Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
File: yZjCo92k9OyII3In9dqlkw3uZ-U.mft (raw, json)
Hash identifier: Fx4is6eGppMIOGMuBIcvbhh8wfFoboqARqy96oAddjI=
Subject key identifier: 52:E1:7D:AA:F5:E5:61:70:D6:52:1A:9D:23:35:78:78:5A:0A:3D:23
Authority key identifier: C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
Certificate issuer: /CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Certificate serial: 019D2703B41531CF606BBD78EF0239350505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
Manifest number: 01D7
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: yZjCo92k9OyII3In9dqlkw3uZ-U.crl (hash: V2cUMfDT7tV7Tk4JQZQG6pSquil5vzpzwfc5JGnNPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b4:15:31:cf:60:6b:bd:78:ef:02:39:35:05:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c998c2a3dda4f4ec88237227f5daa5930dee67e5
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=52e17daaf5e56170d6521a9d233578785a0a3d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:55:96:fa:07:0d:4e:22:2a:94:3d:fc:3a:
68:9f:aa:92:c7:b5:a9:c7:55:c9:d9:e4:92:f0:2e:
d4:70:5c:49:ab:44:c2:51:d3:a5:f4:e4:e1:27:e7:
04:25:ad:bf:00:91:6b:e8:3b:e6:19:2a:18:08:2c:
67:46:e5:a1:1f:22:a3:ab:b5:de:54:3c:57:cb:33:
d5:43:31:0e:d1:0c:a3:ab:3e:29:4c:5e:c1:cc:bd:
37:b6:b2:e4:e4:82:7e:15:5f:ae:a4:07:18:0b:a4:
0d:0a:74:53:26:5b:d1:57:20:5a:38:ac:14:7a:ce:
a6:84:b1:6b:6a:b0:ec:d3:d6:31:5b:56:6b:e3:ab:
29:2b:5a:f9:be:58:58:4c:14:c0:0e:5d:da:a3:10:
96:b8:0f:05:0d:eb:ee:71:71:06:e4:a8:cc:11:b7:
58:84:1d:77:87:d6:04:2c:bb:42:fb:56:36:f0:5f:
2f:2b:24:0e:8c:5c:dc:f4:62:37:9c:6b:73:a3:0b:
67:7c:7d:a8:b0:aa:03:aa:3d:8b:e5:a5:ac:61:3a:
32:00:5c:ba:3f:98:b9:83:9f:e0:66:48:7e:9e:5d:
45:78:b5:bf:2e:30:1e:03:7e:3c:e8:27:94:82:12:
6c:59:95:54:db:55:38:b6:29:d9:93:40:ae:d9:76:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:7D:AA:F5:E5:61:70:D6:52:1A:9D:23:35:78:78:5A:0A:3D:23
X509v3 Authority Key Identifier:
keyid:C9:98:C2:A3:DD:A4:F4:EC:88:23:72:27:F5:DA:A5:93:0D:EE:67:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZjCo92k9OyII3In9dqlkw3uZ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/108aef-09bd-426a-9263-1e4bbcfba210/1/yZjCo92k9OyII3In9dqlkw3uZ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f6:85:f4:79:56:6c:34:78:2f:68:68:f3:de:b5:3c:ff:e8:
ff:c8:dc:3d:27:29:7d:d8:73:58:52:29:15:a5:45:ed:15:af:
12:6d:62:25:3a:83:9f:e5:1b:f5:06:70:ed:65:00:09:f6:7c:
b3:60:ac:27:e1:fd:b2:7a:17:1a:80:9b:1b:44:33:fd:fc:66:
98:b7:f7:06:18:07:da:83:d8:a9:82:01:50:94:9c:a7:f0:1d:
06:83:0e:ff:8a:bd:be:c4:73:3d:8d:eb:b3:43:66:6e:ed:07:
cb:dc:fe:9e:64:e2:df:22:85:4e:96:83:7e:77:71:72:bf:77:
89:2e:c0:5b:59:c9:2b:0b:3e:81:de:4b:c9:97:df:8f:33:00:
53:08:8d:71:76:1f:89:32:59:3b:55:a6:6b:29:e9:18:a7:d3:
0c:94:48:90:91:98:20:b9:b2:eb:4a:f0:c7:d1:87:9f:c5:c9:
8e:2c:b8:f4:8c:fe:98:dc:a3:cd:10:d9:04:55:25:1b:bb:b8:
61:20:7c:34:08:0c:1b:47:e1:38:52:f9:0f:25:f7:70:51:36:
44:bb:97:2a:a5:3e:88:3c:84:bd:00:f6:be:b8:b3:e9:46:23:
7b:bc:82:a8:0a:aa:2e:7d:6e:48:66:00:ea:83:72:2f:c2:18:
f8:58:e5:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA7QVMc9ga7147wI5NQUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OThjMmEzZGRhNGY0ZWM4ODIzNzIyN2Y1ZGFhNTkzMGRl
ZTY3ZTUwHhcNMjYwMzI1MjIwMDQ3WhcNMjYwMzI2MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg1MmUxN2RhYWY1ZTU2MTcwZDY1MjFhOWQyMzM1Nzg3ODVhMGEzZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb9VlvoHDU4iKpQ9/Dpon6qSx7Wp
x1XJ2eSS8C7UcFxJq0TCUdOl9OThJ+cEJa2/AJFr6DvmGSoYCCxnRuWhHyKjq7Xe
VDxXyzPVQzEO0Qyjqz4pTF7BzL03trLk5IJ+FV+upAcYC6QNCnRTJlvRVyBaOKwU
es6mhLFrarDs09YxW1Zr46spK1r5vlhYTBTADl3aoxCWuA8FDevucXEG5KjMEbdY
hB13h9YELLtC+1Y28F8vKyQOjFzc9GI3nGtzowtnfH2osKoDqj2L5aWsYToyAFy6
P5i5g5/gZkh+nl1FeLW/LjAeA3486CeUghJsWZVU21U4tinZk0Cu2XadMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLhfar15WFw1lIanSM1eHhaCj0jMB8GA1UdIwQY
MBaAFMmYwqPdpPTsiCNyJ/XapZMN7mflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMt
MWU0YmJjZmJhMjEwLzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xMDhhZWYtMDliZC00MjZhLTkyNjMtMWU0YmJjZmJhMjEw
LzEveVpqQ285Mms5T3lJSTNJbjlkcWxrdzN1Wi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfaF9HlW
bDR4L2ho8961PP/o/8jcPScpfdhzWFIpFaVF7RWvEm1iJTqDn+Ub9QZw7WUACfZ8
s2CsJ+H9snoXGoCbG0Qz/fxmmLf3BhgH2oPYqYIBUJScp/AdBoMO/4q9vsRzPY3r
s0Nmbu0Hy9z+nmTi3yKFTpaDfndxcr93iS7AW1nJKws+gd5LyZffjzMAUwiNcXYf
iTJZO1WmaynpGKfTDJRIkJGYILmy60rwx9GHn8XJjiy49Iz+mNyjzRDZBFUlG7u4
YSB8NAgMG0fhOFL5DyX3cFE2RLuXKqU+iDyEvQD2vriz6UYje7yCqAqqLn1uSGYA
6oNyL8IY+Fjldg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:33 2026 by rpki-client