Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: paex00nQ5ymv0QkW3oiHmrdQWTyynInoOHjsmXSa7Dk=
Subject key identifier: 47:4E:C1:1F:D4:4A:4C:AD:C5:BE:E2:04:15:09:83:89:69:B5:71:20
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 019D265F9D5B8B3DAC33A288582E327A009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0D8A
Signing time: Wed 25 Mar 2026 19:01:33 +0000
Manifest this update: Wed 25 Mar 2026 19:01:33 +0000
Manifest next update: Thu 26 Mar 2026 19:01:33 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: 01LmO6Ts+CNlYOOkqM8ZmczkePKD2ObywDxg/sXuvzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9d:5b:8b:3d:ac:33:a2:88:58:2e:32:7a:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Mar 25 19:01:33 2026 GMT
Not After : Mar 26 19:01:33 2026 GMT
Subject: CN=474ec11fd44a4cadc5bee2041509838969b57120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:bd:9c:62:dd:0e:b9:5c:48:cc:d4:26:8e:
b4:05:65:3c:54:34:94:68:8a:86:3a:61:36:05:f7:
c9:9e:57:da:4e:41:15:16:18:af:ac:fc:ed:34:fe:
5b:c7:a9:b4:0f:fc:f2:c7:cf:09:d2:32:b4:ba:7b:
d5:20:59:a8:35:9c:3b:3e:d9:c0:bb:a5:88:ca:64:
14:64:da:d0:b3:37:3d:a4:3b:c5:3a:06:50:23:86:
6f:4f:9d:fc:60:70:de:a7:cb:2a:50:65:e2:db:7d:
74:2a:34:69:0a:18:a5:fc:0d:54:14:64:50:fe:6d:
43:9f:91:95:be:9c:63:51:6f:db:8d:3c:ea:f8:1e:
ce:7b:b9:3f:a9:83:64:43:78:54:a8:ed:26:bb:88:
da:dc:20:dc:af:9c:94:72:b6:a8:52:4b:d1:67:96:
17:c8:49:03:cf:8d:48:4f:68:7a:01:05:39:9b:06:
74:ee:c3:69:b5:d4:02:1d:42:f2:b7:5d:08:08:5c:
b3:6a:e9:23:d7:12:4b:d2:69:89:1e:1b:4a:9d:fc:
04:8a:c8:e5:e1:82:72:eb:38:9b:a8:65:2c:65:62:
19:0b:92:6a:da:fa:81:ea:80:da:ea:70:dd:d8:17:
b0:e1:86:37:62:bb:cd:94:63:df:b2:22:b5:e8:58:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:C1:1F:D4:4A:4C:AD:C5:BE:E2:04:15:09:83:89:69:B5:71:20
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5f:c5:05:97:db:2e:a9:46:25:99:fd:d9:32:59:61:ec:4c:
e5:e0:fb:6a:16:15:c8:2b:47:aa:65:12:42:05:db:f7:74:2f:
9d:91:70:ef:f3:e4:de:85:34:27:13:9f:f4:50:05:48:8f:6f:
93:dc:70:56:70:87:24:5c:ed:ac:3d:76:80:8f:30:c5:43:da:
73:90:42:7f:26:c9:b5:f3:d5:57:18:68:7b:44:e7:cd:af:4b:
86:7a:d8:d8:db:2a:ed:46:2e:00:ab:66:0c:14:7b:b2:38:1a:
ab:23:40:84:b5:e1:f1:49:36:aa:ed:f8:58:e9:af:cd:a9:4f:
ef:75:1d:06:8d:7f:74:2f:c8:61:89:ed:63:50:48:b2:e7:db:
e7:89:ee:61:e0:79:bc:45:46:be:a1:05:fb:9b:b0:cc:5a:b6:
dc:88:21:c9:9c:2c:4a:a1:c8:c8:f2:db:9d:21:1d:6f:66:e0:
f2:cf:a8:d4:4c:2e:8a:aa:e8:d3:91:8f:e3:8f:67:97:eb:98:
df:04:cb:af:5d:1e:ca:28:ea:65:56:42:dc:fa:69:c9:12:ef:
bd:c6:e0:c7:d7:7d:2a:38:1e:71:4e:3d:6e:40:a4:50:76:90:
d7:89:27:87:9c:b5:05:ce:bf:f4:8f:3b:87:c9:62:c5:06:f1:
ce:8a:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:53 2026 by rpki-client