Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: CjKRImjmVaEmx1NJLfojUdknjTbtKaBiBiaOnUb0yIM=
Subject key identifier: 06:C8:95:46:3B:43:54:AD:32:22:6F:65:26:21:8F:23:11:78:57:60
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 019D33087EB3848F7DE8E06AC2EDF8AC4D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 06:01:27 +0000
Manifest this update: Sat 28 Mar 2026 06:01:27 +0000
Manifest next update: Sun 29 Mar 2026 06:01:27 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: le5R3OKMbF+TBWJDpOpqr4vBP6hOMYp5Kl5/ppQj3L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:7e:b3:84:8f:7d:e8:e0:6a:c2:ed:f8:ac:4d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Mar 28 06:01:27 2026 GMT
Not After : Mar 29 06:01:27 2026 GMT
Subject: CN=06c895463b4354ad32226f6526218f2311785760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:f6:fe:1f:1e:c4:28:5e:26:a3:77:2f:23:
83:e8:a9:59:e4:9a:b1:57:1b:32:da:16:cb:c1:29:
b2:6b:d0:f4:ad:00:84:41:60:c6:f1:26:ad:88:7d:
7e:5b:aa:7f:93:40:d9:f6:77:97:f5:18:9a:3d:70:
5d:d3:3d:a4:09:dd:15:a4:13:2e:19:f4:8e:6e:b9:
4f:3a:88:0c:1e:16:a6:bc:21:6a:72:93:2f:51:3d:
3c:90:11:ba:d6:12:77:43:7f:68:62:2c:39:56:85:
5f:d8:2f:ee:ad:03:28:a0:c4:60:46:f2:96:15:0a:
00:e9:f0:8d:e1:e9:13:e9:de:eb:c6:c4:0e:3e:3f:
2d:02:47:fd:b0:af:2e:04:1a:49:28:07:e4:a0:1a:
8f:dd:95:44:44:eb:ea:22:cd:7c:8f:69:53:3f:e2:
0c:37:c0:79:6b:54:99:09:c6:6a:a0:31:66:dd:4b:
d6:52:c2:03:d1:ca:48:9e:16:58:5c:09:eb:de:d6:
3f:25:be:52:07:ba:b5:b2:e2:0d:a9:af:0b:2d:82:
fc:90:6d:3d:b1:f4:49:16:41:6a:2a:75:5a:16:53:
8b:00:9b:ba:6a:07:c0:ea:cf:a1:6d:4e:52:13:51:
39:fe:62:47:cc:e7:f5:93:e9:3f:97:3a:37:6e:69:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:95:46:3B:43:54:AD:32:22:6F:65:26:21:8F:23:11:78:57:60
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0d:56:14:3b:2e:ad:93:44:ce:d2:ee:b6:b9:17:7b:39:b0:
6b:66:99:8b:1d:bd:b2:dd:81:d1:7a:3d:37:cb:e2:0c:26:cf:
c3:e8:ef:55:86:bd:a4:99:14:b1:fa:e1:78:64:a4:6c:7e:dd:
24:f1:3b:9c:02:6a:89:d9:14:18:8d:d8:f0:fc:7b:8f:e4:95:
f2:ea:cf:88:c4:85:24:0b:fe:7f:0a:4d:c4:60:1d:ac:46:7a:
f7:65:79:5a:2e:ee:3c:32:20:f4:7f:f5:28:ea:0c:4f:0a:de:
c1:02:8a:ed:52:2a:1b:12:38:ed:37:76:cc:bb:a2:fc:16:f9:
fc:80:75:d7:da:61:50:f2:13:02:13:ce:93:32:20:01:ff:91:
c9:f8:90:1a:70:9d:43:57:2a:63:da:4c:e2:dc:94:c6:b7:d1:
4e:7b:83:3d:8e:f1:e2:59:c1:81:b5:91:8c:67:f1:85:29:d1:
4c:80:86:9f:ee:03:0c:e6:11:b2:4c:f5:ff:e5:90:ab:48:c0:
8c:f5:3d:f8:48:24:4d:70:1a:5a:7f:c9:dd:cf:b2:3f:99:ac:
4e:bb:ab:f6:78:2a:e5:75:33:22:53:c2:89:0a:68:6e:96:ca:
18:66:df:c0:fd:de:2b:15:d2:3e:c8:df:95:77:bf:c0:14:fd:
82:08:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:04 2026 by rpki-client