Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: uG4/sYSsRFTyJxZDNVTDv5eWf9H2MJs/deUdrCtGkP8=
Subject key identifier: 86:A8:0D:A5:4D:74:31:05:4B:60:D3:F3:E8:88:0A:FE:08:08:CB:6A
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 019D265F67FBE99D50E0CBD03CCB0049C92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 127D
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: 9FYR9hMaTSDG7JK30Hl+Ro9CUoEQsfMXZuzoLY9Blzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:67:fb:e9:9d:50:e0:cb:d0:3c:cb:00:49:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=86a80da54d7431054b60d3f3e8880afe0808cb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:08:b2:63:eb:49:9d:64:48:86:85:61:11:
c5:70:8b:46:80:19:87:38:50:2e:17:06:71:ec:5c:
58:91:03:fc:91:f6:f6:a3:3c:ae:fb:89:c4:09:1c:
65:24:9f:ed:19:5f:4e:c1:b5:80:bb:6e:82:a4:0f:
eb:48:50:1e:2d:c7:03:61:11:0c:8f:cb:c7:20:f4:
e0:6f:92:c0:07:e6:53:35:c7:f4:45:b0:f0:4a:4d:
94:f6:33:1c:d2:30:d4:a4:89:6e:52:06:a7:78:15:
45:bd:53:fa:e6:a6:e4:bc:64:d7:47:91:7d:a7:d4:
19:a9:2e:28:a3:e7:17:63:07:64:2e:6b:4a:94:26:
ae:56:e1:78:24:ba:ea:c4:09:f3:80:98:bb:e2:02:
b1:cd:ae:df:b2:c5:04:b5:a9:dc:bd:5b:cd:38:98:
75:24:da:26:bc:db:90:28:44:9a:39:dd:70:81:cc:
20:fa:dc:8f:0e:c7:63:bf:a2:98:bc:42:ac:5a:99:
74:c4:67:62:4d:ff:e9:0b:6a:50:39:21:53:d5:d5:
22:69:af:1f:c6:fc:89:be:64:aa:1a:e2:3b:be:6a:
1d:d0:26:37:dd:60:5d:03:51:9b:37:c0:c6:2b:1a:
29:b6:91:ef:b3:11:f0:70:28:8c:54:cd:15:f2:dc:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:0D:A5:4D:74:31:05:4B:60:D3:F3:E8:88:0A:FE:08:08:CB:6A
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:fd:8f:f6:f7:d4:1f:74:bf:a2:d6:36:d8:be:73:4c:46:
90:3d:d2:38:a6:97:96:7f:70:3f:b0:b3:67:e5:e2:ab:e4:f7:
0c:c0:12:95:a5:06:19:df:27:d9:92:a7:93:08:41:d3:bf:02:
b1:87:87:fd:fa:3b:48:59:b9:2f:11:26:e2:80:23:98:da:b8:
70:e2:c6:73:cf:89:6c:2f:db:66:39:2b:5a:9f:02:6e:80:8e:
09:84:51:9a:1b:b1:f9:6c:9c:54:05:c9:6a:ab:f1:bb:9e:c4:
30:d1:e4:82:fb:84:e4:af:d4:e0:ea:fc:a6:40:66:28:3c:63:
83:a1:ee:c1:12:2a:a2:e5:22:d1:97:05:06:2b:ba:32:9d:57:
af:66:bc:ea:33:23:01:c9:9e:bb:de:ef:03:f6:19:0b:6b:db:
ff:a2:c5:5b:78:43:f3:7b:9c:5c:15:f0:a0:ac:3b:38:c6:a2:
4d:ae:04:c0:30:61:68:dd:45:7d:c7:e1:93:af:b7:1a:c1:4b:
c3:d3:4f:4b:70:f0:2d:12:96:0f:74:0c:3c:37:16:71:88:cc:
a6:1c:28:90:8b:aa:47:9a:a7:45:42:d9:b8:bf:9c:3e:29:c4:
97:30:01:25:04:7f:f0:6c:34:68:2f:60:8d:77:1d:c9:95:17:
9b:85:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:16 2026 by rpki-client