Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: edPcQQVph+ouY4LaAxkCML08hSFVUceqIb7BAVkSbzU=
Subject key identifier: 28:69:3C:37:FC:41:38:84:B5:06:AE:B4:69:80:F9:C0:0F:CD:9A:D3
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 019D2704049E9D9900B9632B33C0B402A7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: YNlUoc4mABPvMWq8ishuVUbe3kMa8XKay0BMIyDG43w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:04:9e:9d:99:00:b9:63:2b:33:c0:b4:02:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=28693c37fc413884b506aeb46980f9c00fcd9ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:e7:f0:11:d1:a6:e6:e2:00:00:29:f3:43:
a2:18:9a:11:69:3d:f0:ed:d4:e2:52:b3:6b:86:24:
8a:97:1b:af:17:b8:b8:91:d9:df:81:ff:6b:ac:e6:
4e:84:c7:7d:f4:2f:c9:c1:82:dd:d4:83:9d:68:71:
2d:8f:91:68:47:ae:09:44:5e:c1:7d:a0:53:4a:42:
c2:58:80:7e:b7:fd:c9:41:e1:ba:00:50:33:c3:f3:
9a:91:4a:75:2c:6d:a8:01:8a:32:8b:80:3b:3a:f6:
47:a2:63:03:f4:96:aa:18:84:5e:55:ef:55:c6:cf:
99:4d:a0:61:54:e6:c6:c0:85:3b:10:3f:ce:09:91:
04:51:1a:21:9e:b1:a7:d2:1c:09:2e:71:62:8c:f2:
33:1d:60:46:d6:b8:1c:50:f0:aa:5b:b2:a4:6e:77:
dd:57:13:12:90:31:35:c7:b4:0d:6c:60:6d:0f:3e:
a3:e6:59:ee:6c:4b:73:e9:7f:4a:a1:d8:80:2e:f6:
9f:48:e3:fa:c7:38:9f:66:ce:75:de:e7:54:ce:c9:
8e:6b:21:48:18:fa:8a:af:ec:de:f5:12:25:90:26:
03:ac:e1:7e:83:b3:43:55:84:36:32:db:a5:e8:74:
a9:85:29:36:b5:be:d3:a2:93:51:67:74:51:cb:3a:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:3C:37:FC:41:38:84:B5:06:AE:B4:69:80:F9:C0:0F:CD:9A:D3
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:96:b1:91:4e:0d:5d:ea:2d:5d:28:cb:a7:2c:af:a6:ee:4f:
b9:de:91:ae:e2:f8:c6:41:03:18:5b:cb:f0:60:1d:cd:3c:a2:
e6:46:14:93:90:fc:53:2d:88:c8:89:fe:08:3f:03:f9:50:5f:
27:4d:12:7a:8e:bc:63:bf:03:74:d9:75:70:41:f7:f8:f8:17:
31:19:a1:87:f7:2d:48:12:fd:6e:f9:2e:8c:dc:f5:61:ff:38:
eb:bf:3b:9a:a5:f2:c8:95:54:0a:19:ab:05:64:59:22:8a:fb:
00:33:1a:27:1f:42:26:11:53:20:7c:3c:b9:4f:ac:25:fa:c5:
26:fd:99:2d:81:9c:1b:7e:35:8b:62:3a:e6:b0:c6:73:de:f4:
23:af:a5:1b:ae:c0:18:d0:52:12:e5:b5:41:f3:f8:37:cf:2b:
63:cf:79:3a:d1:25:7f:ee:95:1c:87:81:15:3c:b5:ce:a0:ee:
b1:20:de:22:2c:94:49:3d:f5:80:6a:b9:e6:93:c0:39:25:34:
13:35:b6:c6:36:dc:59:d8:9d:ed:69:34:a4:0a:3d:1d:c9:f0:
4e:bf:3a:78:35:14:f5:89:f0:e3:ff:3f:64:66:65:38:c8:87:
13:c9:12:8c:06:fb:22:63:7a:35:50:55:f6:df:1b:98:44:9c:
ca:87:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:59 2026 by rpki-client