Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier: Iu9N+YCSXwOsym1VSApHguP9Po+pZS1oF358BQTIX3M=
Subject key identifier: A5:16:D3:ED:60:52:C0:CA:3D:BA:3A:9E:2A:23:0F:8C:6A:B0:8C:B7
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial: 019D28F2BDCB617D260BB93EC5569D3EC7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number: 090F
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: xvrAQLMU+dzAoxUetsNdI21XPFujw1zSsH+HfvnK1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bd:cb:61:7d:26:0b:b9:3e:c5:56:9d:3e:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=a516d3ed6052c0ca3dba3a9e2a230f8c6ab08cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:de:37:95:bf:25:57:3c:52:11:5e:5f:69:
96:ec:df:63:83:80:b5:7b:f4:e6:51:02:10:38:af:
14:ec:59:55:4f:b8:d1:c6:2f:e9:41:55:fd:bd:26:
07:52:cc:12:7d:b2:dd:6f:2f:1d:a7:36:fd:3e:71:
4f:46:df:3f:53:75:68:ed:67:61:75:a7:e6:e2:6f:
f2:4b:72:9f:16:b3:c4:78:98:0d:f9:76:c8:10:65:
f6:33:9d:a3:b3:71:8a:6b:ef:3b:3d:93:ce:29:f9:
40:ac:aa:e4:60:12:a8:e7:46:20:6c:3d:f4:93:a3:
98:fc:8c:aa:29:0b:13:f4:4e:22:5f:f8:e8:e0:5e:
82:a5:4b:8d:27:75:de:09:a1:71:5d:24:b3:66:64:
e2:b4:b8:ba:5f:c9:62:02:e3:ad:88:09:d0:ca:80:
8b:fa:5a:d2:94:b0:a8:71:28:98:d3:e0:13:a6:aa:
49:61:a1:67:da:ec:12:cb:57:e2:da:a4:5e:8a:7c:
24:eb:87:46:13:34:84:ab:f2:0d:42:14:53:4e:2f:
e2:1e:44:5d:d4:18:26:6a:6c:44:54:b9:2e:20:3a:
36:47:c4:07:d9:30:b8:d3:fa:21:02:93:de:36:9f:
39:87:6e:cb:9c:6d:68:43:c7:68:7c:bf:b2:3c:a4:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:D3:ED:60:52:C0:CA:3D:BA:3A:9E:2A:23:0F:8C:6A:B0:8C:B7
X509v3 Authority Key Identifier:
keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b0:7b:52:22:21:81:0c:cd:f4:76:b5:1f:2c:84:58:29:30:
72:07:26:79:7d:95:d2:79:74:cb:70:ab:5b:38:b6:51:41:be:
3c:ca:de:2b:78:1c:bf:21:54:f8:b4:2e:fb:f5:6b:6c:1f:36:
09:6b:f6:4a:57:ff:9a:7a:1d:3c:3b:1f:6a:49:fb:99:58:ad:
1c:29:22:bc:0d:83:71:c1:fc:cf:42:1d:3f:dc:19:f0:60:48:
10:66:78:67:73:58:60:7d:3c:dc:40:b0:87:64:2b:24:8c:92:
73:97:54:bb:7b:e3:ff:b8:06:fc:3b:35:e5:6c:c2:ca:ef:e5:
ac:c3:52:3e:f3:77:2a:6d:87:f1:a6:03:77:a3:e4:41:28:9b:
b7:b0:a5:3d:bf:96:12:67:96:e1:d6:30:9d:47:78:fa:72:96:
d1:0a:27:2f:a4:27:71:82:56:84:e7:b6:53:65:f2:c2:13:0a:
8e:98:c3:82:16:a5:ec:63:fc:1d:f4:f5:11:78:5d:9f:24:27:
1c:e4:8b:28:ec:23:64:4f:c0:fb:a8:1d:91:b8:42:2b:66:94:
84:e7:f6:10:2f:f8:0f:69:58:75:da:c0:a0:41:e3:f3:4a:4e:
67:45:7c:b1:6f:21:2d:cf:df:eb:cf:2c:b4:21:1d:7a:f0:02:
8e:c1:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:07 2026 by rpki-client