Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
File: y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft (raw, json)
Hash identifier: FP1ZmAj1AUH6PSqSulfXjSj9IhDea9FwU4qpAHWyr04=
Subject key identifier: 4E:16:47:4F:63:52:5C:F5:AF:91:AE:D4:C9:7D:0C:E0:BF:0C:1F:59
Authority key identifier: CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
Certificate issuer: /CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Certificate serial: 019D3451617D4FB126F866C3F4D48B9D3E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 12:00:41 +0000
Manifest this update: Sat 28 Mar 2026 12:00:41 +0000
Manifest next update: Sun 29 Mar 2026 12:00:41 +0000
Files and hashes: 1: y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl (hash: rreqeZhblyeFfq0jfePKaQXFCpqvLSb5gTI1JjJ9I4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:61:7d:4f:b1:26:f8:66:c3:f4:d4:8b:9d:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb83fbfc176cd48ebe2f2cde9f4c01ed253bbb2d
Validity
Not Before: Mar 28 12:00:41 2026 GMT
Not After : Mar 29 12:00:41 2026 GMT
Subject: CN=4e16474f63525cf5af91aed4c97d0ce0bf0c1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:06:5d:6a:6d:7a:25:a5:93:28:e9:80:d5:
76:fd:b2:55:93:e4:4a:4c:49:e7:fe:62:b0:8a:25:
26:11:f5:ce:94:68:7a:d9:63:21:4b:53:8f:47:1d:
0f:6b:46:67:0b:86:11:d1:00:7d:b5:d7:21:fe:03:
70:e8:a7:bd:2c:59:05:02:d7:4e:a9:10:25:05:7f:
40:85:2c:fe:57:c5:a8:8e:2a:06:00:74:c1:1c:35:
d7:7d:c0:9b:0f:83:15:75:88:14:d7:a0:6d:5c:b1:
16:b0:5b:bd:2f:5b:01:1f:1f:ed:d8:97:14:c1:61:
57:5d:46:60:79:f8:9c:8e:58:91:81:9a:a1:ec:03:
ca:79:30:ce:b1:16:d7:2d:f4:2d:2c:6d:a9:50:1c:
b9:b6:d9:a5:42:06:27:d2:31:bc:9e:d4:cd:ec:ba:
81:bf:e6:6f:e0:1e:c1:14:80:8e:3b:c0:f2:34:f3:
10:bb:69:92:7f:e8:05:b3:46:d6:3f:5c:ce:e3:02:
17:eb:74:58:33:bb:95:6f:c7:98:30:e0:b7:50:45:
ae:7e:83:c6:f1:66:51:c8:77:b4:eb:78:c9:45:79:
c6:61:de:1c:7e:10:be:c3:dc:54:af:1d:3f:32:c2:
0a:f0:c4:89:a3:32:b9:dd:f9:90:37:48:38:40:a4:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:16:47:4F:63:52:5C:F5:AF:91:AE:D4:C9:7D:0C:E0:BF:0C:1F:59
X509v3 Authority Key Identifier:
keyid:CB:83:FB:FC:17:6C:D4:8E:BE:2F:2C:DE:9F:4C:01:ED:25:3B:BB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4P7_Bds1I6-Lyzen0wB7SU7uy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ea37f1-ce1a-4816-bcb6-4412defede73/1/y4P7_Bds1I6-Lyzen0wB7SU7uy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a5:4c:84:b9:da:64:a2:da:57:9f:c6:06:3d:ae:a1:10:c4:
