Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: jCI8Uo3vGSz3DuU+E3E2F4XFlWZf6B33zlyu4oRXEFU=
Subject key identifier: 65:A9:3B:7D:51:C8:B4:30:37:55:5D:25:BC:7E:D4:B4:9C:F3:5D:F3
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 019D2A04F915BA21D69222988B0B5DB6E781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0987
Signing time: Thu 26 Mar 2026 12:01:02 +0000
Manifest this update: Thu 26 Mar 2026 12:01:02 +0000
Manifest next update: Fri 27 Mar 2026 12:01:02 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: PdTOqfxvED17+RW0y7wOwOeNlOc6hcYRhqtRlu+nwm8=)
2: s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa (hash: BNwYHP0l3nBNhLmZ7ujjnphTmZw0h/PTPtEuxgq/BC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f9:15:ba:21:d6:92:22:98:8b:0b:5d:b6:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Mar 26 12:01:02 2026 GMT
Not After : Mar 27 12:01:02 2026 GMT
Subject: CN=65a93b7d51c8b43037555d25bc7ed4b49cf35df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:a4:e3:27:ef:15:9c:de:c7:ea:c5:cc:ee:
8d:47:39:5d:de:69:0e:ed:25:02:15:27:42:05:43:
2b:c9:ad:ba:9a:da:04:8c:92:10:02:aa:70:01:82:
f7:54:ec:ba:5a:d8:36:35:1b:d8:cf:09:4a:80:6e:
e7:27:16:77:a9:3e:03:8a:d3:1f:6d:99:b6:ba:df:
6b:da:89:39:e2:4c:88:93:3e:dc:a0:57:42:e6:30:
ce:9a:f0:24:b8:76:af:7c:26:39:4b:97:88:51:88:
fa:39:30:b0:e5:58:54:f0:1e:e2:bb:11:bb:bb:65:
19:59:b1:59:02:99:88:a4:c6:53:d0:82:da:b2:52:
fa:78:0f:f8:a7:96:bb:44:7b:05:e8:25:16:47:46:
99:ad:c7:bb:55:8b:63:d0:54:6f:e7:c8:20:10:81:
4e:37:5b:b6:17:dc:5f:69:cc:f5:ac:5f:21:fe:c7:
64:db:56:38:8c:98:7c:23:6f:bc:4f:55:0a:18:74:
24:19:e5:71:00:ed:5b:27:6c:79:90:8f:7d:46:0a:
59:07:09:84:93:5b:51:c2:e7:5c:6a:47:1b:1c:94:
ee:3a:51:f0:41:65:22:e6:dd:af:19:4d:8c:0d:43:
34:8e:a5:dc:9f:eb:fe:3f:1d:c2:ba:7a:3d:3b:9a:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:3B:7D:51:C8:B4:30:37:55:5D:25:BC:7E:D4:B4:9C:F3:5D:F3
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:11:ae:0a:e6:c7:1e:5d:7b:cd:9b:b1:51:66:3e:1e:66:
f1:48:63:43:ca:d9:68:b2:64:12:21:28:06:0f:33:93:6b:25:
1d:61:ed:47:3a:a4:a1:58:ec:1f:8a:59:0b:2d:cb:d7:ad:09:
78:87:9f:38:38:0b:e1:4d:8e:95:1c:bb:be:be:ec:64:70:f3:
6a:7e:00:c7:89:f4:32:23:87:6d:fd:e6:9e:4b:8d:63:4c:33:
f0:25:d8:7c:45:66:cd:6e:2d:6d:9a:00:d7:c3:ed:e0:31:a5:
ca:ff:6c:8d:72:12:f2:08:06:df:3a:63:43:38:53:c3:3a:f4:
95:5d:e4:d8:b0:89:94:de:3f:c7:be:46:d6:77:be:d5:19:42:
51:4d:f3:5c:35:46:a0:54:c5:d8:5a:f2:cc:5d:d3:1f:3a:ee:
04:bb:fc:d2:84:a8:cd:a1:de:9e:fc:d8:a0:fc:10:e0:3b:9b:
d9:e7:03:6a:05:30:58:be:f8:35:dd:45:c1:69:8f:30:05:27:
a9:a7:e6:0f:35:8c:12:8a:1c:f1:a4:84:c1:18:9d:70:ab:39:
50:60:fc:09:39:f5:a1:0d:7b:5d:0e:0d:8c:83:46:52:e5:78:
a0:8c:45:5d:bd:90:3f:a7:7e:6a:14:aa:ae:ea:0d:33:f4:9c:
52:1e:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:37 2026 by rpki-client