Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: TFdz+ufXJ1ACWrv4QFKJXKFjEJAZ2K7oLsNQy4N4f4U=
Subject key identifier: BE:82:11:AC:14:C6:BD:C3:3C:32:CC:5B:BE:CF:A6:CE:2B:F1:CD:E2
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019D2A04E6722BBBD9187B9B7B95A74BD46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 12:00:57 +0000
Manifest this update: Thu 26 Mar 2026 12:00:57 +0000
Manifest next update: Fri 27 Mar 2026 12:00:57 +0000
Files and hashes: 1: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: fjAYvtX327cWHiA4yeRoVA1OUkz7iwje4grEdHrtydU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:e6:72:2b:bb:d9:18:7b:9b:7b:95:a7:4b:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Mar 26 12:00:57 2026 GMT
Not After : Mar 27 12:00:57 2026 GMT
Subject: CN=be8211ac14c6bdc33c32cc5bbecfa6ce2bf1cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:96:f9:ec:93:b3:d7:81:df:92:51:1e:f0:
a1:0c:ad:80:f7:09:81:26:46:28:dd:0e:ca:d1:03:
a6:91:a3:10:20:32:ce:11:19:6f:38:59:34:aa:d6:
d2:fd:1d:51:c7:06:bf:b6:c4:87:56:b8:d0:fc:4a:
0b:27:89:48:50:c9:e7:2b:b1:6d:b6:0f:b4:e3:c8:
f6:4e:57:94:b6:ae:7c:66:64:e0:7d:3d:29:e7:57:
ff:3f:44:52:1c:2a:8d:ae:d6:2a:f7:d4:20:90:e1:
08:e1:fc:c1:f9:01:8a:96:21:d3:1d:a9:9a:ed:68:
2b:45:a1:4c:c5:22:a7:91:b8:96:1e:34:22:c8:aa:
8a:62:c3:2d:50:2d:bf:69:b0:59:33:70:8d:fc:d3:
f4:fe:2c:bd:60:97:e9:91:b9:f1:54:0d:11:e7:f4:
1d:8b:59:c8:80:7c:c6:d1:b6:8d:13:23:65:07:8b:
ad:e2:f8:0e:75:11:a2:96:c5:b0:de:3c:2a:e7:86:
b3:72:b8:53:64:1f:9f:ee:0e:f7:92:5f:39:1c:a9:
e5:39:16:23:a5:d0:d9:59:1a:26:c5:06:a1:58:aa:
e2:c3:b9:e5:56:73:bf:95:bc:2b:f8:1f:55:d7:f4:
64:05:56:d2:21:76:d2:5a:81:07:6b:75:7e:f2:55:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:11:AC:14:C6:BD:C3:3C:32:CC:5B:BE:CF:A6:CE:2B:F1:CD:E2
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a0:38:5e:94:66:a3:cc:da:89:42:3e:b1:37:74:01:03:7e:
7d:d9:91:98:ae:14:ff:df:98:fe:1e:a2:f4:d7:47:54:50:1e:
3a:f6:a6:16:a0:95:80:e1:a5:6b:26:f1:0e:88:d7:c7:cf:47:
9d:3b:e1:38:50:0c:2f:f1:4a:58:c0:5f:ec:d3:5e:23:b7:cc:
60:f3:73:0a:3e:6e:64:84:22:59:ab:e7:cd:02:b4:c0:af:f6:
44:c5:e6:d1:80:dc:c1:ad:03:0a:4c:e3:43:2c:01:3a:1c:49:
7a:eb:d8:de:f5:d4:04:2f:ad:df:0d:d2:63:39:69:6d:bf:c0:
44:b7:6e:fd:a4:9e:6e:1e:e0:8e:14:5d:13:a3:c1:e4:8f:de:
ac:52:8c:d4:b0:97:5c:5f:3e:f3:94:dc:38:23:39:ad:d1:51:
1a:6d:b7:be:92:ad:5d:65:b8:a4:dd:c0:e6:a1:99:81:53:aa:
1d:41:ba:0f:a5:49:31:31:ce:55:1c:e0:cd:b8:3d:69:2e:f5:
17:24:84:54:2a:b1:81:f3:ff:da:78:60:42:a6:e4:8e:16:73:
ae:7f:af:1b:74:6d:d5:c0:dc:26:0b:77:29:e0:20:17:c3:92:
3c:2a:22:9b:ee:56:4c:a4:94:32:28:20:0c:7b:d0:45:b1:c8:
29:6a:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:06 2026 by rpki-client