Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: pZ5pWFgA4zZJVMR4cjLH9JqfFmDw71Aqvq4jvHJextA=
Subject key identifier: 80:D9:98:A3:C8:11:C2:49:0B:22:FF:80:97:32:68:5C:33:87:C9:8A
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 019D2772C147EC22DA19C37F7F0D77859472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 03E0
Signing time: Thu 26 Mar 2026 00:02:05 +0000
Manifest this update: Thu 26 Mar 2026 00:02:05 +0000
Manifest next update: Fri 27 Mar 2026 00:02:05 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: nfodoES60Q868zdF1HSmRQVudZF2KZRtkOnryV4KtbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c1:47:ec:22:da:19:c3:7f:7f:0d:77:85:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Mar 26 00:02:05 2026 GMT
Not After : Mar 27 00:02:05 2026 GMT
Subject: CN=80d998a3c811c2490b22ff809732685c3387c98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:82:3c:3d:03:6f:a8:8f:6f:d5:68:22:12:
17:4e:84:df:ac:49:41:d5:e5:c1:6f:4d:98:93:cb:
f7:19:87:71:af:aa:1c:1d:26:02:57:b9:9d:84:b2:
70:9e:7f:fd:04:0f:2f:5d:3b:f7:2b:6f:b4:30:25:
99:e3:f3:9f:62:54:d7:01:c0:2c:ec:7f:94:c0:b2:
ce:3d:16:01:dd:fe:0f:c2:f3:5d:4f:ef:a1:e5:c4:
34:e6:45:c9:31:36:b2:78:70:4c:b4:e4:c2:8d:2c:
b6:17:84:5f:13:28:cd:7f:25:9f:bc:e2:87:14:1d:
44:b8:06:62:b6:79:ed:83:bb:25:f2:cf:10:f4:5d:
cf:a2:56:8f:e3:b6:0e:f7:68:26:4f:65:9d:c8:25:
73:32:39:dd:83:4f:bb:da:3d:56:b1:21:48:2d:79:
2b:dc:3f:9c:23:46:31:7b:3f:20:b4:91:a0:c7:39:
85:7f:88:12:2d:84:7c:fa:8b:ab:05:e4:ae:a4:a0:
88:1b:b7:9c:49:97:69:4f:f1:65:3b:80:29:2a:26:
02:a6:ac:69:b7:5d:6f:38:b4:67:a3:5e:dc:61:29:
fa:82:c3:48:83:b0:08:21:89:86:8a:d6:01:30:49:
a9:27:29:a8:44:36:14:b5:2c:58:12:b7:b3:4b:66:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:98:A3:C8:11:C2:49:0B:22:FF:80:97:32:68:5C:33:87:C9:8A
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:49:a3:d7:48:df:a7:6f:b8:45:35:ac:1e:f5:09:83:5c:
a3:44:b7:ab:45:be:6d:60:e3:f5:61:2d:c8:15:4c:51:82:a8:
b3:a6:24:a4:8c:ba:4c:13:e1:0e:f1:ab:02:7a:86:96:55:4c:
6d:f7:22:4d:dd:80:5a:57:a0:5c:bd:2b:52:00:44:12:a0:fb:
c9:85:15:c1:a0:78:94:74:29:18:e1:b5:ca:54:54:ec:9d:60:
3b:17:2a:7e:f4:01:9b:a1:96:cd:c1:ca:17:09:50:71:d2:a4:
ed:26:a2:d5:4e:ec:44:1c:0b:9e:5a:25:4c:af:79:e1:4e:86:
0f:61:7b:20:b1:4d:d2:f6:58:cd:d2:04:10:87:71:94:e2:36:
12:2b:47:7f:48:70:18:b3:c1:ba:97:67:69:e6:17:3b:75:6a:
d6:e1:e9:70:9f:81:3a:ee:49:4e:23:05:4a:57:99:42:82:4e:
45:16:e0:6d:77:59:4d:d6:71:30:e9:eb:3d:53:20:c3:92:04:
3a:18:11:ff:37:d5:90:eb:cb:ba:5c:dc:81:ec:47:93:50:1e:
bf:e3:d9:af:56:03:b7:a2:ae:64:07:21:9f:40:9e:7e:bb:37:
85:6c:aa:0d:12:fa:90:01:19:9e:29:c0:75:bf:7a:80:0b:eb:
73:b1:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:20 2026 by rpki-client