Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft
File: y7cmPY1qcue3KibEOMxnxmoZRVI.mft (raw, json)
Hash identifier: oyW5q9lsQm7FF6mQeqMy0GqfplMhPgmcWAOmp02Tk/k=
Subject key identifier: 07:A3:EB:D1:BE:A0:6B:DB:91:D7:4C:DB:A8:3C:F2:85:A6:BF:D2:A9
Authority key identifier: CB:B7:26:3D:8D:6A:72:E7:B7:2A:26:C4:38:CC:67:C6:6A:19:45:52
Certificate issuer: /CN=cbb7263d8d6a72e7b72a26c438cc67c66a194552
Certificate serial: 019D254CED20AE1249AA0072D1CF74527037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft
Manifest number: A8
Signing time: Wed 25 Mar 2026 14:01:31 +0000
Manifest this update: Wed 25 Mar 2026 14:01:31 +0000
Manifest next update: Thu 26 Mar 2026 14:01:31 +0000
Files and hashes: 1: y7cmPY1qcue3KibEOMxnxmoZRVI.crl (hash: ceerMQcg9MLod4PBSPs2sPo4SdJLpLnJHwx/ZhIBDKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ed:20:ae:12:49:aa:00:72:d1:cf:74:52:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7263d8d6a72e7b72a26c438cc67c66a194552
Validity
Not Before: Mar 25 14:01:31 2026 GMT
Not After : Mar 26 14:01:31 2026 GMT
Subject: CN=07a3ebd1bea06bdb91d74cdba83cf285a6bfd2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:e2:e6:52:08:c2:43:d8:d7:13:ab:cb:f7:
3c:2c:02:5e:b8:e9:0a:84:49:7a:c1:c4:0a:e7:4e:
46:14:b5:bc:1f:d3:8b:c4:90:10:98:63:14:64:b6:
5f:fd:b5:8c:31:9e:b5:d5:3f:60:88:95:62:db:02:
cf:0d:7c:69:f6:5f:44:a5:16:68:3d:80:48:f7:3a:
b2:d9:65:61:47:c3:ad:dd:a3:a0:fb:2a:3b:5d:a2:
9a:1b:69:e2:99:7c:58:2c:2a:77:78:36:8b:0d:e3:
20:5c:c6:f5:32:79:11:4e:1c:fc:d7:ca:72:5b:d4:
34:ee:01:7e:06:50:bf:fc:85:99:71:1b:22:bf:65:
24:e1:71:42:06:45:22:87:21:e2:11:2b:cd:dd:de:
d3:a0:91:d2:4d:f4:46:de:53:66:8e:59:ab:66:13:
bd:80:57:b7:4c:7e:d9:eb:34:24:d8:41:2f:4b:20:
37:31:42:7e:e7:bd:ed:11:bf:a7:cb:b8:2d:0c:40:
f4:aa:72:80:96:08:5b:f7:0b:9c:34:41:43:e7:af:
4f:05:78:56:4e:4b:73:00:04:29:75:0a:b1:12:b9:
c2:ca:4f:75:33:45:75:0a:06:0e:c0:48:09:02:ca:
dc:b6:e2:72:f1:0a:56:97:04:1a:23:74:0a:87:c8:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:EB:D1:BE:A0:6B:DB:91:D7:4C:DB:A8:3C:F2:85:A6:BF:D2:A9
X509v3 Authority Key Identifier:
keyid:CB:B7:26:3D:8D:6A:72:E7:B7:2A:26:C4:38:CC:67:C6:6A:19:45:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7cmPY1qcue3KibEOMxnxmoZRVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/120a06-bce2-4928-bf78-afec9e6d33fd/1/y7cmPY1qcue3KibEOMxnxmoZRVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:a9:70:8d:77:e0:97:b8:ca:e9:fb:23:bc:91:c2:e3:c0:
97:00:e7:b2:7c:18:68:fc:f8:6d:ad:a8:12:a5:f7:a4:ee:2c:
ac:c5:1d:56:4a:e4:9c:bf:9a:20:3b:24:62:57:d0:c2:88:61:
11:10:93:8d:cf:79:bb:07:57:cc:e9:37:0a:9c:e3:31:60:33:
b1:6c:64:30:f4:a8:3d:9e:cc:c2:ef:30:62:63:2b:ef:64:58:
70:a4:c3:13:15:0b:ee:8b:25:3c:e2:9c:a0:01:9c:82:ed:b5:
33:2b:7e:01:05:7e:a6:3a:49:02:ee:ad:3b:f2:7f:34:b8:3a:
b6:07:d8:79:86:8d:d7:5b:38:7f:78:6a:5d:40:d5:29:9c:06:
af:64:14:d8:50:14:08:c5:49:20:e3:49:07:c4:eb:57:96:72:
08:f6:e5:ea:ba:bd:64:b9:ef:35:df:7f:8f:38:5c:cc:1b:09:
e5:92:5a:11:b1:15:c3:b0:94:30:57:7d:35:d0:8b:48:03:b1:
cd:f4:5a:fc:eb:33:c3:c0:9f:31:22:f0:df:79:24:f9:83:45:
9b:ed:5f:bc:e6:34:1c:10:8a:c1:42:8e:50:b7:80:90:5c:a3:
77:41:42:5d:e9:9c:36:8a:96:f8:ff:9a:e3:3b:19:50:f3:16:
d2:8c:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:07 2026 by rpki-client