Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
File: Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft (raw, json)
Hash identifier: gTd1h5njb3QXN6K6mlfNqSh4zdZFRF/iGTPqF3GEKLI=
Subject key identifier: CB:EB:F5:23:D9:6F:C0:64:21:05:EF:37:EF:A4:35:F9:BA:AD:AC:9A
Authority key identifier: 63:75:51:1F:F7:89:4C:BC:19:C6:31:D7:D1:D6:9A:3E:C3:9C:23:AC
Certificate issuer: /CN=6375511ff7894cbc19c631d7d1d69a3ec39c23ac
Certificate serial: 019D33ACD12125F5A7D640129297ED24AC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
Manifest number: 69
Signing time: Sat 28 Mar 2026 09:00:56 +0000
Manifest this update: Sat 28 Mar 2026 09:00:56 +0000
Manifest next update: Sun 29 Mar 2026 09:00:56 +0000
Files and hashes: 1: Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl (hash: rkKE7GmfzYuX/QQlIAlS6SnQttawABGq8nQpfll6JGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:d1:21:25:f5:a7:d6:40:12:92:97:ed:24:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6375511ff7894cbc19c631d7d1d69a3ec39c23ac
Validity
Not Before: Mar 28 09:00:56 2026 GMT
Not After : Mar 29 09:00:56 2026 GMT
Subject: CN=cbebf523d96fc0642105ef37efa435f9baadac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:f2:91:eb:9e:c9:e5:f5:f2:97:76:67:e0:
3f:94:aa:44:85:d9:fe:a9:80:97:fa:40:8e:19:c9:
b0:c1:3b:20:9c:ea:84:6e:58:2f:34:06:e4:f0:aa:
7f:cf:3b:88:2f:8a:67:d2:19:aa:19:5d:22:81:4f:
7b:8d:49:5b:b8:91:51:2a:73:26:90:67:30:86:b1:
08:87:ee:e3:3d:ca:e7:68:0a:95:83:9e:38:49:e1:
d2:0a:5a:b3:12:79:1e:8f:89:39:b1:17:c2:7a:8b:
21:ea:d2:df:1a:78:ce:2f:fd:02:27:a6:42:ea:e0:
f0:85:36:0d:f6:cd:35:35:26:aa:ae:fc:88:d6:b8:
95:cb:d5:18:2d:ad:c9:28:8e:39:5c:5d:f7:77:cc:
44:05:45:07:71:93:f1:77:2a:11:64:75:f1:73:97:
ad:33:74:5f:de:c2:3d:ae:22:6a:39:c6:34:6f:00:
f3:07:2f:19:12:80:34:12:86:c1:95:b1:c4:bd:c7:
7f:ea:33:f5:39:98:08:a0:7a:c6:01:8e:35:17:ee:
0f:6a:68:2f:a6:11:c2:6c:f8:3b:50:7d:64:38:84:
ab:92:a7:c4:18:54:68:0e:69:c4:31:f1:91:cb:e5:
09:cd:db:04:9e:83:58:ee:63:2b:04:36:a7:3d:53:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:F5:23:D9:6F:C0:64:21:05:EF:37:EF:A4:35:F9:BA:AD:AC:9A
X509v3 Authority Key Identifier:
keyid:63:75:51:1F:F7:89:4C:BC:19:C6:31:D7:D1:D6:9A:3E:C3:9C:23:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c0:91:41:b2:aa:be:93:08:87:12:78:5b:48:0f:1b:7a:3b:
40:ca:5f:09:10:70:74:06:31:47:15:27:c5:94:9f:fd:48:4e:
54:7f:56:4a:75:52:4b:88:56:93:9b:e1:f6:ff:77:c3:00:7f:
90:47:6d:af:30:b8:56:dc:32:29:0f:a8:1d:8c:50:2d:a2:bb:
41:96:00:33:59:61:1a:7b:68:ca:ff:d7:79:d3:8e:44:45:cd:
01:0c:4f:f7:45:4a:e1:ac:20:86:5a:22:59:41:1f:20:6b:94:
b3:19:c3:6d:e0:3b:03:92:6c:cb:9b:d3:ea:02:1e:a6:af:c7:
72:05:f4:c7:d8:a0:8f:ec:eb:7f:94:10:a2:5c:0d:7b:a4:82:
92:66:b6:ee:4a:5a:99:49:a2:f8:ef:be:4e:c1:71:22:59:a2:
af:73:ed:67:09:4a:d9:f7:30:29:3e:2e:f0:a7:df:52:3c:9d:
96:00:33:cd:6d:cd:72:87:47:bd:d9:eb:04:11:4e:9a:91:51:
d2:69:b3:41:82:f2:30:a4:e4:5e:93:be:30:f9:43:ed:d5:c4:
b6:14:39:fb:17:86:ea:92:b8:59:9d:cc:e3:3c:21:61:0e:d1:
0c:16:12:3c:15:39:cb:94:7e:c6:97:34:63:f6:42:6c:42:27:
27:b2:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:21 2026 by rpki-client