Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier: QeuytkqyKxFW0x2IzJHEHs6CNbZEufZDyrPag3cut48=
Subject key identifier: 0B:F7:45:82:5A:BA:7E:6A:8C:97:46:E9:6A:62:F0:FB:2B:DB:CB:7F
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial: 019D27A8E1B3D348B7F705FB40BBA2C1471D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number: 0F7A
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: 2mXGzyYgSU7lyahLmpYjs7083iiyc96xxaYXuBZfjwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:b3:d3:48:b7:f7:05:fb:40:bb:a2:c1:47:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=0bf745825aba7e6a8c9746e96a62f0fb2bdbcb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:a2:78:41:fc:e2:61:1e:a0:7b:05:c8:b5:
d1:b3:9b:05:2a:d7:c5:97:f5:a0:33:a0:d7:ab:75:
88:e8:c3:27:69:28:53:df:d9:c5:24:55:c5:e7:ee:
5c:21:32:29:2a:90:d3:10:c4:c3:66:c3:28:82:f7:
bb:f2:ae:2b:f8:e0:80:ea:6b:73:bc:5a:66:08:63:
fa:83:3b:10:bb:52:35:ca:73:bd:44:4f:d0:09:b9:
da:99:5c:fc:6e:f9:cd:11:f5:26:6a:2c:bb:9d:80:
07:10:57:5e:10:50:b5:7a:a4:5c:b0:89:9e:18:d0:
e1:c9:b9:51:fb:19:49:8b:e4:b8:3c:87:78:1a:76:
9d:73:1e:2c:2d:f2:5c:3f:c0:76:48:26:86:38:1d:
64:02:32:23:52:a5:e9:f1:75:f3:88:02:4f:3d:ee:
55:a7:cb:34:fb:84:f9:8b:dd:69:69:40:3f:87:04:
b7:d1:23:7a:80:10:0e:72:06:cf:e7:9b:0d:5f:7a:
0b:0f:81:58:c2:19:94:36:c1:21:c4:85:47:f6:27:
c9:2a:68:44:0f:e0:cf:57:78:e1:9a:df:fb:b1:95:
2b:fb:ef:b8:3a:dc:bb:b6:7a:9a:6f:7f:5d:e3:cf:
4e:07:db:16:77:b0:20:18:eb:4f:c6:00:55:53:7a:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:45:82:5A:BA:7E:6A:8C:97:46:E9:6A:62:F0:FB:2B:DB:CB:7F
X509v3 Authority Key Identifier:
keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:06:72:f5:6b:7d:01:d2:90:f2:17:73:f4:8e:4e:38:ad:7a:
3a:fb:da:c6:79:70:c0:3e:e8:8a:e6:36:4d:be:ed:4a:12:78:
5b:08:d9:ab:b1:33:ec:93:bc:10:39:0a:ab:32:b0:77:18:d9:
27:cf:33:c1:fd:93:db:63:7f:9d:d7:dd:c9:25:6a:27:e9:f0:
38:15:8f:0a:70:46:10:bb:97:13:7d:2e:fe:19:28:c3:4c:98:
05:5b:d1:d3:bc:34:82:bf:fa:3b:4a:e1:91:0e:68:80:69:10:
32:cb:c8:22:06:3e:05:2b:28:52:61:ec:14:c7:2a:81:64:b0:
dd:b2:9c:ab:dc:8d:36:61:22:6a:03:54:94:c1:f7:cc:8b:bf:
58:59:a7:2b:94:ba:91:3e:ea:0e:58:a8:13:9e:a4:c5:d5:1b:
01:41:cd:50:56:98:e3:f9:a7:37:6a:59:8d:a7:5f:de:3e:7d:
4d:a8:03:27:de:90:c5:34:62:2f:9e:2d:a2:b1:59:b7:c5:7b:
35:64:59:d3:3c:ba:74:2b:f8:c0:d1:0b:38:9c:4d:11:51:f8:
61:f5:bf:f9:61:e1:49:1a:3b:cb:31:ed:2e:1d:27:69:eb:f7:
21:00:8f:9e:f6:e0:e3:be:91:e5:a2:c9:0c:a3:e9:6f:a0:84:
2e:bc:2f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOGz00i39wX7QLuiwUcdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MGE3ZThlYzQ3Y2FkZDg2NTM3MmRlNTAzZjg3OTBlZjYy
YzcxNDEwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
EygwYmY3NDU4MjVhYmE3ZTZhOGM5NzQ2ZTk2YTYyZjBmYjJiZGJjYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxCieEH84mEeoHsFyLXRs5sFKtfF
l/WgM6DXq3WI6MMnaShT39nFJFXF5+5cITIpKpDTEMTDZsMogve78q4r+OCA6mtz
vFpmCGP6gzsQu1I1ynO9RE/QCbnamVz8bvnNEfUmaiy7nYAHEFdeEFC1eqRcsIme
GNDhyblR+xlJi+S4PId4Gnadcx4sLfJcP8B2SCaGOB1kAjIjUqXp8XXziAJPPe5V
p8s0+4T5i91paUA/hwS30SN6gBAOcgbP55sNX3oLD4FYwhmUNsEhxIVH9ifJKmhE
D+DPV3jhmt/7sZUr+++4Oty7tnqab39d489OB9sWd7AgGOtPxgBVU3pwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv3RYJaun5qjJdG6Wpi8Psr28t/MB8GA1UdIwQY
MBaAFMgKfo7EfK3YZTct5QP4eQ72LHFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYt
ZTEyZmFiMTg1NTQwLzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYtZTEyZmFiMTg1NTQw
LzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgZy9Wt9
AdKQ8hdz9I5OOK16OvvaxnlwwD7oiuY2Tb7tShJ4WwjZq7Ez7JO8EDkKqzKwdxjZ
J88zwf2T22N/ndfdySVqJ+nwOBWPCnBGELuXE30u/hkow0yYBVvR07w0gr/6O0rh
kQ5ogGkQMsvIIgY+BSsoUmHsFMcqgWSw3bKcq9yNNmEiagNUlMH3zIu/WFmnK5S6
kT7qDlioE56kxdUbAUHNUFaY4/mnN2pZjadf3j59TagDJ96QxTRiL54torFZt8V7
NWRZ0zy6dCv4wNELOJxNEVH4YfW/+WHhSRo7yzHtLh0naev3IQCPnvbg476R5aLJ
DKPpb6CELrwvKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:12 2026 by rpki-client