Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier: k5yFJMh8JrGWuExgJhZx1FuhM+0sSqqTj73B8ddG8c4=
Subject key identifier: B1:3B:59:E6:80:41:11:BB:D6:73:52:FA:23:9F:46:3D:3C:AF:B1:51
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial: 019D28F1F87A20BC6A56044A2A0457B45849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number: 14DF
Signing time: Thu 26 Mar 2026 07:00:39 +0000
Manifest this update: Thu 26 Mar 2026 07:00:39 +0000
Manifest next update: Fri 27 Mar 2026 07:00:39 +0000
Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: 8iS3xz9lTEVCfGgSW31TYoALwYnm/cfKGMXHeZfYwIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f8:7a:20:bc:6a:56:04:4a:2a:04:57:b4:58:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Validity
Not Before: Mar 26 07:00:39 2026 GMT
Not After : Mar 27 07:00:39 2026 GMT
Subject: CN=b13b59e6804111bbd67352fa239f463d3cafb151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:ac:62:52:0e:1b:5c:d4:84:00:04:e1:2f:
55:a7:bd:bb:ca:72:fb:10:a4:22:49:14:19:07:17:
d2:4d:6a:a7:e6:bc:34:04:20:c0:87:d7:ba:60:52:
81:42:e1:fb:5c:69:f4:e9:cf:8d:45:d2:56:3f:16:
0f:18:d7:f8:78:22:a5:db:5c:64:43:18:8e:24:b0:
d4:11:bf:ea:dc:03:53:0a:35:ae:5b:be:1e:27:a8:
63:37:4a:81:8a:8b:a0:fa:e2:01:70:1d:94:f5:22:
4a:9e:d1:08:33:51:4c:7e:f9:26:ec:e7:da:60:df:
0a:d9:b0:12:2d:c9:aa:a5:dd:a6:65:c3:80:da:fb:
3f:c2:08:d8:63:fa:60:5f:85:39:f1:b1:b6:92:08:
2b:5a:16:bc:42:5f:fd:b1:27:01:9d:22:fb:81:fc:
9d:49:2f:2a:ab:c4:92:2d:3a:b4:16:ab:17:90:27:
cc:61:91:3c:e6:0a:36:af:98:cc:2d:a3:0f:e2:ae:
86:d3:65:0f:11:1c:e0:7b:1e:a5:f5:a7:f5:f0:fc:
d7:17:b3:44:28:ae:f4:0d:79:26:d2:1c:1b:c4:06:
f0:82:ad:6f:0a:f4:c0:2e:c4:e2:ce:36:49:ea:4d:
fc:55:ed:98:de:be:27:14:0e:75:a4:2d:3e:bf:d9:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:59:E6:80:41:11:BB:D6:73:52:FA:23:9F:46:3D:3C:AF:B1:51
X509v3 Authority Key Identifier:
keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:b8:05:3d:51:75:c5:85:7c:02:91:94:ed:c5:62:50:86:
35:ce:eb:08:55:7e:a0:d5:68:ee:4d:cf:b3:18:aa:5f:f8:a7:
e0:65:6b:be:b8:06:57:e2:8c:88:d3:70:31:03:39:8b:07:ba:
6f:74:44:51:cb:70:e6:0c:6f:aa:d7:0c:d9:5b:b1:d6:2a:a4:
db:dd:a3:76:ea:bf:41:f0:b2:20:d0:5f:2f:fe:9a:32:c7:14:
ae:07:ea:74:58:ea:8a:77:57:98:32:14:31:1b:8b:8c:4e:27:
ca:71:17:50:d7:46:8d:4a:e7:65:55:e0:69:79:c7:c9:de:bb:
49:f3:87:81:b5:71:e7:eb:ca:24:08:d5:b5:d4:e2:5a:8b:94:
3a:28:b5:93:09:c6:4b:a9:fd:af:0b:f6:54:61:e3:ae:2f:0b:
76:7a:c4:97:3c:0b:06:41:19:fe:b0:d5:9c:22:36:ff:6d:5c:
7d:50:d9:8a:d3:ce:15:ed:f1:6f:b6:70:f6:72:51:36:c2:32:
6d:0f:80:6c:bd:41:64:dc:bf:02:67:49:95:b3:ff:9a:dc:79:
28:e7:23:d0:86:15:f2:fe:4c:64:82:1d:c2:83:43:98:30:70:
93:cb:51:b5:7b:e4:a3:04:1d:0b:4a:d4:1a:78:ad:90:7c:0b:
1d:af:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:47 2026 by rpki-client