a3:c4:2d:83:02:08:58:ff:80:f1:7c:8b:7d:08:66:39:d6:f4:
c5:6c:02:70:2a:e2:6c:db:5c:08:11:11:0c:c6:e6:dd:58:62:
52:9a:ff:f9:d4:c4:6e:1a:86:b4:f8:c5:bc:78:a1:cc:1b:44:
1a:48:5c:82:31:b0:8d:e2:87:10:82:42:55:f9:a8:a0:30:52:
f4:66:83:98:cd:a8:39:5f:19:8a:13:6a:23:5a:75:a6:c3:40:
c7:d3:cc:40:b3:64:d7:26:c6:5d:e7:8d:34:d9:28:44:81:dc:
cd:9b:9b:d2:70:39:98:22:e1:8d:01:e4:25:e6:42:63:ce:c5:
6f:e1:32:4e:b5:79:85:3b:03:cd:cd:1a:63:c3:e6:e8:d0:a7:
e2:2d:6d:44:47:e2:b5:f6:34:8d:55:40:b8:ec:6a:2c:c8:56:
a0:09:4b:dc:b5:e6:80:fe:c0:7c:e0:45:bc:c1:fa:33:1c:40:
94:1e:5e:b9:16:3d:e6:9d:87:e8:00:81:96:1b:26:5c:90:68:
94:9f:d1:22:4a:a4:d0:20:98:91:3e:c0:c4:d6:5c:0f:e7:21:
ef:bc:f4:61:91:78:86:c3:c1:52:23:f4:b5:a7:e0:0c:b0:7d:
b8:75:bf:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00UWF9T7Em+GbD9NSLnT5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODNmYmZjMTc2Y2Q0OGViZTJmMmNkZTlmNGMwMWVkMjUz
YmJiMmQwHhcNMjYwMzI4MTIwMDQxWhcNMjYwMzI5MTIwMDQxWjAzMTEwLwYDVQQD
Eyg0ZTE2NDc0ZjYzNTI1Y2Y1YWY5MWFlZDRjOTdkMGNlMGJmMGMxZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUGXWpteiWlkyjpgNV2/bJVk+RK
TEnn/mKwiiUmEfXOlGh62WMhS1OPRx0Pa0ZnC4YR0QB9tdch/gNw6Ke9LFkFAtdO
qRAlBX9AhSz+V8WojioGAHTBHDXXfcCbD4MVdYgU16BtXLEWsFu9L1sBHx/t2JcU
wWFXXUZgeficjliRgZqh7APKeTDOsRbXLfQtLG2pUBy5ttmlQgYn0jG8ntTN7LqB
v+Zv4B7BFICOO8DyNPMQu2mSf+gFs0bWP1zO4wIX63RYM7uVb8eYMOC3UEWufoPG
8WZRyHe063jJRXnGYd4cfhC+w9xUrx0/MsIK8MSJozK53fmQN0g4QKTOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4WR09jUlz1r5Gu1Ml9DOC/DB9ZMB8GA1UdIwQY
MBaAFMuD+/wXbNSOvi8s3p9MAe0lO7stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYTM3ZjEtY2UxYS00ODE2LWJjYjYt
NDQxMmRlZmVkZTczLzEveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYTM3ZjEtY2UxYS00ODE2LWJjYjYtNDQxMmRlZmVkZTcz
LzEveTRQN19CZHMxSTYtTHl6ZW4wd0I3U1U3dXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaVMhLna
ZKLaV5/GBj2uoRDEo8QtgwIIWP+A8XyLfQhmOdb0xWwCcCribNtcCBERDMbm3Vhi
Upr/+dTEbhqGtPjFvHihzBtEGkhcgjGwjeKHEIJCVfmooDBS9GaDmM2oOV8ZihNq
I1p1psNAx9PMQLNk1ybGXeeNNNkoRIHczZub0nA5mCLhjQHkJeZCY87Fb+EyTrV5
hTsDzc0aY8Pm6NCn4i1tREfitfY0jVVAuOxqLMhWoAlL3LXmgP7AfOBFvMH6MxxA
lB5euRY95p2H6ACBlhsmXJBolJ/RIkqk0CCYkT7AxNZcD+ch77z0YZF4hsPBUiP0
tafgDLB9uHW/SA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:58 2026 by rpki-client