Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
File: YbpsRtyHsDEnih_K32Js1p32I9I.mft (raw, json)
Hash identifier: klCHyG7493Mf09sUNjMrojXwmEyeEF99hj3m0kdwxgs=
Subject key identifier: CC:8D:AC:7C:39:9F:54:E5:03:BC:17:02:83:68:06:49:CB:97:01:FB
Authority key identifier: 61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2
Certificate issuer: /CN=61ba6c46dc87b031278a1fcadf626cd69df623d2
Certificate serial: 019D33ACA61356E65B8317EE8BADAF5C85BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
Manifest number: AE
Signing time: Sat 28 Mar 2026 09:00:45 +0000
Manifest this update: Sat 28 Mar 2026 09:00:45 +0000
Manifest next update: Sun 29 Mar 2026 09:00:45 +0000
Files and hashes: 1: YbpsRtyHsDEnih_K32Js1p32I9I.crl (hash: z3NaVja4orkJBMPLVxmlU2caxdy98ghUleM+rNLcj8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:a6:13:56:e6:5b:83:17:ee:8b:ad:af:5c:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba6c46dc87b031278a1fcadf626cd69df623d2
Validity
Not Before: Mar 28 09:00:45 2026 GMT
Not After : Mar 29 09:00:45 2026 GMT
Subject: CN=cc8dac7c399f54e503bc170283680649cb9701fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:56:62:87:ba:81:2f:53:16:ca:a2:72:b4:
9a:50:b5:9c:34:48:1c:c6:ad:e4:3f:02:bc:be:9a:
3b:5c:42:62:0b:aa:70:ed:ff:40:ec:6a:66:0a:75:
df:c2:f7:09:29:a3:75:71:f2:33:71:06:29:2b:1b:
f7:27:91:d2:3a:ed:2c:c5:9a:34:ff:a1:e4:98:9d:
58:52:a4:f4:02:c1:17:77:c5:7a:9c:2c:f2:62:b9:
98:1d:51:9a:de:9d:98:10:5b:de:89:95:5c:3b:6a:
50:c8:45:c3:d1:48:2c:2c:0a:8c:e1:74:d4:93:91:
3c:ad:f2:09:91:22:3e:ef:f5:7a:24:3b:7f:73:8e:
d1:0c:a3:06:d7:0f:37:9e:af:47:24:d4:fb:09:8b:
d7:51:d9:88:03:31:65:c6:7d:9a:2c:1a:f8:c0:d2:
05:5d:d8:de:10:7a:0e:35:e4:cc:00:80:71:34:f5:
8a:80:e6:e2:1a:b6:c4:f3:63:f9:b1:70:19:84:09:
a0:9b:82:98:66:3c:a8:75:a2:57:9b:d2:50:34:2a:
0a:05:bd:40:5f:02:79:16:5d:f2:42:e7:8c:96:46:
f7:01:68:20:ca:ca:5b:f8:32:f4:c5:06:bb:7a:fd:
8c:6e:8f:98:c9:de:19:5d:29:7d:98:ff:f2:2e:17:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:AC:7C:39:9F:54:E5:03:BC:17:02:83:68:06:49:CB:97:01:FB
X509v3 Authority Key Identifier:
keyid:61:BA:6C:46:DC:87:B0:31:27:8A:1F:CA:DF:62:6C:D6:9D:F6:23:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbpsRtyHsDEnih_K32Js1p32I9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ff88cb-0eeb-438d-826c-fa32c3665e71/1/YbpsRtyHsDEnih_K32Js1p32I9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b4:b9:7d:79:30:c7:f8:15:56:20:b2:92:a9:a6:04:b0:37:
