Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: RdnmIPodLVpjSEr4iT4CiQ36y6jUG4+6oNuXSMqe0ZQ=
Subject key identifier: 85:CE:18:71:03:2D:65:97:20:A4:D9:AD:89:AA:88:BE:82:D3:ED:26
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019D27A8A142709453E5A327DB0711BC7391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 1205
Signing time: Thu 26 Mar 2026 01:00:55 +0000
Manifest this update: Thu 26 Mar 2026 01:00:55 +0000
Manifest next update: Fri 27 Mar 2026 01:00:55 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: 0hiYrbns88+6lkB5ZUIJknbMIq08MLRn4rvXQiPG9hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a1:42:70:94:53:e5:a3:27:db:07:11:bc:73:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Mar 26 01:00:55 2026 GMT
Not After : Mar 27 01:00:55 2026 GMT
Subject: CN=85ce1871032d659720a4d9ad89aa88be82d3ed26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:34:76:83:69:fc:52:92:2f:8b:c6:d3:de:
1f:29:0a:bf:fd:19:e2:44:b4:fe:f4:c9:d1:2f:17:
2d:dc:68:62:d9:74:7f:fb:e6:03:d8:67:6f:78:14:
66:3f:25:d0:78:b2:c5:e7:b2:bb:60:41:7a:92:66:
e1:53:96:be:fe:a7:9a:88:87:46:74:7a:27:bf:14:
ee:e7:2a:e2:9c:0d:e0:3c:4c:a9:3f:58:da:1d:66:
37:fe:fa:9f:23:5d:59:90:fa:dd:27:b4:a3:57:62:
25:25:a3:8a:e9:78:c2:7f:de:8d:af:13:5c:33:38:
45:10:cc:8a:cd:83:85:b4:fc:86:4a:30:da:af:8f:
e0:71:7a:fc:4c:4f:5b:4c:ab:13:0f:b1:6f:7b:9c:
3e:21:dd:7d:18:05:f2:56:d2:96:30:d8:88:9c:01:
93:76:4b:10:7a:15:32:45:5d:8d:13:d7:16:13:00:
05:97:59:1d:87:58:ec:4f:38:6b:ea:08:19:42:d5:
ee:d2:3f:83:3f:31:f0:61:55:46:db:5c:06:18:eb:
4b:c0:7c:f8:c8:0b:e5:cf:fa:39:e8:2b:c9:0c:13:
47:3f:72:81:34:57:b6:04:2e:10:be:8e:0d:df:84:
71:b3:f1:af:86:d2:d8:2b:f9:1d:9d:f3:0d:cc:47:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:18:71:03:2D:65:97:20:A4:D9:AD:89:AA:88:BE:82:D3:ED:26
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:b6:b4:3c:da:17:7b:db:d3:76:30:a8:b4:3a:3a:93:d0:
55:d4:6c:a2:7d:ab:b5:b5:82:7e:70:7a:24:93:36:0d:72:20:
8b:a4:d8:e5:05:a8:aa:f9:1f:26:a0:7a:80:88:43:27:9c:c6:
b2:0b:75:5a:e0:93:77:38:fa:d3:6d:3b:58:6a:c5:4b:87:e1:
d2:bd:bc:3c:12:98:d1:c5:52:9c:27:47:bc:39:30:1a:1c:e1:
30:68:c7:85:8a:ad:13:0b:c3:ef:22:9c:6a:4a:8f:a4:44:3b:
d0:77:24:e6:53:9c:b5:d0:a3:bc:ec:9a:1b:9a:6d:1b:1d:4b:
95:35:17:40:8c:b8:f4:b1:63:1d:1b:d9:86:36:a2:75:d9:a9:
cf:36:23:55:1d:99:a3:16:ec:6e:29:29:40:a0:bc:b1:b0:0a:
d9:6a:94:cf:2b:9b:0a:09:ed:3e:d4:51:63:41:45:f8:e2:a0:
4a:87:b4:74:26:e3:03:76:17:db:ed:75:b6:88:4c:a2:3b:f6:
fc:ec:f0:c8:9c:40:e8:ef:55:f0:a8:64:c6:6c:d5:49:b3:27:
78:55:c4:23:4d:47:f1:56:91:25:a8:52:03:42:85:23:f8:05:
0d:a0:15:84:d5:b0:ec:4c:cb:8c:96:3a:99:5e:da:c7:f3:68:
8c:5e:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:29 2026 by rpki-client