Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier: PBzm2NUS06EXQtnGOZwwT8cxoAlTqMNh6KJsAy/JEAk=
Subject key identifier: 61:E7:A3:33:8C:05:1F:14:9C:EA:31:C4:09:C5:47:DC:79:80:8B:83
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial: 019D284E194E64D9EC16EA4408A6B9DEA923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: AY2QKQg1zgy3xPyou194c9Kdfb88YYe67GYuYAj/hBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:19:4e:64:d9:ec:16:ea:44:08:a6:b9:de:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=61e7a3338c051f149cea31c409c547dc79808b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:99:8a:a1:50:da:72:89:94:53:43:d1:75:
96:de:83:db:e8:8c:7a:34:33:1b:b7:9b:4e:75:15:
bb:9e:bb:17:ca:73:1b:b9:3a:f9:e0:51:29:bf:0d:
e0:e4:68:14:d3:82:b0:cf:6b:89:a8:75:83:a8:58:
b4:79:a1:69:7a:87:23:4d:d8:87:df:1e:fd:ba:dc:
49:ee:47:17:8f:7f:bc:f4:c9:4a:ab:b1:61:59:ed:
a6:eb:62:d2:69:9d:9c:31:dc:89:60:5a:06:24:56:
c2:8f:13:cf:78:d9:4a:bc:5c:a3:a4:58:00:26:d6:
53:de:80:0f:2a:3e:99:26:22:74:4d:49:8b:c5:ee:
2d:d6:6b:c6:37:ec:df:be:06:9f:20:44:54:6e:87:
df:a8:6d:f5:74:1d:84:63:53:47:68:96:75:31:46:
88:d5:c8:40:07:1b:ff:68:46:0d:43:51:bc:29:65:
b6:8b:e9:3a:15:a2:1f:22:66:00:16:ec:79:7f:76:
1d:e3:2e:a2:37:8b:07:57:f9:c1:dd:e2:7c:4e:a5:
4a:47:63:95:de:73:d5:d9:c4:33:34:b8:a4:9f:ce:
e6:01:43:be:f5:f0:96:03:8c:f4:75:71:4a:dc:97:
65:2e:58:f1:af:d9:85:1d:8b:0a:2f:2d:a2:a7:18:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E7:A3:33:8C:05:1F:14:9C:EA:31:C4:09:C5:47:DC:79:80:8B:83
X509v3 Authority Key Identifier:
keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:24:a5:3d:5e:58:f6:e5:ba:2d:2c:16:95:b7:0e:0e:82:01:
a9:51:2f:5e:78:b9:fd:40:d6:05:d8:c2:61:d3:7a:73:92:60:
15:9d:be:42:ed:41:25:67:03:d8:57:40:7b:75:f1:12:58:1d:
03:b2:ab:26:05:97:38:a4:fd:74:75:b9:89:b0:a3:8d:9b:97:
6e:90:d9:38:b3:21:47:d7:90:db:f7:86:7f:50:0a:dd:e0:11:
06:cb:a1:95:4b:19:7b:e5:bb:6e:7f:f2:31:da:09:7e:1c:9e:
f3:fb:f9:f6:60:23:40:0a:e8:f8:65:5a:0a:50:90:6b:a4:c1:
dc:08:61:5a:9a:65:3c:bf:fb:79:07:f9:c1:11:8f:bf:df:f1:
27:46:94:9d:8a:9c:ca:ed:00:89:28:54:2c:e8:bc:73:47:31:
24:97:3d:f3:12:ce:12:1f:ff:e7:43:64:b4:21:ef:2e:93:54:
63:49:3a:4d:34:78:60:4a:d2:10:65:3c:fe:33:1c:db:ab:6f:
67:70:e0:e0:7b:cf:25:ea:08:41:23:8b:8e:f7:9b:ad:a8:f2:
41:07:46:81:1b:a8:4a:a5:de:16:43:cf:6f:30:bf:6e:2c:0a:
49:c7:d6:35:d1:8f:9a:26:cb:70:ab:43:77:a8:f3:ec:49:e3:
7f:ea:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:47 2026 by rpki-client