Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: EZWLMlIq0NQCtnhJvb1imfeQaeBC7iZBM7D8VXYkxO0=
Subject key identifier: 02:94:E5:4B:B7:5B:94:3F:2F:7E:31:7C:63:DA:E3:07:6C:A7:D3:99
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 019D28F2B492B82AAF4D17111535DB6135CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 07:01:27 +0000
Manifest this update: Thu 26 Mar 2026 07:01:27 +0000
Manifest next update: Fri 27 Mar 2026 07:01:27 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: FOOu/HSoliAgS9UNx4Sm4+pKVU1WnvwQVEBuHiZh7x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b4:92:b8:2a:af:4d:17:11:15:35:db:61:35:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Mar 26 07:01:27 2026 GMT
Not After : Mar 27 07:01:27 2026 GMT
Subject: CN=0294e54bb75b943f2f7e317c63dae3076ca7d399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ce:3b:8b:10:a7:d0:24:a7:9d:61:08:e6:3d:
db:f2:e9:38:7b:a9:ed:d5:e1:eb:a2:a0:e2:1a:10:
cd:64:d3:65:bf:ba:bc:ae:3a:54:d7:a1:20:c1:42:
f0:d6:da:85:ac:90:d2:e8:17:d2:60:30:16:65:33:
25:9f:74:3d:85:86:d3:1a:cd:d4:fe:3d:dc:90:cc:
fe:50:c5:ce:8b:b4:ea:28:58:c9:e7:bd:bb:56:72:
5c:b2:1f:e3:fe:9f:ac:af:03:65:4d:45:b1:07:97:
4e:d2:2b:64:c3:a9:48:85:2a:9c:1a:75:06:55:b7:
67:18:a9:d3:57:b0:10:22:79:65:6f:cf:e5:92:6b:
3a:c7:b4:9c:14:99:16:c7:fc:c1:5e:34:8a:0b:23:
da:4e:56:16:2d:ef:85:7c:3d:3c:1f:42:21:52:bd:
2b:3b:6b:8d:01:2a:2d:21:fc:e8:d8:26:a5:74:dc:
95:0c:94:ca:c1:29:4f:5b:6b:33:31:cc:14:12:a7:
98:6a:47:f9:71:3d:33:e1:de:cd:f6:f1:8a:5e:96:
eb:d7:c0:24:2d:ff:93:05:d7:ab:eb:75:80:65:87:
c3:60:d2:5d:f1:02:c0:c5:7e:82:73:96:00:99:a2:
01:93:b8:30:f9:f4:0e:3a:2a:00:81:5d:20:ff:52:
de:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:E5:4B:B7:5B:94:3F:2F:7E:31:7C:63:DA:E3:07:6C:A7:D3:99
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5c:69:c9:82:af:b0:dd:7e:9a:62:cf:0a:ac:7f:d2:60:df:
2f:4d:3e:91:f4:8c:28:e3:c0:c1:11:72:a8:a2:e5:58:ec:24:
9c:4a:ed:74:e8:70:41:4c:10:1c:59:09:eb:c3:d1:1c:ef:79:
a4:04:79:3b:5a:1e:24:b6:4d:c2:20:e8:51:f2:81:c0:ba:79:
e4:37:0a:0e:ab:0a:49:a9:1f:a4:79:76:db:de:84:47:f8:31:
53:b7:04:18:d6:82:e4:a3:f8:2d:e3:d3:51:6e:70:eb:de:cf:
b7:2c:1b:ee:0c:25:b0:d2:cf:1e:de:63:29:58:93:d4:58:bf:
f1:ec:d2:54:eb:16:66:73:71:d4:7c:7f:62:6d:5a:b8:9d:d7:
eb:27:bd:c4:fa:8e:0b:b3:5c:69:2e:9e:67:68:f6:73:97:8a:
ef:c4:cf:cd:94:66:3c:33:1d:fb:cb:b2:fc:1b:de:31:f5:67:
bb:41:d5:7b:ad:40:80:16:fc:da:28:8f:6b:01:91:b9:43:1f:
6e:e2:55:ee:96:bb:81:0d:ee:93:7f:58:3c:be:4b:6f:9c:91:
91:ec:76:37:66:ee:77:f4:6b:a0:b1:80:52:f0:d9:aa:13:be:
2a:b6:8e:32:33:40:17:e6:84:58:28:49:03:5d:27:e9:ab:6f:
78:62:64:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8rSSuCqvTRcRFTXbYTXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMmRlZDI3NzUxZjI5MWMwYjU1Yjc5NDU3MjA3Y2IzYTI1
NTE5N2MwHhcNMjYwMzI2MDcwMTI3WhcNMjYwMzI3MDcwMTI3WjAzMTEwLwYDVQQD
EygwMjk0ZTU0YmI3NWI5NDNmMmY3ZTMxN2M2M2RhZTMwNzZjYTdkMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s47ixCn0CSnnWEI5j3b8uk4e6nt
1eHroqDiGhDNZNNlv7q8rjpU16EgwULw1tqFrJDS6BfSYDAWZTMln3Q9hYbTGs3U
/j3ckMz+UMXOi7TqKFjJ5727VnJcsh/j/p+srwNlTUWxB5dO0itkw6lIhSqcGnUG
VbdnGKnTV7AQInllb8/lkms6x7ScFJkWx/zBXjSKCyPaTlYWLe+FfD08H0IhUr0r
O2uNASotIfzo2CaldNyVDJTKwSlPW2szMcwUEqeYakf5cT0z4d7N9vGKXpbr18Ak
Lf+TBder63WAZYfDYNJd8QLAxX6Cc5YAmaIBk7gw+fQOOioAgV0g/1LeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKU5Uu3W5Q/L34xfGPa4wdsp9OZMB8GA1UdIwQY
MBaAFMot7Sd1HykcC1W3lFcgfLOiVRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEt
YTU5MWVhYWNjZTRmLzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEtYTU5MWVhYWNjZTRm
LzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFxpyYKv
sN1+mmLPCqx/0mDfL00+kfSMKOPAwRFyqKLlWOwknErtdOhwQUwQHFkJ68PRHO95
pAR5O1oeJLZNwiDoUfKBwLp55DcKDqsKSakfpHl2296ER/gxU7cEGNaC5KP4LePT
UW5w697Ptywb7gwlsNLPHt5jKViT1Fi/8ezSVOsWZnNx1Hx/Ym1auJ3X6ye9xPqO
C7NcaS6eZ2j2c5eK78TPzZRmPDMd+8uy/BveMfVnu0HVe61AgBb82iiPawGRuUMf
buJV7pa7gQ3uk39YPL5Lb5yRkex2N2bud/RroLGAUvDZqhO+KraOMjNAF+aEWChJ
A10n6atveGJklA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:35 2026 by rpki-client