Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: Js3UGX2Q46RLfY0rt+ez2Nvivl6pfGva1s8h0Ocxvbs=
Subject key identifier: 44:73:88:EC:07:AD:5E:6F:A3:94:5C:1F:A4:84:26:E5:05:DE:6F:21
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 019D32638463777B27928B8589E5B488BE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 104B
Signing time: Sat 28 Mar 2026 03:01:15 +0000
Manifest this update: Sat 28 Mar 2026 03:01:15 +0000
Manifest next update: Sun 29 Mar 2026 03:01:15 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: kw6Buko33qaRNXsFQlOE0kKz2MOPy4c2vxDdpJHsTkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:84:63:77:7b:27:92:8b:85:89:e5:b4:88:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Mar 28 03:01:15 2026 GMT
Not After : Mar 29 03:01:15 2026 GMT
Subject: CN=447388ec07ad5e6fa3945c1fa48426e505de6f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:1a:a5:38:2f:86:09:f2:f5:6c:26:28:65:
f4:ee:7b:82:c1:04:63:e5:f2:b6:25:07:1e:4e:fb:
da:ed:76:52:8e:dd:f0:83:b2:dd:50:c6:5f:26:eb:
11:20:c3:d8:b9:07:ca:15:ee:91:54:da:5c:26:48:
14:03:39:63:8d:9b:e3:9d:5d:1c:bc:a3:83:4a:59:
71:bb:2e:a1:66:a2:77:90:a8:84:9f:8c:77:2d:2f:
88:a7:8f:3b:87:4c:38:70:eb:bf:71:03:86:e0:c9:
91:a8:99:08:cd:1c:d4:0f:20:9f:0e:0a:4c:42:8c:
29:81:05:fc:c2:6d:98:05:93:59:3b:ff:88:71:d4:
22:3e:33:f2:ea:b7:a6:55:4c:da:d8:e6:0d:39:c9:
77:30:6a:11:c0:d2:2c:d8:24:c8:02:07:d4:a8:ea:
60:98:ee:7e:3e:d5:b8:b0:a1:1e:4b:48:73:a9:62:
0c:c9:43:a3:23:15:b1:1a:17:11:ac:0a:87:f2:44:
94:07:78:a4:e7:bd:d4:8d:3c:be:42:15:3d:d9:4e:
03:cf:2a:e0:9b:31:32:a9:e8:b2:b8:05:3a:7d:06:
c5:3d:0a:96:59:fe:d3:a1:07:a6:51:05:86:55:e3:
d3:58:d9:c5:f5:86:0a:22:f5:f4:45:89:a8:5f:05:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:88:EC:07:AD:5E:6F:A3:94:5C:1F:A4:84:26:E5:05:DE:6F:21
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:22:ce:a0:81:0d:d5:ed:10:72:d3:39:65:05:a3:55:9c:
09:3a:ee:e3:58:d3:8d:5a:a5:c6:ed:00:f5:04:66:2d:01:ac:
f2:3f:31:bb:ba:0c:b0:15:66:a6:77:e9:36:e1:4f:3d:38:25:
d7:52:d5:82:c2:9f:0a:d4:92:98:85:6a:47:e2:a0:de:94:b1:
e8:34:2d:16:22:2d:73:2f:0e:09:5b:34:e5:7f:00:0d:79:9b:
70:ab:66:7b:bd:b2:4c:d8:85:25:67:48:af:d8:97:e3:0e:1d:
f3:17:0d:38:76:df:f9:53:94:bc:6f:ba:d1:ec:b6:fb:b7:82:
60:b6:96:ff:04:95:26:56:50:4a:26:c3:eb:10:91:2f:61:e3:
c5:c5:15:73:34:22:34:fe:c1:43:0b:22:3f:ca:e5:f9:a5:ac:
88:d9:36:af:c1:c4:30:6a:76:8c:b3:2a:2a:c9:a5:9d:0f:a6:
d1:d5:38:d4:84:ec:3f:6c:5d:79:8b:e1:c0:41:d8:70:0e:4b:
3e:68:b1:52:af:7b:77:cd:c8:50:e0:85:22:bb:2a:37:21:33:
75:f9:a8:72:b9:e6:b3:e9:d9:cf:d8:9f:d8:f5:6e:5c:59:24:
96:b8:04:3c:64:4f:0f:e3:10:8c:48:88:39:44:30:45:cd:90:
45:91:f6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yY4Rjd3snkouFieW0iL5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjA2YmQxMDgzMWNhNzM3ODc1NmI1ZTE2MTczODk2YTYw
YjAxOTEwHhcNMjYwMzI4MDMwMTE1WhcNMjYwMzI5MDMwMTE1WjAzMTEwLwYDVQQD
Eyg0NDczODhlYzA3YWQ1ZTZmYTM5NDVjMWZhNDg0MjZlNTA1ZGU2ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgapTgvhgny9WwmKGX07nuCwQRj
5fK2JQceTvva7XZSjt3wg7LdUMZfJusRIMPYuQfKFe6RVNpcJkgUAzljjZvjnV0c
vKODSllxuy6hZqJ3kKiEn4x3LS+Ip487h0w4cOu/cQOG4MmRqJkIzRzUDyCfDgpM
QowpgQX8wm2YBZNZO/+IcdQiPjPy6remVUza2OYNOcl3MGoRwNIs2CTIAgfUqOpg
mO5+PtW4sKEeS0hzqWIMyUOjIxWxGhcRrAqH8kSUB3ik573UjTy+QhU92U4Dzyrg
mzEyqeiyuAU6fQbFPQqWWf7ToQemUQWGVePTWNnF9YYKIvX0RYmoXwVatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERziOwHrV5vo5RcH6SEJuUF3m8hMB8GA1UdIwQY
MBaAFP8ga9EIMcpzeHVrXhYXOJamCwGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYt
NTBmMzk4YmIyNmU5LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMzVkMzctNzQ0Ny00Y2Y0LTk4MmYtNTBmMzk4YmIyNmU5
LzEvX3lCcjBRZ3h5bk40ZFd0ZUZoYzRscVlMQVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWMizqCB
DdXtEHLTOWUFo1WcCTru41jTjVqlxu0A9QRmLQGs8j8xu7oMsBVmpnfpNuFPPTgl
11LVgsKfCtSSmIVqR+Kg3pSx6DQtFiItcy8OCVs05X8ADXmbcKtme72yTNiFJWdI
r9iX4w4d8xcNOHbf+VOUvG+60ey2+7eCYLaW/wSVJlZQSibD6xCRL2HjxcUVczQi
NP7BQwsiP8rl+aWsiNk2r8HEMGp2jLMqKsmlnQ+m0dU41ITsP2xdeYvhwEHYcA5L
PmixUq97d83IUOCFIrsqNyEzdfmocrnms+nZz9if2PVuXFkklrgEPGRPD+MQjEiI
OUQwRc2QRZH21w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:16 2026 by rpki-client