Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: iSZrRNFHDl8dwE/khsJxgT5qfav9zGjqiogxbsD+m+U=
Subject key identifier: 5F:43:D3:E1:55:F5:E5:7E:77:76:7D:1B:8D:50:9D:71:C0:1A:D7:F0
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 019D2771C7F3072FBE7886588F1DA8A7C060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: 02B5
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: fnGTUtLRT7/Ko0H0cklsyIKjekfCCq7vtq+InjyCeKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c7:f3:07:2f:be:78:86:58:8f:1d:a8:a7:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=5f43d3e155f5e57e77767d1b8d509d71c01ad7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:12:dc:52:87:65:10:0c:0f:0d:09:a6:8d:
f2:1e:c6:6f:2f:8b:f4:e5:37:2a:28:6b:e2:03:60:
da:77:67:6c:73:94:b9:29:87:77:d4:14:0f:3e:84:
ba:ef:77:ec:d2:02:cf:46:73:bd:db:9d:aa:eb:64:
93:88:b3:53:92:dc:2d:30:ba:75:a4:15:50:06:2f:
75:08:94:a2:d6:f2:85:3e:39:27:07:07:cd:93:bc:
f4:bf:8f:09:c6:db:0f:85:1e:1f:c2:34:01:48:11:
1c:b5:23:c8:62:c3:58:e5:71:fe:6b:80:d9:47:7a:
73:fa:96:3a:bb:69:39:8a:5e:10:a1:19:15:4a:11:
1c:bf:46:76:d6:f5:fb:16:4e:25:3a:ef:1e:81:5a:
94:b6:e3:ce:3f:72:15:53:c6:10:5f:4e:4e:93:bb:
36:e0:8b:08:70:8b:f5:c1:76:d0:5b:12:3c:a7:2c:
3f:f4:d4:e0:99:e9:d4:78:1c:f5:99:4a:2f:46:50:
d3:ed:17:b9:28:7d:61:82:9f:81:67:b0:fe:32:4b:
b8:44:0d:d9:c3:61:8a:84:ec:09:d6:29:0f:23:36:
75:da:0d:99:14:39:53:c5:7a:20:32:29:75:24:d7:
1d:e2:3a:1b:ad:9b:ff:59:49:64:8f:71:a0:e7:bf:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:43:D3:E1:55:F5:E5:7E:77:76:7D:1B:8D:50:9D:71:C0:1A:D7:F0
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6f:71:a3:86:c0:4e:8c:f0:13:8d:6e:8f:f2:9e:75:56:0e:
02:fc:a0:c9:34:f5:2a:01:54:c5:46:e2:5d:49:90:41:f0:ad:
da:ff:af:fc:40:33:e9:3f:92:4c:4b:59:ef:b3:9a:8f:b8:7e:
9c:62:7a:bf:7c:40:40:2d:00:0a:e0:2c:ea:4f:65:f7:89:59:
5e:b7:f9:01:12:76:ab:a0:79:c3:64:db:7f:01:b7:04:0d:40:
ef:8a:58:9f:81:93:ab:53:ae:38:2b:82:3f:bb:bf:14:7b:58:
6e:3b:04:b3:26:cd:b2:83:a6:0e:e1:5a:85:2b:7c:75:58:e2:
5b:ea:b4:ce:88:c8:75:84:4b:e5:40:a2:12:0e:63:e5:de:ea:
92:cf:9f:b2:d2:f6:b2:9e:d7:cc:0f:0f:06:7b:50:50:61:5f:
da:f8:f0:ac:06:f8:cd:bc:3f:17:b0:75:6e:8c:c3:39:ab:29:
8c:05:21:b1:f3:df:a9:cd:14:4e:73:1f:02:5e:3a:e8:6d:c2:
1e:2f:b5:0a:fa:c3:42:47:b3:ee:6c:7d:68:55:f7:07:62:c3:
98:d0:4d:c6:32:bf:e7:a9:ba:65:8d:75:19:d3:f1:d8:b1:28:
82:ba:8c:82:7f:56:ca:12:f2:b2:63:59:51:9e:89:a6:64:6c:
aa:3a:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:17 2026 by rpki-client