:1f:2e:1c:
21:49:e5:da:7b:c5:70:5a:f8:6e:85:84:2b:56:29:
4e:7f:57:2e:02:75:cb:19:6d:bb:3c:c6:00:ee:ae:
7e:ec:2d:75:32:46:a0:2e:5a:b9:33:ef:86:fd:8a:
fc:d5:bb:a5:38:b3:86:8e:34:d4:0f:85:96:cf:74:
07:ba:97:b4:c2:18:2a:8a:44:e8:bc:5f:51:4e:3c:
90:11:c0:ae:d3:dc:49:17:61:2f:3b:4a:6b:fa:ca:
0d:b1:05:ee:d2:45:82:8c:6b:e7:80:89:e9:27:c5:
80:59:a0:c5:5c:5f:81:8a:7b:92:75:fc:05:de:bb:
64:cd:14:d1:a8:eb:1c:ef:ef:f2:4e:0f:e0:6c:23:
61:87:30:0c:a3:53:92:38:93:38:77:64:5e:ec:19:
37:7c:16:fc:9a:c2:71:f7:2e:c8:96:c7:cc:cb:3a:
77:05:8b:05:ed:42:6b:b8:3e:0f:15:61:b3:dd:fb:
0f:24:56:c3:d8:6d:07:01:51:f6:33:d6:37:8a:fb:
08:c3:0d:65:5a:58:12:9a:41:73:40:f2:b6:73:7f:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:B8:73:EE:CB:EE:43:BA:3C:AF:34:70:02:D3:70:F8:D0:B8:C9
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e8:ee:2f:b5:26:43:a9:f9:13:cb:c3:f1:eb:e5:f8:7c:26:
01:ee:7b:cb:1b:7d:de:c1:ca:f7:5e:ee:75:9c:92:05:e7:1a:
7a:f6:14:e5:41:50:f8:ea:bf:73:e4:83:ed:81:22:c2:b3:69:
36:8f:be:ff:e1:8f:39:de:7f:b5:4a:f2:b2:c6:98:1d:25:34:
97:26:a0:34:c0:2c:22:f8:e1:30:31:d4:df:48:b8:41:ef:71:
8d:5a:c5:e1:bb:35:8d:d9:26:35:e1:7e:59:24:e2:b0:53:4e:
3a:26:ef:2b:d2:00:09:82:23:7c:43:16:3d:fd:67:41:4b:29:
c7:d2:72:0c:04:34:56:aa:94:06:00:a4:6e:e4:de:ec:77:1f:
55:cc:08:21:38:ef:a0:2a:bf:ab:d0:d5:51:62:18:4d:48:36:
7e:3c:80:c7:db:98:74:2b:96:92:8b:6e:8a:76:a1:d0:2e:0e:
4b:41:3d:86:2d:1b:17:cc:47:ee:3b:63:5c:40:f1:30:88:f1:
2e:e6:30:17:3b:3a:1d:94:c7:57:05:a7:d5:14:58:c5:fc:bf:
2d:98:8a:67:01:80:84:02:c9:24:f3:23:b3:b7:f7:a8:b5:9c:
2a:35:39:b9:77:2b:70:32:90:85:7d:7b:f3:20:99:64:73:8d:
28:4c:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:37 2026 by rpki-client