Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json)
Hash identifier: Ufkh3l2htN2654G0xyPPor0i4oc/3iWHPmTUtFHCWps=
Subject key identifier: 1D:C3:BE:15:9E:52:96:03:0C:9B:72:03:8C:3B:BD:75:B4:AA:CA:32
Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
Certificate issuer: /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Certificate serial: 019D299771F3DD06E2948EB29FDBFCE733A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
Manifest number: 0A12
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: 91vqz1rtNUQHC7JSUiU3SHOD1xCZvww/kDfLrbk8SiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:71:f3:dd:06:e2:94:8e:b2:9f:db:fc:e7:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=1dc3be159e5296030c9b72038c3bbd75b4aaca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:30:86:f1:5e:00:9b:2b:7f:af:63:0b:9a:
34:26:bc:8d:2e:0c:ef:66:54:cc:fc:10:5d:74:71:
55:87:4a:93:30:3c:17:6a:63:f8:3b:96:eb:02:fe:
bc:81:e9:9f:aa:c1:01:9b:34:c3:ee:80:44:99:ad:
55:56:8f:e1:11:e8:25:f9:49:e6:0c:8e:a1:16:52:
be:9e:7c:0b:2b:54:fd:d7:e6:b9:ed:a7:89:e5:f5:
5e:52:af:a2:b6:5a:fe:f3:7a:67:3e:d5:33:4d:a3:
2f:a6:f5:80:8a:41:61:d0:bb:76:e5:b9:50:bd:ff:
11:5c:95:f5:97:8c:fe:55:63:f1:98:49:ec:21:ec:
28:5f:f4:f9:c7:62:36:2e:78:95:3e:d0:4c:36:3a:
e0:9e:ab:01:ab:55:6c:de:2b:2b:b8:be:b4:39:7f:
92:8e:9a:ba:7d:92:5e:46:64:09:57:fb:62:86:00:
4e:0d:6f:6b:a9:f7:b5:af:16:0f:57:98:3e:ab:6a:
46:69:e8:3f:6d:b0:ab:66:6b:2b:53:a9:51:3a:4d:
b1:0d:e0:57:82:07:80:2b:0b:48:a5:9d:1f:5e:c9:
3b:5f:fd:10:1d:b3:32:fc:17:56:85:49:75:4b:77:
a7:98:93:a7:97:35:6e:0c:98:03:1e:8b:74:ee:41:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:BE:15:9E:52:96:03:0C:9B:72:03:8C:3B:BD:75:B4:AA:CA:32
X509v3 Authority Key Identifier:
keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:86:65:d3:3f:f0:e1:8e:5d:bb:f2:6d:fd:42:ff:d8:f7:25:
9c:93:99:d9:b7:95:e1:7e:7b:bc:1d:ed:26:8f:ef:33:e5:4c:
44:51:7e:9a:14:dd:06:34:9f:e8:42:56:9e:1a:7e:44:ce:e7:
ec:c1:55:9b:23:1f:81:e8:16:4c:06:13:c6:aa:80:6c:3b:b7:
66:75:f0:98:91:3f:13:63:80:9c:58:4a:19:5a:de:22:07:c0:
d2:7b:3d:b2:2a:b4:16:59:ef:38:eb:44:46:2a:4e:50:99:a8:
a5:c6:21:82:b0:e5:df:f3:9a:e4:13:f4:32:9d:43:9b:d3:e4:
60:7b:05:84:32:8c:59:b5:0a:d7:c2:fb:93:50:64:dd:00:d5:
a9:4e:f1:5c:6d:43:ac:5d:03:f7:90:6a:cf:d4:a3:67:d1:05:
5c:61:53:f9:33:17:fb:56:7d:a3:f6:13:09:9a:4a:2f:7d:3a:
2a:6b:d0:54:9a:e1:c2:58:c7:79:c4:42:20:31:cb:bf:62:42:
c0:b8:c6:45:49:71:f3:e2:bd:b5:e1:1c:9c:be:92:9f:df:c9:
dd:91:9d:84:94:e1:f3:81:12:ac:6a:fa:8f:d3:94:3c:20:e7:
0f:89:ae:c3:6b:2f:5c:a3:7a:9f:af:c8:27:99:2e:85:6a:e2:
91:8e:7c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3Hz3QbilI6yn9v85zOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYThjYTE2NjYyMDZkMmNmMTJiNTA3ODcyZWFkMGY1YTc5
M2QwZTAwHhcNMjYwMzI2MTAwMTI0WhcNMjYwMzI3MTAwMTI0WjAzMTEwLwYDVQQD
EygxZGMzYmUxNTllNTI5NjAzMGM5YjcyMDM4YzNiYmQ3NWI0YWFjYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOYwhvFeAJsrf69jC5o0JryNLgzv
ZlTM/BBddHFVh0qTMDwXamP4O5brAv68gemfqsEBmzTD7oBEma1VVo/hEegl+Unm
DI6hFlK+nnwLK1T91+a57aeJ5fVeUq+itlr+83pnPtUzTaMvpvWAikFh0Lt25blQ
vf8RXJX1l4z+VWPxmEnsIewoX/T5x2I2LniVPtBMNjrgnqsBq1Vs3isruL60OX+S
jpq6fZJeRmQJV/tihgBODW9rqfe1rxYPV5g+q2pGaeg/bbCrZmsrU6lROk2xDeBX
ggeAKwtIpZ0fXsk7X/0QHbMy/BdWhUl1S3enmJOnlzVuDJgDHot07kH6zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3DvhWeUpYDDJtyA4w7vXW0qsoyMB8GA1UdIwQY
MBaAFGOoyhZmIG0s8StQeHLq0PWnk9DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEt
NzVhYjIxZjNiM2QwLzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEtNzVhYjIxZjNiM2Qw
LzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIZl0z/w
4Y5du/Jt/UL/2PclnJOZ2beV4X57vB3tJo/vM+VMRFF+mhTdBjSf6EJWnhp+RM7n
7MFVmyMfgegWTAYTxqqAbDu3ZnXwmJE/E2OAnFhKGVreIgfA0ns9siq0FlnvOOtE
RipOUJmopcYhgrDl3/Oa5BP0Mp1Dm9PkYHsFhDKMWbUK18L7k1Bk3QDVqU7xXG1D
rF0D95Bqz9SjZ9EFXGFT+TMX+1Z9o/YTCZpKL306KmvQVJrhwljHecRCIDHLv2JC
wLjGRUlx8+K9teEcnL6Sn9/J3ZGdhJTh84ESrGr6j9OUPCDnD4muw2svXKN6n6/I
J5kuhWrikY58ew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:33 2026 by rpki-client