Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json)
Hash identifier: VFF4ddzkYS32P6fkvo/Fg2iWKvwWO3dFJYnk4G+qSFI=
Subject key identifier: 55:5A:A6:04:6C:8C:43:00:83:3F:1F:1D:B9:E3:87:22:22:0C:57:B0
Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511
Certificate serial: 019D2A04AAA96A0536DB06AD31174C1C0A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
Manifest number: 0397
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: +FEp4YDZodT0taEHP1qo7Sf+4cw2lrCHfxlg1m+QsG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:aa:a9:6a:05:36:db:06:ad:31:17:4c:1c:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=555aa6046c8c4300833f1f1db9e38722220c57b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:b5:57:14:dc:5a:f0:a2:11:24:69:f5:62:
10:e6:47:ac:47:2f:71:61:a2:c6:d9:de:e9:ab:c3:
37:40:0b:6e:16:86:6d:11:09:dd:43:3a:f8:b6:0b:
ac:dc:40:48:8d:b0:92:d2:b9:c8:76:de:b2:af:4d:
98:01:38:1e:45:00:a8:b8:e4:fa:ee:00:48:95:49:
13:82:67:66:e1:f7:f4:d8:2b:c9:7c:c8:07:f5:3f:
0e:59:e8:ee:69:bb:42:04:c0:e2:a3:19:86:a8:c1:
65:37:cc:b0:78:70:5b:06:7a:6d:47:b8:93:67:72:
80:b1:69:d2:db:69:6d:c6:d4:bb:9d:92:ea:21:e0:
94:e3:5f:ff:d7:b4:b0:1e:86:26:a8:9d:b0:0a:b5:
2f:f6:e0:61:80:fc:e5:95:07:b9:0d:85:9f:26:83:
66:04:0a:0d:dd:3c:61:4d:b4:61:c0:50:e8:77:80:
5d:87:dc:7c:88:2f:1a:d5:88:75:24:cd:7b:ad:a7:
28:46:21:ac:0a:0c:e4:10:87:76:97:35:a7:f2:d7:
37:de:ee:ea:36:57:24:39:79:39:a0:13:c9:1a:f5:
d5:b1:83:dc:ce:9d:c4:96:9f:4e:16:58:a3:ac:c6:
d5:18:23:ec:6e:88:9d:14:32:3e:57:89:26:53:e5:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:A6:04:6C:8C:43:00:83:3F:1F:1D:B9:E3:87:22:22:0C:57:B0
X509v3 Authority Key Identifier:
keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:61:3d:ae:a2:97:7b:26:c4:63:11:41:b3:07:ce:b2:93:
1a:e3:ff:c6:69:94:76:db:ce:82:dd:40:12:c9:5b:d3:cc:0a:
5e:b2:2f:ae:dc:c9:99:bc:64:61:17:f5:86:b3:64:52:d6:b3:
15:78:4d:4c:88:af:07:c0:4d:03:92:44:a8:ab:17:3e:f1:b3:
70:5e:60:a5:7c:d1:94:59:fd:70:bf:37:a1:57:b6:90:e6:3b:
16:44:a0:e7:a0:da:ca:c5:7e:44:46:30:98:ea:8d:89:cc:9c:
6b:6e:e1:cb:bb:b1:56:13:d2:62:46:a9:ca:f2:a2:79:3d:76:
f9:e9:55:f1:77:9a:69:90:76:6a:e2:3f:7d:ed:06:75:71:8e:
de:ac:5c:85:9b:a0:5a:9f:22:bc:07:98:2c:0d:5d:a1:91:91:
d4:c5:55:bf:24:57:b2:a4:85:a6:c3:4f:c3:3f:a5:fd:87:8a:
41:3f:21:7c:35:ad:69:d3:e2:cb:f7:bf:bc:b2:ac:7b:6a:67:
48:06:63:73:7d:f2:ab:36:88:77:e6:fe:ef:09:00:2c:3c:40:
50:c8:17:91:a1:8a:f2:68:97:62:35:09:24:79:ef:46:f3:e1:
c6:1b:13:61:0b:ae:1d:ae:a1:f5:d1:fd:ca:c1:6b:74:db:59:
0e:a2:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:30 2026 by rpki-client