Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: rEdiUiZH7oxcPSL/MXkgBcX7NfaUzojCsGUAiuqpVp8=
Subject key identifier: 95:10:45:8A:0B:AB:3C:01:D7:60:74:A0:BD:0F:89:24:75:19:A6:F8
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 019D27044DB6FB2EF33249C8D5850F8BF20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 0C4B
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: jnAqywKUKDg8FdeYQXk5q7153lxqBvUfXQhh+41qtNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4d:b6:fb:2e:f3:32:49:c8:d5:85:0f:8b:f2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=9510458a0bab3c01d76074a0bd0f89247519a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:e7:31:c3:da:10:ee:b7:06:fe:5f:53:9e:
54:63:d2:da:1e:11:38:06:3a:7d:c0:1b:7e:b2:b7:
a4:d6:10:05:d9:b9:3a:82:b5:2a:ba:94:b4:0c:86:
be:57:1a:97:d6:20:9d:56:b5:de:8a:ab:dc:3f:17:
ca:c2:3d:7e:2a:26:41:57:0e:b9:6d:12:43:1f:8d:
51:db:cf:46:fb:04:de:00:10:c9:37:c1:33:b4:75:
e6:c0:61:80:ba:12:9c:09:79:ba:06:cb:22:64:5c:
28:25:28:28:3b:fd:21:5a:b8:b3:23:ee:c3:c4:4c:
f2:56:bc:f8:4e:7c:32:1e:36:eb:dc:c5:e3:f1:4d:
82:3f:d2:95:a6:d4:e9:cd:a0:ca:c1:2b:cc:b1:af:
fb:25:b5:08:3d:df:d3:8f:8d:24:7e:c9:c7:1d:fa:
93:10:bd:0c:0c:a8:ef:9a:7f:c5:8c:77:01:47:83:
95:b6:37:0c:93:f3:41:31:b0:9f:b4:50:2f:99:78:
d1:1f:cb:c6:04:ee:1d:47:2f:ac:4d:6e:9b:92:7c:
59:70:42:0b:df:e5:57:65:b4:2b:33:79:fc:61:fc:
59:7a:7f:ea:81:c4:53:0c:d9:bb:97:e7:a1:0c:65:
9f:9b:4b:e3:3d:17:cf:9a:b4:e6:d0:a2:2b:88:d9:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:45:8A:0B:AB:3C:01:D7:60:74:A0:BD:0F:89:24:75:19:A6:F8
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:90:47:8e:e8:59:4f:74:fb:22:65:d9:50:dd:0d:f1:fa:b3:
9f:5c:8f:51:7b:e2:2c:d9:f1:cc:4e:1f:45:86:cf:78:a6:6f:
38:49:0a:5a:9e:d5:1e:bf:bc:4e:88:c8:64:1d:44:ad:22:2d:
08:24:0e:80:12:03:44:c3:34:e8:8d:40:01:82:51:0c:83:59:
da:69:fa:21:22:42:7a:8f:74:ba:56:da:20:2f:c2:45:de:6a:
20:9f:18:bd:4f:20:ca:26:e3:26:37:3a:b4:94:db:1d:24:d7:
e4:41:bf:b8:7d:9c:32:e5:bc:ae:69:5e:a4:e0:dc:d1:32:18:
73:b1:79:70:2a:ee:a8:53:8e:b9:5e:01:88:e7:19:a1:25:e7:
43:86:a0:9c:93:53:ab:4d:11:86:a6:3a:36:9a:2c:df:07:bc:
e3:33:3c:fd:2c:40:0a:d7:fa:9a:39:80:fd:9f:6b:65:16:10:
86:ac:83:f3:69:8b:32:92:1a:62:cc:18:e5:22:66:7e:dd:02:
3a:31:b4:0a:f1:a3:53:07:a1:3f:d4:c9:18:a0:d1:5a:20:ac:
0b:81:e1:81:ae:84:0d:04:63:9e:ec:3f:e0:cf:6c:31:9a:97:
21:a6:48:18:dd:48:fa:c6:e0:9d:e3:bf:c8:c2:d0:e4:49:b9:
eb:8a:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:55 2026 by rpki-client