Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.mft
File: yd8LG2yhi_s1FedhDgfZhASvL2c.mft (raw, json)
Hash identifier: oJvIY3fpwwrt6kTHjKYYo7DWVlnwdm/Hijsj0RJvvqA=
Subject key identifier: 70:89:DB:56:FD:92:72:BD:D0:8F:66:80:92:17:B1:46:B9:53:10:18
Authority key identifier: C9:DF:0B:1B:6C:A1:8B:FB:35:15:E7:61:0E:07:D9:84:04:AF:2F:67
Certificate issuer: /CN=c9df0b1b6ca18bfb3515e7610e07d98404af2f67
Certificate serial: 019D322C0059614289D5C3317112B97791EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd8LG2yhi_s1FedhDgfZhASvL2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.mft
Manifest number: 0108
Signing time: Sat 28 Mar 2026 02:00:37 +0000
Manifest this update: Sat 28 Mar 2026 02:00:37 +0000
Manifest next update: Sun 29 Mar 2026 02:00:37 +0000
Files and hashes: 1: yd8LG2yhi_s1FedhDgfZhASvL2c.crl (hash: fO7ijKmozaOoHdC5NOYjRtiofY9uQ0GtGOASLIbfJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd8LG2yhi_s1FedhDgfZhASvL2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:00:59:61:42:89:d5:c3:31:71:12:b9:77:91:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9df0b1b6ca18bfb3515e7610e07d98404af2f67
Validity
Not Before: Mar 28 02:00:37 2026 GMT
Not After : Mar 29 02:00:37 2026 GMT
Subject: CN=7089db56fd9272bdd08f66809217b146b9531018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:b8:be:eb:a2:0e:c6:f3:54:fc:6f:c6:7a:
f0:f7:c2:ac:10:fa:b3:aa:68:0e:fc:99:c4:71:14:
c9:01:87:16:14:ea:e6:d2:7b:ea:ca:f6:50:6a:02:
56:9f:fe:9f:bd:9b:27:26:95:93:40:20:d7:cb:1a:
f8:67:13:64:40:12:9d:32:b8:a5:5f:40:d9:c1:56:
79:a4:16:d3:1c:91:7c:5f:62:2c:23:c4:3d:7e:1a:
04:fd:06:53:cb:10:95:89:c1:8f:b2:d2:cb:e1:3d:
67:e2:01:30:d5:bc:fa:43:3e:db:dd:60:0b:8c:f7:
5e:54:65:56:5f:13:65:2d:8d:6f:63:60:51:05:b2:
07:26:ce:a0:4c:d6:89:3d:47:3a:02:7a:3a:f3:48:
2a:97:a8:89:5e:c2:23:a8:14:ab:2a:51:9a:7a:4f:
2d:e5:67:41:8e:63:ef:a3:8f:66:b9:f0:cd:99:b0:
3e:09:ab:e7:1d:61:47:ef:34:51:d0:63:e7:e9:54:
55:a4:23:9b:d3:45:d6:07:e3:b9:c4:d2:a6:c5:89:
dd:7a:18:cc:84:9d:75:b2:5b:99:2e:21:f7:d5:89:
ed:5b:1c:0b:d8:15:5b:00:8b:1b:ce:36:71:97:6a:
c1:13:2e:eb:94:5e:41:67:db:36:34:e9:03:46:5c:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:DB:56:FD:92:72:BD:D0:8F:66:80:92:17:B1:46:B9:53:10:18
X509v3 Authority Key Identifier:
keyid:C9:DF:0B:1B:6C:A1:8B:FB:35:15:E7:61:0E:07:D9:84:04:AF:2F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd8LG2yhi_s1FedhDgfZhASvL2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4485b8-3976-4282-8b6a-47c0f54032b8/1/yd8LG2yhi_s1FedhDgfZhASvL2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2a:9b:ef:f7:b3:9b:0a:fd:c7:b6:62:5d:27:01:ad:9c:08:
0a:85:9e:4f:ab:ad:8c:67:e1:14:33:ac:68:91:b0:96:83:91:
5e:25:bf:9f:79:00:f3:44:f9:29:e8:bd:4c:9d:f1:fd:f8:79:
b6:05:03:20:6e:94:79:f8:fc:31:20:43:92:ea:83:15:9b:65:
a4:b8:a3:3e:1d:79:ba:a8:fe:a4:41:e0:a7:da:8f:44:f2:26:
36:d6:ee:c4:8b:94:17:0c:78:e5:16:de:92:f7:f6:c4:0a:6b:
60:2e:0b:da:77:25:19:33:63:5e:4d:4f:fb:83:bb:3f:5c:42:
6b:96:c9:43:44:dc:36:8b:f0:ef:56:b1:6b:0c:d1:af:aa:89:
87:e5:b8:a5:14:5a:34:8e:11:b5:62:a0:b2:d2:4c:32:41:e8:
ad:e2:28:01:00:00:1f:96:16:ae:a2:4b:5b:02:21:91:45:05:
f8:53:b0:fe:85:d9:23:1c:d9:ed:8d:db:5e:6b:15:8f:98:a7:
4a:81:f4:87:f0:80:3a:e1:89:ee:e7:21:fc:51:da:51:9d:be:
e6:70:d0:41:26:ec:49:93:96:27:9a:2a:d9:26:f7:02:ad:9c:
25:64:1c:79:8a:44:3a:b1:42:55:c6:91:3e:d6:f5:97:1e:50:
95:fe:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:39:57 2026 by rpki-client