Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
File: RYYKw_LILnYscXB-YHYOM7mWLpY.mft (raw, json)
Hash identifier: uLL/RcWDYr3cfEquuC9w/Lj56JOpGBTUB/wrxvuyNuc=
Subject key identifier: 6D:97:E6:44:24:71:54:0B:01:B3:00:6E:62:AA:56:DE:09:D7:57:FE
Authority key identifier: 45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
Certificate issuer: /CN=45860ac3f2c82e762c71707e60760e33b9962e96
Certificate serial: 019D27E00ED53A356477F33839DC39EFFFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
Manifest number: 1B
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: RYYKw_LILnYscXB-YHYOM7mWLpY.crl (hash: uMK4nXlzwc435iR5UvanqKazyHZnEzQTOfHOy4yL8ho=)
2: mmEnZdJB5y2A5vx7a-IUKiFNSKo.roa (hash: h0AxjH15fpWyphKp2ONrmBwWqI/VqO79cDpaG7xwPAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0e:d5:3a:35:64:77:f3:38:39:dc:39:ef:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45860ac3f2c82e762c71707e60760e33b9962e96
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=6d97e6442471540b01b3006e62aa56de09d757fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:d6:2e:10:7f:16:6e:bd:4a:86:71:da:bd:
10:24:30:7f:ee:52:73:f5:3d:5d:3b:11:57:dd:5a:
06:d3:9d:d2:bf:63:1f:a4:ae:f9:de:be:f9:e5:03:
bf:c0:fb:d6:66:b2:62:99:1a:b4:13:51:e0:45:3e:
e9:49:63:0c:17:0d:cc:d1:21:50:17:ae:62:e0:f7:
f5:ff:48:e0:30:c7:77:14:53:7a:ee:43:cc:a8:ca:
f2:24:28:36:25:26:40:a1:6f:4c:11:01:ab:1b:29:
4b:9b:85:40:f8:03:69:ad:a3:70:b8:f2:d9:77:44:
cc:65:7b:2f:b2:dd:c9:85:1b:ee:e8:e1:9d:7f:84:
71:1a:07:5d:1d:e6:4d:f9:83:cd:98:03:b7:c2:af:
bf:0b:72:d9:42:ad:85:76:2e:9c:95:e4:07:a8:07:
15:52:19:54:39:e3:03:21:1a:67:5d:3b:ef:85:b5:
7d:58:cd:40:4a:b2:09:4d:ee:eb:a7:a5:57:0d:28:
46:5b:93:60:34:fe:40:78:3e:36:1b:3e:85:fa:eb:
a1:66:cd:fb:16:24:57:7c:5e:b7:b4:cd:eb:9b:c5:
3c:fb:e7:90:d1:01:1f:70:c4:70:d8:33:8e:68:1b:
f2:17:8d:d6:fa:b7:a9:1e:f3:e7:8f:0e:aa:20:8a:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:E6:44:24:71:54:0B:01:B3:00:6E:62:AA:56:DE:09:D7:57:FE
X509v3 Authority Key Identifier:
keyid:45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4e:73:01:16:8e:9e:8b:ab:ca:64:61:1e:75:5e:e5:cb:61:
d6:9a:df:a6:a0:5d:bd:ea:75:48:41:0f:d1:e2:32:1f:fd:6e:
aa:20:36:0e:7f:8e:4f:9d:ef:60:f7:6b:64:c3:60:5c:b6:0b:
bb:b7:4a:f5:be:3e:b5:93:a5:12:b9:05:a4:61:b0:6b:ca:6d:
a8:07:be:24:a5:c6:b4:86:d9:55:02:d9:2b:44:40:57:b1:c1:
6e:f5:9f:11:2d:5e:09:47:80:18:d3:87:62:5a:e2:6c:02:fe:
05:1e:3f:3d:01:e2:8d:f7:49:db:68:9a:2c:77:2f:f3:b2:f5:
16:1b:7a:3f:2d:74:06:9b:d4:db:04:15:b6:bf:6f:b2:2e:d9:
c4:61:15:14:42:c7:e8:08:52:b8:60:f7:1c:4e:df:45:ef:07:
e8:e9:8f:bd:80:c7:de:a8:60:4d:ac:b3:d2:9d:73:18:2a:b1:
73:d0:ad:98:85:00:26:54:aa:99:c7:ee:c7:58:b4:98:fa:64:
53:10:ee:a8:36:16:a9:09:df:2a:2b:90:f5:ac:d0:b2:76:e4:
2a:6f:25:e8:9f:57:51:e2:bf:41:c3:8f:66:a5:5b:0f:84:cc:
f6:ee:e7:66:20:5e:1f:ad:bd:82:5c:3b:33:3a:0b:92:ec:76:
f3:d7:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:49 2026 by rpki-client