Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json)
Hash identifier: jLRxJHV+grraCHA8DCzj0hSHdZjdNMN08ao3F+uNBkY=
Subject key identifier: 7D:51:0E:1F:68:71:6F:DB:F1:D4:5B:19:0C:B1:88:C1:D6:45:5B:70
Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55
Certificate serial: 019D2584400512CD1393195FD9A97924B96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
Manifest number: 0271
Signing time: Wed 25 Mar 2026 15:01:57 +0000
Manifest this update: Wed 25 Mar 2026 15:01:57 +0000
Manifest next update: Thu 26 Mar 2026 15:01:57 +0000
Files and hashes: 1: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: +1ktSgB7UUUmBIIcHnFVl6L04uHaBRi2Hk40Dt6yyCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:40:05:12:cd:13:93:19:5f:d9:a9:79:24:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55
Validity
Not Before: Mar 25 15:01:57 2026 GMT
Not After : Mar 26 15:01:57 2026 GMT
Subject: CN=7d510e1f68716fdbf1d45b190cb188c1d6455b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:be:b2:29:f4:5a:8d:e9:36:df:0b:ca:a5:
7e:aa:fa:69:b2:12:84:74:8f:b1:0b:d1:71:c4:d1:
af:60:0c:13:fb:e7:1c:61:36:8c:81:84:32:b5:d0:
43:81:9a:04:0c:1d:15:a9:3c:45:f5:c1:c7:d1:9c:
ec:bc:4e:e4:43:0e:f0:5c:65:4c:b2:f1:d5:60:c8:
4d:8e:cc:bd:b8:f7:22:64:cb:64:aa:3f:0f:58:f4:
65:8d:d4:06:6c:2e:6b:d5:6a:9a:dd:32:48:75:f7:
57:75:68:8d:ef:27:62:7a:ed:04:15:56:97:83:b9:
87:a3:51:d9:0e:6f:11:29:e1:ae:b5:09:d3:42:24:
ff:e4:1b:ea:b3:fb:e1:87:74:ff:21:76:04:71:d0:
64:c1:4a:33:0d:ac:d4:7d:12:aa:c1:37:04:03:22:
d1:8d:ed:eb:b9:0b:30:10:f3:56:0b:d4:5a:0e:0f:
a7:9b:36:5d:f9:90:af:2f:c5:e8:48:e4:0e:5c:d0:
6b:95:8f:d2:d2:66:15:02:5e:14:70:d7:86:34:78:
f2:9e:3f:fc:0b:30:a5:45:ff:2f:20:73:78:53:b6:
47:7a:6e:5c:a6:79:88:21:59:9e:6c:53:55:0e:2f:
06:9b:be:99:fe:ca:0c:ea:f0:af:a5:91:83:d1:4e:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:0E:1F:68:71:6F:DB:F1:D4:5B:19:0C:B1:88:C1:D6:45:5B:70
X509v3 Authority Key Identifier:
keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9c:b1:a2:d5:11:10:24:71:b6:dc:e8:09:48:03:32:98:e5:
63:ca:7d:cb:18:0b:46:5d:34:9f:a0:2a:c1:ba:f1:68:94:b5:
90:40:c2:79:ad:e7:28:5e:80:4c:4b:67:d3:ef:54:76:a6:43:
53:b0:d6:45:e8:ad:93:65:e6:ff:4d:f8:9e:f5:c3:af:f8:45:
99:2b:5d:f9:50:4e:43:8a:d3:a2:d3:f7:78:f6:d9:90:04:32:
cd:a6:de:0d:94:12:4b:32:98:18:e6:88:97:fa:80:b3:67:ce:
74:f2:c2:8d:86:17:73:ab:dc:17:4e:56:52:2f:be:a7:f3:ff:
70:53:dc:59:c9:f9:15:13:f8:e4:c7:e2:6a:6b:e2:37:e5:6d:
3b:d9:7d:8f:b0:22:1c:82:15:1b:01:a1:ab:9b:20:14:77:7a:
23:0a:27:1b:99:42:e0:74:f1:9b:7e:dd:d7:bb:43:75:4d:22:
fe:0b:06:39:0d:6b:a8:3e:e2:8d:a8:38:3a:b2:63:4e:f0:9e:
7c:2c:02:3b:c0:93:de:e8:ef:3c:ea:1d:a3:25:92:28:a5:8d:
f0:72:3d:ad:7a:24:c4:97:f1:77:4b:da:e6:24:c1:a2:25:b1:
77:ef:ec:7e:2d:a2:ed:78:5b:95:cb:8a:f7:55:83:7d:54:af:
0e:92:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:37 2026 by rpki-client