Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: Y1cBJFQgmEE6gCxqpCRJHmsT45gh67v8mcIsVLm3vBw=
Subject key identifier: BD:34:98:75:35:F2:1B:8A:CE:59:D4:D1:C6:CA:35:63:CF:D4:01:33
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 019D2704D3065BCB7AD63E0EE4FF0A247A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 1816
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: xt5aO5TexytxMvNEdj5n7/naHwRNnCfBbDtLnfw+ccQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d3:06:5b:cb:7a:d6:3e:0e:e4:ff:0a:24:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=bd34987535f21b8ace59d4d1c6ca3563cfd40133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:23:2f:39:3c:4c:db:5b:8a:9c:89:a4:9c:
e9:bc:27:34:e0:fa:0e:97:9e:2c:30:63:2d:40:0f:
58:26:64:c9:48:11:a0:99:5b:5a:99:e1:f4:50:45:
ba:c4:c6:03:f5:65:2f:1d:28:9a:d6:07:6a:0b:bd:
6f:45:ab:57:38:22:6e:47:a5:04:27:a4:c8:c5:27:
6e:e9:c0:86:5c:2d:33:10:07:85:0d:ea:fb:f6:f3:
ef:24:96:21:71:33:a3:07:8f:83:88:56:01:f6:b2:
45:9f:5a:03:4e:d4:f6:9f:0d:ab:bb:a4:12:b9:ca:
41:5a:66:61:d4:c7:e2:f9:b1:d1:49:0b:d5:de:42:
ab:47:20:14:e3:81:f6:c4:33:bc:ae:0a:c6:c4:a3:
2b:ef:37:5f:3e:d3:16:23:4f:13:8d:4a:4f:64:e1:
a6:4f:67:14:6f:a4:e3:2c:88:60:47:a0:c4:2d:6c:
87:e7:69:91:94:1d:04:9c:b7:14:39:d0:ae:3f:e0:
a6:f5:25:ee:e1:2d:64:6b:17:20:a2:43:97:85:5d:
9e:f8:95:c3:1f:1b:72:53:bd:b7:08:e4:95:8d:93:
d1:a8:e1:ac:32:82:e7:f2:da:e0:d7:27:b9:e7:15:
df:fd:92:7e:12:92:2a:0f:e8:4d:73:c7:88:f4:e7:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:98:75:35:F2:1B:8A:CE:59:D4:D1:C6:CA:35:63:CF:D4:01:33
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:57:fa:08:3e:f6:40:83:9c:30:34:72:4f:df:1c:7c:79:
43:16:dd:f8:1b:ea:85:b3:da:d1:27:ee:b2:a9:a8:b2:a1:e3:
fd:b0:13:3d:92:97:5d:70:b1:e6:db:8d:25:b7:55:dd:d9:2a:
fe:29:4f:fd:a8:89:af:9e:1f:13:fa:1d:3d:b3:a6:dc:c3:23:
b4:14:fb:62:ff:e5:ab:b9:e7:cd:5d:6d:5c:ab:3c:89:bd:eb:
d4:c5:bf:2e:76:5e:62:18:34:55:8d:28:c7:bb:b6:f1:08:b4:
57:b6:fb:05:3c:a2:42:7d:34:b1:8d:70:84:46:f8:9b:5c:3f:
eb:ad:a2:92:23:e8:a5:f6:c0:76:a1:8b:4a:95:26:cd:57:11:
ae:dc:72:67:0e:ff:1d:a2:89:b0:ae:c5:7b:71:21:88:89:44:
60:0d:02:45:75:af:98:d0:dc:44:d9:ea:29:67:fd:c9:ae:84:
59:62:a3:b4:2b:56:e7:f6:3f:8b:5b:bb:a4:35:be:ef:30:e6:
77:47:a0:aa:59:b7:95:21:f2:63:2e:10:b3:97:b2:f9:a8:eb:
ff:9e:4a:56:da:39:a7:bc:9a:a5:da:21:0e:e2:8c:c7:0e:49:
1a:a7:a6:a0:95:bc:41:71:12:69:bc:66:f9:0c:df:d8:58:4a:
44:30:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:08 2026 by rpki-client