Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: fku0HCy3EKdycdI+HwTQon+5en+2XrgYaXWvTIL6cYo=
Subject key identifier: D8:AB:FE:51:E3:A1:3A:4B:BB:45:FE:A4:A0:68:84:21:18:CF:7F:69
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 019D2CCEE5E6B28183CB4AE3A0C61583D485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 1885
Signing time: Fri 27 Mar 2026 01:00:49 +0000
Manifest this update: Fri 27 Mar 2026 01:00:49 +0000
Manifest next update: Sat 28 Mar 2026 01:00:49 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: sbffjHee07NxhHUizEpEvCQ3CxZ5XUbH1DHh6LO5+5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:ce:e5:e6:b2:81:83:cb:4a:e3:a0:c6:15:83:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Mar 27 01:00:49 2026 GMT
Not After : Mar 28 01:00:49 2026 GMT
Subject: CN=d8abfe51e3a13a4bbb45fea4a068842118cf7f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:a0:57:16:09:f7:91:7c:72:2c:22:ea:53:
0e:b9:fc:d8:a0:46:03:7a:c7:e5:8a:84:9c:dd:9c:
1a:63:bc:6f:35:50:d4:bc:e3:db:2b:09:05:9d:c0:
a6:fa:d4:3a:f8:91:27:3b:33:de:74:47:a0:d9:21:
47:dc:ec:b6:c5:b5:62:a2:9c:e8:3a:c4:b3:4d:31:
02:93:1e:23:30:95:f6:92:f7:bf:cc:44:8e:c1:02:
5f:30:1a:65:5a:ad:15:81:62:ed:86:f5:e8:ec:2b:
20:92:da:7a:b6:67:0e:69:c9:1d:af:c0:8b:bb:5a:
05:41:02:55:82:2d:bf:74:5e:95:13:53:96:4e:6a:
18:9b:24:e7:2d:0a:0e:f1:2d:69:10:96:91:ea:8b:
10:c8:5b:98:7f:b1:f0:e9:91:e7:0c:b5:3d:07:51:
95:09:e7:8c:36:a1:dc:bb:d9:52:1c:0d:4f:5a:f6:
80:76:2e:ee:e1:5c:4b:09:4e:41:ef:3b:f0:31:ee:
0f:69:b0:d1:c5:af:d4:f9:70:2a:bd:b4:ff:30:0b:
a5:73:9e:2c:76:37:f1:f2:22:ea:e2:c1:4b:2a:ac:
bb:1f:c6:7c:e0:be:33:60:47:00:09:60:38:68:43:
14:70:3f:e7:2d:bb:39:bf:63:ed:b2:ca:2e:d9:cb:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AB:FE:51:E3:A1:3A:4B:BB:45:FE:A4:A0:68:84:21:18:CF:7F:69
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:0a:85:1c:e3:b5:09:9a:48:51:96:0e:87:7e:ba:da:13:
31:de:3d:55:72:ef:41:5f:e8:d5:cd:40:8d:09:b5:b8:c7:7a:
42:ca:00:d7:29:7d:9d:10:7e:53:e0:54:a6:27:b8:9e:bb:82:
73:dd:73:56:03:47:a5:3f:ad:89:15:a0:3f:34:0d:29:e8:2e:
4d:75:c7:9c:36:95:2f:6e:dd:ba:7f:24:21:77:36:54:5a:4a:
94:32:4b:25:cf:46:9f:55:a3:ac:ce:39:92:f1:c1:f5:c6:47:
70:f8:57:c9:64:ed:19:94:eb:89:e5:06:97:62:88:9a:3f:70:
50:10:fb:b0:b0:8a:af:8c:45:88:4d:71:34:51:81:88:17:6f:
5e:70:28:3b:8f:04:d7:8d:cb:dd:06:c7:f3:8c:57:da:32:84:
3f:83:25:90:d6:e1:8a:36:f3:ab:9b:f2:9e:22:ab:76:18:5a:
e4:e7:1f:23:11:d3:cf:24:36:fc:66:61:54:a9:02:24:19:64:
2e:25:e6:d9:7e:1f:c8:83:dc:c4:15:25:2a:75:83:40:8d:3a:
a4:70:5a:18:05:3c:63:17:0b:7b:d8:d7:70:38:1f:da:b0:b8:
6b:66:36:9c:6c:98:30:4b:0e:60:d5:7e:c2:4b:18:e3:cb:ae:
f9:3a:8e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0szuXmsoGDy0rjoMYVg9SFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx
Zjk5ZTMwHhcNMjYwMzI3MDEwMDQ5WhcNMjYwMzI4MDEwMDQ5WjAzMTEwLwYDVQQD
EyhkOGFiZmU1MWUzYTEzYTRiYmI0NWZlYTRhMDY4ODQyMTE4Y2Y3ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCugVxYJ95F8ciwi6lMOufzYoEYD
esflioSc3ZwaY7xvNVDUvOPbKwkFncCm+tQ6+JEnOzPedEeg2SFH3Oy2xbViopzo
OsSzTTECkx4jMJX2kve/zESOwQJfMBplWq0VgWLthvXo7Csgktp6tmcOackdr8CL
u1oFQQJVgi2/dF6VE1OWTmoYmyTnLQoO8S1pEJaR6osQyFuYf7Hw6ZHnDLU9B1GV
CeeMNqHcu9lSHA1PWvaAdi7u4VxLCU5B7zvwMe4PabDRxa/U+XAqvbT/MAulc54s
djfx8iLq4sFLKqy7H8Z84L4zYEcACWA4aEMUcD/nLbs5v2Ptssou2cvm7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNir/lHjoTpLu0X+pKBohCEYz39pMB8GA1UdIwQY
MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt
NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi
LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrkKhRzj
tQmaSFGWDod+utoTMd49VXLvQV/o1c1AjQm1uMd6QsoA1yl9nRB+U+BUpie4nruC
c91zVgNHpT+tiRWgPzQNKeguTXXHnDaVL27dun8kIXc2VFpKlDJLJc9Gn1WjrM45
kvHB9cZHcPhXyWTtGZTrieUGl2KImj9wUBD7sLCKr4xFiE1xNFGBiBdvXnAoO48E
143L3QbH84xX2jKEP4MlkNbhijbzq5vyniKrdhha5OcfIxHTzyQ2/GZhVKkCJBlk
LiXm2X4fyIPcxBUlKnWDQI06pHBaGAU8YxcLe9jXcDgf2rC4a2Y2nGyYMEsOYNV+
wksY48uu+TqO4w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:00:48 2026 by rpki-client