Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json)
Hash identifier: cOX2QvF5Gi7mLQ3CZn1nkhiFe0FV9nABzH2c98RRxuU=
Subject key identifier: C8:D6:59:76:CF:DF:DB:37:73:A6:A9:DE:F1:A9:3E:F0:7D:58:83:85
Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Certificate serial: 019D284DD14441514BF0A8BD5C5917913090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
Manifest number: 0F3F
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: WQfg/cJWNPK0snRjiru2PMOfAaneQHLJZA+fUF5vi4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d1:44:41:51:4b:f0:a8:bd:5c:59:17:91:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=c8d65976cfdfdb3773a6a9def1a93ef07d588385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:b1:40:d2:38:0f:58:ef:00:97:a0:4b:c0:
f5:10:59:ed:5f:7b:c5:95:3f:42:72:98:68:98:21:
76:84:5d:24:06:70:40:ee:5e:43:3d:9f:0c:91:fc:
a8:98:c1:16:f1:bd:cb:4b:d3:13:b7:a0:e5:d6:4b:
05:d2:e1:32:31:73:d1:f4:9e:4d:d8:67:d2:a0:e0:
13:77:31:85:20:b2:e8:58:83:77:61:ce:a2:ec:fd:
e4:19:8a:b6:fd:b8:b2:2e:8d:b3:b6:a7:67:83:24:
4e:c1:69:8e:27:85:fa:9f:10:ab:ae:51:ab:62:4e:
c7:cf:3e:ff:61:3a:dc:f2:33:68:fe:94:4b:8f:8c:
28:86:64:5a:8b:1f:e8:46:7e:41:4c:fd:c6:59:94:
8e:c8:a9:83:d3:b7:93:a2:ee:81:9d:0e:1d:83:8c:
0c:73:ad:b2:1d:38:90:54:a4:14:44:48:ae:42:2d:
d1:2b:fd:f6:62:9d:22:b8:27:e3:4d:f5:07:03:29:
46:97:dc:74:57:5c:06:50:c7:12:65:76:4b:63:81:
46:d2:ff:f8:e9:86:8f:1f:13:cd:7a:53:fb:38:6f:
9c:9a:6d:dd:ec:9e:60:9a:f0:c4:41:50:7a:0d:fa:
8a:1f:74:f0:79:87:75:48:db:5c:20:64:c0:d1:85:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:59:76:CF:DF:DB:37:73:A6:A9:DE:F1:A9:3E:F0:7D:58:83:85
X509v3 Authority Key Identifier:
keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:69:28:22:4b:b8:e5:0d:68:8d:8c:0c:e6:6f:97:ba:e0:
94:02:4e:90:d5:33:f7:c0:d4:65:c2:fc:54:e5:04:b2:e2:f8:
b4:ad:ac:64:d3:53:c2:88:87:0f:c7:1b:d8:eb:d2:32:8b:f0:
81:ee:d8:6f:f6:f0:52:89:1d:64:58:8c:1f:06:14:fe:04:91:
e6:ca:c6:17:72:39:56:82:64:e0:a6:eb:a0:7c:88:34:e6:36:
f6:e4:06:bd:26:85:ad:28:0c:e4:c4:72:96:98:8e:0a:75:4b:
42:f6:1f:65:a7:a5:91:91:de:4a:56:22:cb:bd:ad:40:7a:eb:
a9:69:98:4b:f1:7d:86:9a:6f:27:89:24:78:e0:93:f0:2b:36:
09:d4:14:c4:5b:ff:4b:35:3d:fb:a1:42:37:89:08:c4:67:b1:
40:79:ec:39:d1:a3:3f:7d:ce:4e:0a:27:08:9a:26:51:79:bb:
87:ad:8e:b4:c1:f9:95:e6:95:a1:f0:b5:db:c0:8b:cb:69:da:
95:77:18:8c:48:8f:d3:ca:f2:f7:3c:a2:97:7a:e5:5d:5b:02:
ed:cc:42:aa:83:77:fe:22:02:1d:ed:28:21:47:71:32:39:c6:
4b:6d:b8:82:cc:89:5d:aa:57:f4:19:f5:67:7e:c9:9d:b9:86:
04:12:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:18 2026 by rpki-client