Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier: c0LA0pH88b6rzcGur4D8j5RWFSKBa9D0cvTaSolKUqU=
Subject key identifier: A9:38:F6:2D:C7:CC:2F:58:E3:79:33:69:50:93:58:18:69:A4:84:98
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial: 019D27E079E3D3334ADA393527F4B5A325D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number: 08B0
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: jYqyjwONxx8XBdedu8toRWeckmLq3Xhs6xTwuBK4uBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:79:e3:d3:33:4a:da:39:35:27:f4:b5:a3:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=a938f62dc7cc2f58e37933695093581869a48498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:2d:ed:a3:32:32:ac:04:7d:8b:67:89:eb:
76:dd:4f:12:6e:de:5d:76:9c:d7:bc:b9:c4:17:51:
5a:e1:51:de:84:eb:d4:36:bb:7e:56:58:9f:7e:8a:
c8:6c:2a:cf:55:ff:c4:51:d7:72:97:e8:2c:e8:49:
9a:63:36:e3:b8:d9:e8:bc:6e:ba:ba:04:9e:18:84:
2f:71:18:7d:02:03:9d:16:95:2e:f8:67:1f:d9:de:
b8:cf:77:12:44:13:52:2e:da:9d:90:3f:21:dd:3e:
84:c7:a9:52:00:50:be:eb:96:71:b6:65:22:67:dd:
c3:19:19:a2:90:83:2c:15:7d:59:b6:b7:49:86:1e:
b1:49:b9:5e:a9:c8:d3:59:a0:e5:56:78:64:f2:db:
fd:a6:2a:29:8a:ca:f3:96:71:f4:b6:fd:6a:83:2b:
b7:3d:9b:20:c9:80:46:8b:9e:90:f0:85:c2:c3:62:
27:c3:b3:75:45:c4:18:1a:12:9e:4d:fa:6b:5c:96:
dc:66:fb:63:f2:62:d4:b9:3a:ff:f7:8a:44:cd:f1:
6c:d3:bd:fe:4d:5c:1a:d3:41:2c:bd:13:9a:b8:ef:
64:a3:3a:07:61:85:80:6f:2d:e0:66:77:ec:9c:e5:
1f:c6:54:bf:75:99:ca:34:00:b0:fb:42:39:17:82:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:F6:2D:C7:CC:2F:58:E3:79:33:69:50:93:58:18:69:A4:84:98
X509v3 Authority Key Identifier:
keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:57:2e:2c:06:09:e0:92:49:a2:f9:64:25:b4:01:79:16:7f:
43:03:72:50:fa:ce:1c:3f:70:6a:2e:22:81:ab:f4:9d:3b:ed:
0b:c8:12:34:9d:c0:9d:ef:70:1a:0b:96:f0:a3:78:2b:ff:88:
ae:32:cc:f7:02:5d:07:4d:e2:19:33:27:17:70:e6:9a:0d:d7:
63:ac:04:da:38:a5:3a:73:1a:b8:0c:d4:4f:6b:f9:8e:ff:1c:
06:8d:e0:11:d3:14:79:07:15:09:6a:50:e5:45:4f:d2:81:4c:
1e:9f:56:85:be:56:9b:e7:74:62:9e:0d:e0:49:6f:c0:98:be:
8f:3a:99:4a:3a:6b:a9:83:05:5b:8b:02:c5:a1:9c:84:29:6b:
29:c3:a3:fd:95:03:7c:66:0a:4f:34:20:78:36:8b:41:be:93:
55:31:1a:43:e8:a6:52:27:c6:10:46:c2:39:09:b4:f7:bf:8e:
3d:32:cc:dd:c1:3b:26:94:4b:f7:ea:da:42:93:04:6f:e4:75:
6c:70:ff:c3:7c:c2:01:29:87:5e:03:b2:a2:77:a2:a8:87:11:
6c:cd:16:4c:6a:f9:8a:2e:38:b1:ea:f5:f1:6f:0b:81:50:8f:
6a:c5:37:89:20:cb:b4:fe:a0:94:99:3a:3b:e2:a4:7a:31:5d:
32:80:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:34 2026 by rpki-client