Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: eODBfRJ5OKt73Vn1Mg1ybynT5nt/59IOXT8ToPpMMJ4=
Subject key identifier: EC:89:36:AE:13:72:71:A0:BA:E9:07:93:23:84:E4:50:CC:33:2E:FC
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 019D2695FA6A677B4B02FC59A2C073F06CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 04B1
Signing time: Wed 25 Mar 2026 20:00:56 +0000
Manifest this update: Wed 25 Mar 2026 20:00:56 +0000
Manifest next update: Thu 26 Mar 2026 20:00:56 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: kFBV5lP8ULj9z8fsmpBm6dTRAGb015LJuKGbxU4hWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fa:6a:67:7b:4b:02:fc:59:a2:c0:73:f0:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Mar 25 20:00:56 2026 GMT
Not After : Mar 26 20:00:56 2026 GMT
Subject: CN=ec8936ae137271a0bae907932384e450cc332efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:1d:04:19:ad:dd:eb:35:d4:2c:c5:8c:a5:
5f:e0:9f:db:83:b1:a7:90:ec:2c:53:8c:94:e7:02:
9d:16:8a:fe:f6:ba:2a:03:a4:15:09:2a:a2:68:1c:
70:2b:bc:11:95:17:77:6a:2b:92:b0:25:a5:23:3f:
ad:0f:31:bf:52:06:d1:43:85:37:96:9a:2b:52:82:
c1:51:e1:49:5f:cc:ef:8c:66:dc:21:7f:36:71:77:
a1:ca:a1:b1:4c:c9:24:00:02:b5:42:c1:cf:df:aa:
9f:64:8a:23:a4:d2:84:68:85:11:c8:6d:21:b3:23:
23:cb:49:7b:8c:6a:f2:8d:11:15:09:1f:a9:86:3b:
28:08:d0:79:ef:c5:99:92:ed:96:e1:fa:21:c0:b0:
d0:73:0a:8a:ab:c7:16:46:a3:43:3a:9e:cb:f7:39:
7c:f6:26:f7:a3:1f:3a:9e:b3:75:07:14:2d:88:95:
b5:0f:69:02:2c:bf:b9:93:6c:86:fd:09:ca:d1:df:
ca:84:8a:f5:8f:09:2d:e4:09:64:5a:ec:3d:dd:bf:
54:ce:23:b3:2a:b7:18:15:ea:ad:fd:85:4f:d0:07:
45:7a:33:fb:c7:9a:f0:53:5b:89:3d:18:4d:c3:a4:
01:07:77:07:c8:75:d1:c0:bf:4c:f1:42:33:a5:9e:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:36:AE:13:72:71:A0:BA:E9:07:93:23:84:E4:50:CC:33:2E:FC
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:27:ef:af:e5:5d:e7:eb:a1:2d:ba:ed:1d:de:e9:a7:11:
7e:f5:34:ea:a1:a7:9f:5e:8a:64:c5:cd:e5:44:f7:bf:e2:48:
07:7d:8d:83:70:09:de:eb:95:b9:4a:35:ff:0a:1b:b0:70:bf:
d7:cd:40:b4:42:d3:58:05:c9:e3:ad:98:c8:04:76:83:f4:25:
9a:1e:1f:71:73:b8:4a:d8:78:08:7d:0f:ae:32:d1:8e:d9:09:
6e:9c:9e:f2:b3:50:37:7b:6c:45:b8:d0:fa:9a:61:e9:2b:cd:
4a:ca:78:3a:ed:7c:f4:7a:8d:9a:f7:3f:bd:61:02:82:34:c7:
8f:e2:f2:7e:46:4e:44:47:02:3d:6f:cb:4d:45:0d:ab:3d:28:
03:3b:ea:f1:29:d2:5b:04:66:ed:32:12:de:e2:e8:0b:d7:e2:
35:8f:88:03:e9:72:c6:28:44:45:b8:f5:ca:05:52:d5:ae:5c:
d7:58:ad:d3:05:af:f4:58:2d:9b:b5:bc:b3:7b:f2:d7:9d:54:
a5:88:39:91:58:9e:e7:28:41:58:4c:5f:66:f0:a0:46:61:da:
50:1d:cb:a1:df:30:4d:b2:c3:2a:02:de:50:a8:99:99:b7:cb:
0f:1e:ca:b0:e0:3e:78:31:51:37:8d:dc:d6:cd:1f:1c:be:de:
fe:c3:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:48 2026 by rpki-client