Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: P3i+5dJuyRggVGtIBNmouefbKPR2oL3woEarhX4Klwg=
Subject key identifier: 2F:51:B5:30:3D:A4:BD:80:FF:5F:96:DA:6D:59:E9:7D:C5:4F:0A:78
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 019D25F1748C2C592F15898053CD8C33D019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 086E
Signing time: Wed 25 Mar 2026 17:01:14 +0000
Manifest this update: Wed 25 Mar 2026 17:01:14 +0000
Manifest next update: Thu 26 Mar 2026 17:01:14 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: WKR6vSkm7wxrBbINyx1NepIoN/98jnrOhyH7bBiMGHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:74:8c:2c:59:2f:15:89:80:53:cd:8c:33:d0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Mar 25 17:01:14 2026 GMT
Not After : Mar 26 17:01:14 2026 GMT
Subject: CN=2f51b5303da4bd80ff5f96da6d59e97dc54f0a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:e6:ce:6c:4c:0b:fe:2f:a0:08:01:0a:25:
99:7f:0f:1a:98:a9:66:be:48:8a:bb:d2:fa:ea:cc:
33:9e:2d:67:45:3a:81:45:e1:b6:a0:fc:e1:18:9c:
7e:1a:21:10:79:11:57:0e:b7:4a:79:11:4f:2c:4b:
2e:e6:b8:52:e5:81:bc:08:86:58:c2:bc:e9:90:c9:
3f:7f:fe:26:73:c4:fb:87:5a:c1:7d:70:8c:89:1b:
d8:be:27:28:de:f6:e8:24:12:a4:9e:46:09:4f:be:
7c:f4:bc:3b:aa:b3:b9:e7:7e:bb:aa:75:d1:f2:d3:
c2:2c:b7:8c:3a:c7:83:d2:be:75:8e:13:38:9d:fa:
2c:cc:c1:56:f2:c6:bc:99:ad:98:85:2b:dd:65:46:
be:b6:f6:f0:14:e2:20:ae:f7:61:1e:7c:c1:88:16:
19:47:cf:cc:a6:18:8b:09:a2:50:b7:d2:81:2e:cb:
56:81:90:8a:b7:74:2e:1d:32:a9:4a:1b:01:c4:d9:
c2:b6:c9:87:c1:0e:39:b1:df:95:fc:46:41:00:f3:
55:69:96:e5:95:14:84:32:69:3c:b3:ba:d9:8a:90:
0b:cf:11:7b:4c:c7:28:ac:ad:76:2f:55:8d:a4:49:
83:98:05:9a:ae:26:39:c0:b4:ce:e8:5a:8b:e3:44:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:B5:30:3D:A4:BD:80:FF:5F:96:DA:6D:59:E9:7D:C5:4F:0A:78
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:8e:17:36:af:2b:73:81:6d:6a:57:f0:be:ab:84:59:65:
22:89:56:d4:75:a1:f3:12:7c:ba:f2:0c:27:49:53:66:74:1e:
56:69:21:e2:77:49:bc:e4:1e:4b:ec:08:a6:e4:df:ad:60:15:
f4:43:f6:10:f5:b9:7c:84:82:3d:d9:62:95:b1:b6:22:b2:2b:
be:10:58:d9:5e:77:64:5e:be:1e:77:09:38:b1:b5:dc:5a:1e:
0b:8b:c0:19:0c:cb:6f:01:5f:a9:96:79:4d:13:09:aa:be:3d:
0c:68:8a:21:65:70:9d:95:8e:e7:d3:ec:35:d9:8b:3c:b7:5b:
29:5e:69:ba:e0:9c:d2:86:70:ef:fd:9c:ee:18:2e:d9:4c:09:
02:0f:05:7b:a8:aa:7c:9d:aa:a8:bb:16:26:9c:13:e9:23:71:
a0:25:d2:33:87:d5:c1:14:25:d5:32:be:e6:1a:31:47:7a:8e:
69:6a:79:dc:7b:bb:6c:8f:51:b0:52:82:35:84:fe:17:9d:a0:
8f:4e:d5:b4:b0:6b:e7:fc:f6:52:9a:63:a0:39:d3:0e:75:54:
c4:bf:6a:ca:bf:13:74:88:cb:17:06:43:1d:39:70:53:32:b5:
91:4a:14:b4:67:8b:19:e9:bf:38:b8:0c:d7:a2:2f:21:a6:b6:
c6:d3:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:04 2026 by rpki-client