Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: 8DZt5RJ6Z8cw5/yLECtxmQxntKxetp5Kunirlwp/jGc=
Subject key identifier: ED:C9:76:B7:64:91:C1:69:E5:56:68:98:29:C8:BE:B7:C5:22:38:39
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 019D3307D392E4E34FC5BDC769999D422868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 0226
Signing time: Sat 28 Mar 2026 06:00:44 +0000
Manifest this update: Sat 28 Mar 2026 06:00:44 +0000
Manifest next update: Sun 29 Mar 2026 06:00:44 +0000
Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: jJn2XElFQ6jbh/xV4cUaoS4FXXGDYlyaEmDPUdqHRe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:d3:92:e4:e3:4f:c5:bd:c7:69:99:9d:42:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Mar 28 06:00:44 2026 GMT
Not After : Mar 29 06:00:44 2026 GMT
Subject: CN=edc976b76491c169e556689829c8beb7c5223839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:8f:0f:c6:3d:2e:3c:81:a5:da:20:56:03:
f9:e3:03:ce:69:bf:2d:04:ae:50:7e:91:54:93:b1:
6f:2a:b0:22:32:e8:d6:a0:0a:d1:ce:28:e1:bb:1a:
88:33:da:3d:4d:c4:31:c1:da:5f:4a:b5:17:00:b4:
08:a3:e3:50:77:b2:b8:f2:1f:cf:ac:a7:ee:da:35:
7c:6d:e0:9f:7b:3e:53:aa:1d:3e:c7:15:45:15:00:
75:9f:55:b7:d2:e1:b2:fe:3f:3a:bd:76:21:fe:41:
0a:b2:6c:52:5c:70:6f:64:8c:7a:95:94:71:17:fe:
6a:98:13:88:56:71:e5:66:66:3a:b9:8d:c0:86:f5:
52:de:59:d7:73:1e:50:0c:0f:71:36:14:14:68:63:
03:8a:18:f6:aa:bc:78:7c:26:34:42:a2:80:98:24:
ac:15:f5:1e:6b:16:4f:4d:80:8a:0a:72:f6:a6:38:
2b:35:5f:e8:a8:30:5e:2d:ce:54:12:b0:15:1b:0e:
6e:51:7b:bf:1e:1b:17:76:bf:12:87:44:88:7d:dd:
58:47:5d:04:a9:71:62:a5:0a:a6:32:44:58:9f:e6:
7c:b2:78:11:21:29:10:78:30:0b:7c:d2:aa:d8:94:
a3:b4:ba:ef:6a:96:31:81:7f:a6:9c:02:bc:73:87:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:76:B7:64:91:C1:69:E5:56:68:98:29:C8:BE:B7:C5:22:38:39
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:68:b7:93:c4:61:9f:e1:44:54:56:1d:e4:1a:ee:79:71:
6b:92:0b:c9:02:89:40:7d:4a:cc:93:42:1b:d8:e1:52:3f:28:
bc:0c:c4:d5:17:a6:41:71:1a:73:3b:fe:e5:4e:e4:b9:b4:c8:
f3:a0:17:c5:8c:2a:d2:65:2a:7c:aa:42:76:86:1b:a8:ae:bc:
0f:6d:8f:42:ca:43:a6:12:f8:96:39:53:93:ff:62:60:41:d9:
d4:31:29:da:b5:b2:dc:0e:14:cd:ee:be:52:93:0b:1e:d7:ae:
bd:c1:7f:c1:2e:a9:1c:d8:ee:f0:e8:b6:f3:6b:ba:9f:1a:e7:
83:e9:a3:0b:15:13:fb:bb:36:f2:eb:17:51:33:8a:c8:5d:d4:
4e:06:28:c5:3a:7f:61:ef:99:e7:d0:e7:20:19:8c:fc:ab:15:
2a:0e:12:3b:83:ae:2d:6b:fd:ea:25:a5:d5:88:b2:50:61:28:
3a:4e:58:7b:43:db:91:2e:a5:bd:55:b3:57:7a:c8:31:ee:3b:
7b:c9:d3:56:41:e5:53:d9:d7:0a:18:14:d0:53:c1:43:53:a3:
09:b5:c5:d6:9a:5d:cd:72:e3:86:70:67:1c:8e:ee:d8:99:e4:
9c:50:78:86:05:b6:7e:89:b5:2f:1e:5e:0f:0b:56:51:9f:e0:
f0:a3:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:09 2026 by rpki-client