b8:90:7a:bc:b2:a4:c6:57:15:db:81:32:3b:6d:f3:51:d9:c5:
63:82:ef:2d:6c:df:fa:e1:b3:33:7d:19:87:83:6b:01:71:71:
46:ad:01:0a:1e:33:f8:17:57:ff:be:a6:35:0b:54:3f:b4:43:
d6:60:98:9d:3c:2d:50:dc:4f:57:31:38:a4:fc:c2:48:a0:6a:
23:32:f0:6b:c1:03:b2:18:fb:31:22:11:cc:25:f7:f6:69:c7:
69:3e:34:c2:26:81:6f:3f:c2:bf:5d:e7:91:7b:87:84:73:64:
08:3c:dd:95:ab:ea:c7:80:e1:24:22:b2:3f:78:6e:24:9a:d4:
74:74:fe:f1:0a:64:68:5e:37:06:c2:84:d3:dc:23:be:16:e7:
ab:ea:b0:c2:a5:22:40:ed:93:c0:dc:87:c7:d0:74:ba:a9:7a:
98:b1:a3:2c:e0:34:6d:e6:35:89:d6:2a:31:01:00:2b:a7:b1:
cf:dc:58:74:99:6a:5b:bf:5d:ae:ca:22:47:ba:7e:df:80:7a:
0a:40:10:8c:96:96:8d:df:21:dc:c5:f7:15:d7:2c:52:cc:60:
c0:40:3a:66:c9:21:a7:d9:bc:b6:11:81:f4:61:38:01:3c:99:
58:1a:ec:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrKYTVuZbgxfui62vXIW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmE2YzQ2ZGM4N2IwMzEyNzhhMWZjYWRmNjI2Y2Q2OWRm
NjIzZDIwHhcNMjYwMzI4MDkwMDQ1WhcNMjYwMzI5MDkwMDQ1WjAzMTEwLwYDVQQD
EyhjYzhkYWM3YzM5OWY1NGU1MDNiYzE3MDI4MzY4MDY0OWNiOTcwMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjctWYoe6gS9TFsqicrSaULWcNEgc
xq3kPwK8vpo7XEJiC6pw7f9A7GpmCnXfwvcJKaN1cfIzcQYpKxv3J5HSOu0sxZo0
/6HkmJ1YUqT0AsEXd8V6nCzyYrmYHVGa3p2YEFveiZVcO2pQyEXD0UgsLAqM4XTU
k5E8rfIJkSI+7/V6JDt/c47RDKMG1w83nq9HJNT7CYvXUdmIAzFlxn2aLBr4wNIF
XdjeEHoONeTMAIBxNPWKgObiGrbE82P5sXAZhAmgm4KYZjyodaJXm9JQNCoKBb1A
XwJ5Fl3yQueMlkb3AWggyspb+DL0xQa7ev2Mbo+Yyd4ZXSl9mP/yLhfPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyNrHw5n1TlA7wXAoNoBknLlwH7MB8GA1UdIwQY
MBaAFGG6bEbch7AxJ4ofyt9ibNad9iPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZjg4Y2ItMGVlYi00MzhkLTgyNmMt
ZmEzMmMzNjY1ZTcxLzEvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mZjg4Y2ItMGVlYi00MzhkLTgyNmMtZmEzMmMzNjY1ZTcx
LzEvWWJwc1J0eUhzREVuaWhfSzMySnMxcDMySTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrS5fXkw
x/gVViCykqmmBLA3uJB6vLKkxlcV24EyO23zUdnFY4LvLWzf+uGzM30Zh4NrAXFx
Rq0BCh4z+BdX/76mNQtUP7RD1mCYnTwtUNxPVzE4pPzCSKBqIzLwa8EDshj7MSIR
zCX39mnHaT40wiaBbz/Cv13nkXuHhHNkCDzdlavqx4DhJCKyP3huJJrUdHT+8Qpk
aF43BsKE09wjvhbnq+qwwqUiQO2TwNyHx9B0uql6mLGjLOA0beY1idYqMQEAK6ex
z9xYdJlqW79drsoiR7p+34B6CkAQjJaWjd8h3MX3FdcsUsxgwEA6Zskhp9m8thGB
9GE4ATyZWBrspg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:36:11 2026 by rpki-client