Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: H7G4VLKMHH/f+flUsFjEQ7bKYeZYYYb/Gw65M9eAKN0=
Subject key identifier: 20:5A:19:05:76:B4:C8:01:9D:DB:39:E7:26:1E:29:E0:A0:75:1C:BD
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 019D2703E8A553DACCBE271CFF858C3085DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 1816
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: zphEF7NZlO02h6zjkDBcpdlGsDi3wZODOszkVACuoGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e8:a5:53:da:cc:be:27:1c:ff:85:8c:30:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=205a190576b4c8019ddb39e7261e29e0a0751cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:34:e2:ea:28:e9:ba:07:c1:b7:a7:48:6a:
17:f2:90:c8:67:4c:f6:89:35:ee:2b:7e:ad:b5:06:
37:6b:3b:69:d0:68:1c:10:22:c9:d1:1c:19:3c:23:
05:bc:c9:9a:d2:c1:7b:b3:48:f3:f0:35:2c:07:8b:
66:53:2f:62:28:38:b4:e7:c5:a8:52:18:dc:e8:23:
28:be:c4:23:e3:25:6d:c5:7e:8c:50:de:96:9c:62:
12:01:31:59:56:e4:6f:27:f3:d7:af:d0:84:32:b2:
bb:c8:2c:ee:e8:8e:e9:1e:74:f9:4d:f8:5b:e5:94:
a8:52:a6:89:a4:5c:b8:e5:67:19:17:2f:f7:fe:3d:
a2:e0:cd:0f:98:c0:2c:61:a2:f6:29:d5:82:51:d1:
62:d4:82:46:18:00:3a:b0:b4:0a:dd:df:71:5d:f2:
e2:70:08:ff:e3:19:ce:c9:bc:71:13:2c:51:a3:ec:
b9:31:c2:ee:17:b5:d6:97:22:44:cf:4f:a6:24:08:
2f:43:0f:0a:ea:db:46:e2:65:be:b5:ee:63:93:cf:
79:22:ce:bb:18:74:f2:dd:f8:4f:f7:f5:e0:03:7d:
7b:3b:75:75:d3:0a:9c:82:73:4f:87:d1:99:dd:d5:
92:cf:a8:f4:92:0e:90:66:e8:57:6f:0a:47:e1:23:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5A:19:05:76:B4:C8:01:9D:DB:39:E7:26:1E:29:E0:A0:75:1C:BD
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:1a:ee:df:43:b9:b5:69:4e:09:7e:f7:62:0c:e9:97:5e:
07:7b:03:49:b9:ff:d3:35:76:f7:ea:11:d7:71:5e:23:9a:48:
fd:ac:5b:75:94:32:78:57:31:24:3e:2a:1b:30:e7:c8:6b:21:
b8:a4:b9:ff:0e:29:78:2f:cd:90:89:08:ac:57:91:91:e5:0b:
15:75:98:e2:fe:9e:ef:57:0b:ba:a5:b2:19:4b:88:86:e9:80:
11:fe:02:a3:35:f5:c1:32:5f:3d:59:b4:af:de:e2:2b:be:c7:
93:c5:2a:bd:b2:ce:cf:c3:d9:77:37:8f:ca:3e:f0:3f:d9:20:
c0:d5:ea:9f:3b:00:b4:16:78:48:be:08:4a:c5:f6:4d:c4:5b:
80:16:1f:e4:06:b6:6b:9a:51:69:5b:5f:9b:99:7e:25:c0:5d:
9d:68:a7:06:20:27:37:ba:c5:f7:79:3a:bd:ba:d6:a6:4b:07:
8b:e4:8d:b4:49:ed:6c:aa:ac:f8:ae:3d:d8:21:0d:76:fa:d0:
e6:3a:f1:89:7a:ff:b5:f0:12:69:26:30:5b:79:15:9e:30:f0:
2f:85:ba:90:d3:96:fd:db:55:69:40:26:b0:99:28:c7:a9:7a:
f1:3a:ec:7f:05:72:3b:be:d2:12:dc:fc:65:0c:78:fd:20:47:
96:3e:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:49 2026 by rpki-client