Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
File: YZmtJxLZe7wR4V39skAnE66ADL0.mft (raw, json)
Hash identifier: KzLQt1aWh3gzfmK+W8753VqQVdZZxMMD4B5dymi6mmo=
Subject key identifier: DD:B2:D0:EB:B5:7E:29:7F:4D:BF:E0:49:66:FD:DF:89:ED:47:E7:AC
Authority key identifier: 61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
Certificate issuer: /CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Certificate serial: 019D2772DC2BF79226C6A76CD2BC0535E9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
Manifest number: 020B
Signing time: Thu 26 Mar 2026 00:02:11 +0000
Manifest this update: Thu 26 Mar 2026 00:02:11 +0000
Manifest next update: Fri 27 Mar 2026 00:02:11 +0000
Files and hashes: 1: YZmtJxLZe7wR4V39skAnE66ADL0.crl (hash: NvwWXJ4v3kkjvdiJVBB2NPP9yohCDWMFQObSgDux5rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:dc:2b:f7:92:26:c6:a7:6c:d2:bc:05:35:e9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd
Validity
Not Before: Mar 26 00:02:11 2026 GMT
Not After : Mar 27 00:02:11 2026 GMT
Subject: CN=ddb2d0ebb57e297f4dbfe04966fddf89ed47e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:3c:4e:8b:72:e3:d9:6a:14:c7:23:93:20:
cb:63:18:e4:1c:96:9e:57:98:29:4e:54:26:73:c6:
54:f2:d4:a6:5e:93:15:ee:76:15:8e:8f:e1:5c:94:
cf:21:a7:de:e8:db:fe:81:9b:2a:37:26:b8:13:2c:
42:a9:e5:bb:1e:e6:74:63:a1:30:12:7b:e6:a0:c7:
1b:7c:7f:61:4c:9d:8e:aa:63:e8:7a:e7:6a:df:3a:
90:d7:6a:e6:85:cf:0e:f2:99:cd:f9:9d:e2:8b:c4:
50:84:c5:55:6f:eb:c4:73:a3:55:20:a0:7b:a2:a7:
8f:26:01:3e:c3:14:fb:67:45:35:8c:b9:fe:26:2b:
fa:d0:58:e7:ee:f2:60:88:95:72:76:00:d4:a8:7b:
0b:fc:9a:17:59:00:0a:a7:e6:4b:3c:63:ea:9a:96:
af:67:cd:13:ff:76:ab:03:98:5e:c8:c3:6f:55:0e:
71:81:18:3b:bc:5d:77:ce:2a:1f:0c:43:20:17:fb:
95:2a:57:c4:1d:fd:e4:c5:6e:b2:e0:31:4d:7e:e8:
c8:b2:28:24:34:a9:c3:58:3f:f7:7d:65:59:00:3b:
52:67:25:4b:f0:19:78:89:51:e1:92:f7:47:1a:42:
24:a5:76:9e:00:95:24:72:1d:ed:e6:87:60:d2:f4:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B2:D0:EB:B5:7E:29:7F:4D:BF:E0:49:66:FD:DF:89:ED:47:E7:AC
X509v3 Authority Key Identifier:
keyid:61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4e:8e:ef:28:69:be:63:35:6d:77:93:75:7a:07:08:4e:bf:
0a:38:6d:01:4b:df:bf:3d:6f:05:03:53:ee:7c:20:b2:17:5f:
4c:9d:66:83:f4:dc:85:d4:16:5e:77:03:46:47:f2:71:54:fa:
a8:ff:1f:ee:1c:89:a4:4d:93:e7:bf:34:bf:21:e9:2b:ea:b4:
64:2b:0b:b3:8e:2e:ff:d6:72:c7:8a:55:13:a4:77:72:6f:88:
21:4c:da:47:fe:e9:2e:bc:28:79:03:53:a5:c4:b7:a2:f8:25:
3f:65:77:ad:7a:81:8e:e8:ed:ff:ef:22:86:a9:b2:3a:31:b9:
8e:66:4d:57:7c:f8:0e:0c:6a:ff:71:4d:aa:dc:83:d8:47:76:
d2:de:b4:8b:2f:91:2d:f8:25:a0:ea:be:a2:25:fa:e0:8a:53:
02:24:e2:fb:dc:29:ec:7f:25:28:c9:c6:f6:74:83:80:04:6d:
b5:5d:d8:47:2d:6f:1f:9f:1d:28:ff:3b:37:36:8f:d8:97:b5:
91:01:de:2f:95:71:95:5f:ff:8d:72:c1:6e:a0:df:3b:e2:c6:
4f:9a:3b:e9:74:c4:e2:70:bb:33:06:42:5a:cb:6d:6e:b3:91:
b2:cf:bd:52:d0:7f:38:9a:76:a5:84:1d:54:38:cd:03:f5:01:
be:c3:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:05 2026 by rpki-client