Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json)
Hash identifier: rZwSiAO8uOFJafKfdp/vRO5MGo1L7dthRlJerDRHR6w=
Subject key identifier: 84:BC:B8:71:E4:0A:1C:F7:D1:31:54:4D:D9:17:AA:54:24:49:19:F9
Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Certificate serial: 019D27DF9584A3FFB6C1D88430D8A4A4E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
Manifest number: 0CF0
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: biDIk2yqyRpjL5tWymtlPscfFJe1SvrA41CzqyeNwOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:95:84:a3:ff:b6:c1:d8:84:30:d8:a4:a4:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=84bcb871e40a1cf7d131544dd917aa54244919f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:dc:d6:2f:76:73:ab:e2:53:da:ef:fc:ea:
d0:21:b9:46:67:29:8d:7f:83:44:d2:3e:6e:a6:05:
00:7d:62:f7:52:d4:01:25:aa:a2:62:0f:51:bd:f2:
18:de:83:3c:66:7c:93:c3:21:3e:a4:06:a6:2c:4f:
e6:e1:43:f2:d3:7c:0d:01:69:55:6d:ff:f3:e7:98:
fe:e5:62:bf:07:7c:f4:4f:de:bf:0a:cf:b3:dd:c4:
2a:ca:87:a2:a3:ee:52:80:fb:94:3e:52:99:81:90:
cf:d7:b7:d8:e4:8a:1a:22:8d:99:36:dd:7f:2a:04:
24:95:34:4c:98:7f:08:fe:52:c4:59:f1:22:90:a1:
96:91:30:da:aa:86:7a:14:f4:ec:d8:7a:38:96:6c:
b0:bc:2d:41:4e:a3:2a:1a:77:8a:10:da:01:23:62:
22:d9:1c:a4:14:3a:91:d9:af:b1:81:83:4f:aa:12:
0c:be:54:c7:0d:5c:a3:19:26:65:55:1c:b0:32:12:
66:9f:35:c6:d9:c9:cf:27:a3:5d:8b:ac:11:d6:27:
4f:39:86:10:cc:2c:a4:00:01:c4:83:82:8f:68:54:
a1:16:4b:30:2a:72:01:48:2d:d2:2d:7f:40:55:66:
05:29:cd:a5:9c:e9:53:b0:18:15:f2:c6:7f:ad:bc:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:B8:71:E4:0A:1C:F7:D1:31:54:4D:D9:17:AA:54:24:49:19:F9
X509v3 Authority Key Identifier:
keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:ea:2f:eb:86:d4:c4:b7:ae:12:92:c5:b5:3f:7f:8f:1b:
9b:e4:40:a2:f5:62:71:c6:eb:97:d7:fc:6d:1b:56:fa:78:a9:
00:36:02:4f:6f:19:d1:8c:16:09:c1:8e:e7:1b:2f:86:98:69:
17:fb:13:a0:e7:44:b9:13:db:49:d3:af:c6:53:a1:c9:20:c9:
bd:c8:76:96:6b:83:44:fd:a3:25:89:96:3f:8f:1e:0c:ba:bf:
bb:c5:00:f3:59:5c:4d:e3:18:90:b2:db:88:fa:9b:9a:c2:82:
2c:6f:38:ad:79:ff:3b:ab:1a:68:bf:f4:f9:5a:04:4a:b3:1a:
4d:c1:d3:07:0d:b5:69:40:71:19:61:aa:75:27:0a:d1:1f:29:
85:2e:ea:0d:cf:d9:7b:55:1f:19:51:c7:9b:c6:7b:22:80:ea:
f0:a7:56:10:6d:3a:87:aa:53:ae:18:e0:0a:1a:80:0d:7e:9c:
06:1f:aa:4e:95:67:8f:32:bd:43:f6:f4:ad:5d:76:55:3d:20:
fe:e9:8c:b9:07:be:9c:0a:76:67:d5:71:1d:5c:a9:f3:c0:61:
65:d9:0b:03:85:22:32:6f:bf:d3:eb:ea:58:53:5a:92:f2:34:
97:d3:a8:1d:28:e0:92:58:70:f0:18:f0:3b:4c:d4:1b:32:d3:
e0:28:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:22:06 2026 by rpki-client