Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: VQogivHMuqaqBw2eGQr4Q1g2Dt9K8cDn6ZVfAVl62ME=
Subject key identifier: 50:EA:89:A4:80:E6:B1:F0:C3:15:7A:BF:4E:80:D1:AA:B3:5E:37:57
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 019D28BB482A39A5A795DDADF78184057AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0DCE
Signing time: Thu 26 Mar 2026 06:00:55 +0000
Manifest this update: Thu 26 Mar 2026 06:00:55 +0000
Manifest next update: Fri 27 Mar 2026 06:00:55 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: VsYMLaYbUXkI8QLFtVYRl6zzNSNCz342A78iuMZ64t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:48:2a:39:a5:a7:95:dd:ad:f7:81:84:05:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Mar 26 06:00:55 2026 GMT
Not After : Mar 27 06:00:55 2026 GMT
Subject: CN=50ea89a480e6b1f0c3157abf4e80d1aab35e3757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:ee:38:45:1d:8d:18:56:44:f9:54:8f:21:
11:24:83:3f:db:92:a3:47:85:15:e5:1e:e3:f3:53:
20:9f:7f:c7:91:d3:68:46:2f:15:99:dc:1a:6c:d5:
21:f1:a2:09:e6:4c:1a:74:89:3a:57:50:eb:ef:9f:
46:c7:46:9e:e3:f7:90:99:92:87:6c:ca:01:6c:33:
40:e7:ee:09:ee:76:67:89:78:b5:54:b5:64:3d:7a:
9b:44:52:4d:95:88:23:59:56:8f:8f:c9:f9:fe:8d:
f2:f5:a3:5a:72:7a:86:24:65:8b:d7:1a:74:bb:c8:
1e:7f:95:29:f3:27:de:6a:95:c3:e5:d0:f9:ad:1f:
d9:e6:62:f0:67:3e:27:f0:eb:75:76:b2:75:bd:f5:
0a:b6:49:1d:a1:3c:80:27:d2:d7:8a:37:63:25:0b:
50:9a:4f:5e:ab:26:0b:65:3f:74:be:c3:e2:61:47:
10:6f:0a:52:93:b4:69:d6:21:3d:ff:fb:50:72:6a:
b2:07:b1:65:07:5a:05:e0:d2:5a:28:dc:9e:b9:a5:
14:18:90:70:f0:71:b9:38:2f:07:4c:e5:16:ae:bd:
18:3b:f3:ad:60:65:f1:19:5a:80:9e:5d:2d:e8:5b:
bd:c1:84:e5:6c:ea:4e:f6:a0:de:ac:89:33:56:a2:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:89:A4:80:E6:B1:F0:C3:15:7A:BF:4E:80:D1:AA:B3:5E:37:57
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:72:54:a3:b7:86:1a:7b:0d:cd:d4:c6:38:11:b7:1e:88:f2:
d5:46:c5:1d:ee:12:96:f9:da:87:f8:7b:35:72:49:bb:bf:36:
d6:0e:c3:78:94:03:0c:9d:8c:01:80:bc:be:be:75:62:9c:2a:
0f:36:2f:2b:b1:b5:12:85:6d:08:98:4e:88:d0:26:3a:02:27:
8c:0e:5b:f0:cc:97:fd:f0:36:85:b6:84:0a:3a:f5:39:ed:3b:
f4:0f:d2:83:bb:64:d2:c0:f6:08:8d:40:44:76:a5:17:4f:60:
94:bb:3d:00:ea:63:b5:c2:2b:41:ff:70:e2:54:02:81:17:85:
cb:c2:11:3c:da:0b:3f:a7:7d:ad:76:8b:33:24:e2:6a:03:8c:
40:ba:e3:96:e3:4e:64:06:5e:e5:e6:64:eb:23:01:40:c8:4c:
a4:8f:6f:67:c1:2f:a6:fd:ef:3d:9c:5c:88:02:03:37:bd:b1:
61:ac:ec:82:90:cb:3a:1e:39:d7:48:6b:0b:eb:83:50:ab:33:
08:37:b8:e3:9d:63:1b:96:5e:60:ca:a5:ae:96:42:9a:9e:c4:
89:70:10:d2:cd:f1:1c:5f:1c:2e:94:7a:c1:f1:9c:6d:81:e1:
bb:76:61:9b:a9:03:1d:13:54:c0:af:ed:b7:45:e4:03:7e:37:
c9:13:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:14 2026 by rpki-client