Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json)
Hash identifier: LRqRe07Mz0NLTA2Lw79cl32WLcFt0ai8IKDnKkSCmcw=
Subject key identifier: 39:14:48:B9:5A:38:23:99:83:5C:05:4D:2F:6F:99:BB:A9:33:61:A4
Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Certificate serial: 019D2A0477E3669310CD62E15E2EB9DCE8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
Manifest number: 02DE
Signing time: Thu 26 Mar 2026 12:00:28 +0000
Manifest this update: Thu 26 Mar 2026 12:00:28 +0000
Manifest next update: Fri 27 Mar 2026 12:00:28 +0000
Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: d3anW7re20r/IW7H8gmWirpT2NXiZhluZjoMUD4GWCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:77:e3:66:93:10:cd:62:e1:5e:2e:b9:dc:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Validity
Not Before: Mar 26 12:00:28 2026 GMT
Not After : Mar 27 12:00:28 2026 GMT
Subject: CN=391448b95a382399835c054d2f6f99bba93361a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:c6:a6:3d:f8:d8:15:32:4c:a8:77:f8:02:
98:7c:8c:07:fc:4a:d0:7e:0f:a7:b5:c5:a4:10:ec:
ce:58:30:f2:43:60:7b:a2:cc:e1:f2:04:9c:05:99:
67:62:5d:7a:c0:6c:f9:c0:50:02:49:c4:c9:e3:e3:
c0:b3:b8:42:47:d0:f4:e4:ec:6a:5a:c1:4b:3d:96:
5b:e7:44:f6:01:00:3d:67:6e:38:2b:9c:91:e2:41:
5c:c9:fd:2b:50:5d:6c:b9:9c:85:fd:6d:c3:e2:ef:
16:ac:89:0b:61:d9:c1:37:e4:56:f5:15:1b:75:54:
c8:9a:36:85:a9:25:62:1c:ce:ae:13:c4:75:8d:78:
53:ff:13:f6:59:50:21:14:73:58:5e:f9:90:b2:90:
73:9e:71:de:c0:5c:be:b3:40:ef:7d:20:7e:4c:53:
ad:ad:bc:23:9a:a4:a6:57:2d:cf:a8:5e:a4:56:44:
08:99:6d:45:c9:98:de:94:b5:1b:31:0f:a2:7b:f6:
cb:08:66:04:05:ab:5d:e6:62:9a:9e:29:83:82:08:
e9:01:73:2f:0c:62:dc:65:0e:c3:05:bd:a5:78:7d:
5e:2e:b3:65:58:fe:c6:18:0f:0e:e3:0b:f2:fc:64:
23:28:79:86:f0:c5:85:e6:90:6f:ab:6e:7d:5e:59:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:48:B9:5A:38:23:99:83:5C:05:4D:2F:6F:99:BB:A9:33:61:A4
X509v3 Authority Key Identifier:
keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f2:f1:7c:4e:6b:09:b6:0d:67:3b:f1:f4:dd:c1:b8:04:c5:
57:48:d0:a3:23:77:65:2d:88:c9:43:a4:cd:5a:52:a1:5e:f6:
8a:86:a8:3b:48:52:a7:7d:0d:54:b9:b5:08:c3:e9:7e:e3:2c:
9e:c7:14:d2:bb:cb:b6:0f:65:d7:4a:8f:3f:88:fe:97:97:75:
9e:e3:90:e1:a9:e6:80:92:e7:aa:a8:e7:67:0b:c9:cc:24:f9:
0b:ea:0d:9d:7d:b0:a9:7d:bd:1f:7e:12:a2:d4:7b:02:df:1d:
95:e3:9b:c3:e2:c6:ea:0c:82:05:8a:5d:e5:7f:8e:cf:c5:27:
ca:9b:bd:cb:7b:08:06:ff:1a:3b:01:e7:11:ec:5d:23:4d:98:
78:72:bc:5f:68:da:d0:18:82:4c:ee:52:20:da:60:23:e2:6c:
90:1a:2b:37:ba:3b:e0:8e:01:b8:96:b0:aa:b8:c1:7f:78:65:
75:10:6b:a2:e3:60:3b:19:25:38:a1:1f:c9:af:a1:79:60:02:
1b:0a:fb:62:a0:73:8f:ef:5e:0e:ef:b4:59:be:d7:66:64:6f:
3c:f0:da:97:c7:a7:70:89:8e:18:d0:02:5d:91:73:9b:31:3a:
d7:bd:a7:b9:14:54:b1:03:a3:c7:fb:1f:50:74:a2:98:9a:d0:
de:0b:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:46 2026 by rpki-client