Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: aW1RBljObZgTJsAttVcCYpqqJnm3fHj7YvWxbTMagMo=
Subject key identifier: 2C:69:BB:D8:02:91:1A:41:DF:C9:97:D9:47:A5:C3:C5:D9:36:CD:AF
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 019D2704364A9C90E99F2EB13605CC6141AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 0BAE
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: 6WBYXI8u/zfC+5YR6XqIaN/RqkqZY435tPBaKm8Xozo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:36:4a:9c:90:e9:9f:2e:b1:36:05:cc:61:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=2c69bbd802911a41dfc997d947a5c3c5d936cdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:9a:55:53:79:ed:f0:a2:5d:b3:a7:7a:79:
bc:84:b6:02:91:bd:71:58:ad:70:d0:6c:0b:17:45:
10:c3:af:9b:86:df:86:ce:2d:b1:d3:92:00:d1:8b:
1e:2c:f0:d5:02:5c:b3:48:a3:fe:35:e6:fe:a8:4a:
06:62:d3:af:06:b9:04:35:39:6b:66:b2:d3:f1:ce:
ce:41:bf:ca:67:3f:7a:9c:63:e3:0a:b8:c4:51:95:
e0:29:ea:d1:1a:74:6e:26:d4:76:9c:ed:1a:09:ee:
8d:ef:52:dd:86:43:fb:23:99:77:fa:52:8c:a1:5a:
e2:e0:23:5e:02:f9:40:91:54:ed:f2:70:15:24:08:
62:b5:cc:86:ab:8d:01:c5:4d:f0:d5:a4:11:e4:92:
84:17:cd:cd:f8:ce:96:93:a6:0e:fa:f0:ba:ce:79:
2d:74:bf:13:20:93:b6:37:79:42:1a:33:7c:0b:6a:
44:3e:a6:85:38:83:6f:11:92:7d:e6:ed:94:08:a6:
fc:74:17:30:fb:d2:d1:15:25:8a:e6:78:a8:a1:1b:
89:bb:5b:57:9e:85:fa:c3:29:65:19:0b:f0:f1:f7:
71:c9:37:90:e9:83:77:de:30:47:c1:5f:3e:61:13:
74:ad:0f:aa:6d:e7:1c:99:34:49:52:0d:56:d9:f7:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:BB:D8:02:91:1A:41:DF:C9:97:D9:47:A5:C3:C5:D9:36:CD:AF
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:1c:5d:1f:b0:43:1c:c7:13:2b:8c:bd:1e:7c:75:a0:36:
5c:77:dd:23:b4:38:21:ca:ff:62:c2:86:bc:29:98:94:3d:01:
a7:85:93:2e:8a:74:da:b5:d2:94:e3:e4:b3:d3:3a:f6:d1:90:
41:34:d2:c5:4e:88:ce:a4:17:f3:77:12:c2:3c:e0:aa:04:47:
8f:63:b2:74:61:e1:61:1f:a3:78:46:bf:f1:d9:6f:03:4e:90:
05:df:7d:9d:7f:6e:87:c3:fb:28:bd:5b:ed:f6:23:93:07:da:
17:b8:f1:58:35:52:46:c7:42:a9:65:c9:44:1d:fd:3d:e7:de:
8a:93:e5:76:e9:61:af:64:76:fa:cd:1e:6a:e9:f6:3c:ac:42:
d5:8a:fd:9d:7f:1e:ec:44:0b:d4:48:87:80:38:f5:6b:ae:fc:
13:8a:4c:62:c2:64:67:1f:50:b2:33:6a:cb:ca:7b:14:5d:6e:
31:34:db:f7:2c:d0:91:db:6e:06:2d:26:fd:30:02:d0:1b:87:
ec:a6:a8:cf:d1:56:67:f8:c3:48:3a:2a:64:eb:35:af:1d:91:
84:cc:2d:22:9f:c6:23:bc:aa:7c:96:9b:c0:87:f8:07:ea:18:
1a:21:8c:51:8e:26:34:9f:8a:f8:cd:bf:3c:c6:29:90:28:fc:
4f:bf:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:52 2026 by rpki-client