Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: PlnxMuT9zU5Y+8dfNovA19o65FbHag3SukUh5jqNGH0=
Subject key identifier: 2E:79:80:54:7A:C0:D7:AB:7C:52:D1:A9:3A:12:6C:E2:19:4D:02:EE
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 019D2703F7DDC297C0A1435F46072C632118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 06E8
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: J8tFy34l/0jeXR4Xo6QuJlxhdRc27vbRoRJuAxLO9T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f7:dd:c2:97:c0:a1:43:5f:46:07:2c:63:21:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=2e7980547ac0d7ab7c52d1a93a126ce2194d02ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:6a:a4:20:24:91:14:0b:df:d5:6d:b8:2b:
b9:fb:a9:f3:d1:6b:75:47:73:b4:cf:3b:63:d7:2c:
87:79:e0:b7:ff:25:e3:20:4c:8f:d0:86:0a:27:34:
1d:e2:9c:78:fb:d3:f9:92:6f:52:18:6b:ec:c4:1e:
57:d3:c9:90:e2:f7:18:ad:72:32:5b:f6:ee:12:df:
54:14:45:a7:61:c9:08:19:4b:7a:23:ee:7a:89:c3:
52:99:44:e8:43:d2:93:d9:41:f1:21:12:ee:7d:14:
ea:df:d2:92:23:72:dd:28:09:0a:bb:91:c3:dc:ef:
81:c5:71:b8:bc:17:f1:c2:01:df:d9:12:e4:6f:75:
05:99:a3:24:1a:7c:f4:70:83:a0:c5:01:14:3d:3c:
4e:98:10:44:d2:4c:53:d7:13:a8:54:34:6f:38:90:
87:8a:1a:f7:46:84:42:5c:09:32:07:1e:1c:6d:39:
25:16:51:61:c2:b6:7a:39:a1:e9:e2:08:dd:83:85:
76:83:a4:91:5d:e2:b0:e6:f5:c0:8b:7c:d7:21:0c:
80:0d:c9:3f:82:e2:d7:8b:35:2f:7e:98:fe:a0:94:
14:2f:1a:ea:6b:16:64:bc:f2:31:a8:4a:86:c0:e0:
93:9b:2e:43:d6:ba:3e:47:54:d4:b8:3d:71:4d:d5:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:80:54:7A:C0:D7:AB:7C:52:D1:A9:3A:12:6C:E2:19:4D:02:EE
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:55:4d:86:0a:51:c7:64:d6:8e:43:12:fe:df:f0:7d:3e:57:
91:c5:e3:cc:9a:cc:7a:91:7a:a1:2d:7a:41:52:c8:26:c9:33:
ee:16:00:7c:e1:2b:82:77:64:05:ab:85:f7:a4:22:8e:b0:64:
a2:2a:f0:f4:fb:7b:3c:b3:b2:5a:8b:fb:12:c8:43:39:54:67:
ee:17:b1:5a:98:7a:5e:1d:07:34:67:c1:d6:5d:45:d2:26:a8:
41:ef:3a:80:47:ed:0f:9a:22:93:f9:6f:69:1a:db:6c:46:2a:
23:78:db:86:cc:9f:bb:89:93:0f:6a:46:3b:94:1d:d1:d3:01:
6c:53:c9:88:0f:53:0f:3a:5a:7a:4a:73:98:3c:76:e1:65:a9:
85:21:78:af:53:04:66:d6:4e:08:06:2f:ca:4f:fc:ba:30:94:
11:60:42:67:f2:79:da:7b:18:8b:d4:df:33:cf:fe:aa:cf:ee:
f9:ca:5a:a7:b4:d6:02:e3:3b:9e:10:02:e9:4a:d0:75:2e:0d:
9e:49:80:20:a0:cb:cd:5c:fd:30:6e:c0:a9:a3:db:93:46:5b:
dd:7b:bc:ef:35:6b:e1:c5:3c:8c:a8:77:44:72:18:65:0b:8d:
78:8a:1b:fc:b4:4a:bd:2e:c8:67:7f:b7:ee:1e:fe:07:a1:dc:
cf:9d:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:16 2026 by rpki-client