Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: 1cbIBjWVvpZKMdBfTMFolCjIE9rpp0mUIyxJxQsHxHM=
Subject key identifier: 8E:17:D8:39:B9:79:BE:27:B3:D5:27:A2:E1:17:39:AF:F5:4F:DD:AB
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 019D2704D0A0D292244B659F352AEFC0FB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: aEeLXJiQ/4UEr9KtBs+voEXdeqIQsnnhMRqw1iNQYc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d0:a0:d2:92:24:4b:65:9f:35:2a:ef:c0:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=8e17d839b979be27b3d527a2e11739aff54fddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:92:76:7b:cf:69:a0:6f:9c:93:21:6d:c6:
e7:50:03:b3:fa:fe:1e:28:2c:07:7e:87:c0:e6:b4:
2e:cb:02:b3:76:f2:53:af:93:c9:cc:e4:ec:43:c4:
fc:d7:8d:26:95:64:20:f9:ac:e1:df:a0:01:51:c4:
a4:37:23:ee:cc:db:7e:ba:a6:e6:1e:57:50:67:7c:
dd:46:d5:b1:ea:7e:ec:75:cd:88:58:67:d2:46:68:
d0:d9:77:72:d1:ef:a6:8c:b9:0a:f6:82:90:e0:d3:
da:1d:de:57:d0:48:05:1e:24:ef:14:8c:84:b6:a1:
67:19:b7:d0:72:4c:b8:75:e4:27:ac:a6:dc:75:f5:
70:11:23:c5:2a:3c:90:21:9b:78:bb:0f:33:7e:c3:
86:fd:f1:e1:94:2f:c7:82:6a:f3:ad:09:09:f9:3b:
36:ad:f9:44:11:58:93:fc:31:c5:a4:bc:4b:02:c1:
d0:2e:f6:6b:70:45:bf:4b:ae:0e:0f:39:07:54:a5:
e3:17:2a:0f:86:f5:b9:1c:22:bd:3c:d4:ef:da:6a:
76:18:11:5d:c9:da:7d:69:45:db:82:77:47:6f:64:
a4:b3:8d:71:fe:e5:3c:ff:fe:88:63:b6:1f:d9:f4:
77:5c:35:ca:37:d7:47:55:e7:81:5f:fb:c9:e4:50:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:17:D8:39:B9:79:BE:27:B3:D5:27:A2:E1:17:39:AF:F5:4F:DD:AB
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:33:cc:e0:f6:12:b7:50:9e:dd:df:1b:f8:e0:2e:59:fc:
3f:a5:ec:e1:34:fc:76:38:c6:5b:9f:4f:ea:86:82:e9:b8:d0:
33:a0:d9:b2:07:53:c0:4c:33:72:49:62:dc:33:98:f9:d5:f9:
16:7b:ed:e0:00:95:3d:a9:da:2c:63:75:ba:78:e7:40:2d:d8:
61:cf:c5:40:79:ee:b8:6b:77:5a:1e:f2:03:cb:f4:de:ec:0d:
83:ee:f4:8c:09:d3:98:1e:6b:22:e1:8e:0f:eb:b4:d2:39:ad:
37:96:c3:34:05:74:a1:32:c0:06:2d:c7:45:6f:67:af:32:d2:
f2:b3:11:d0:26:d8:f7:58:99:c2:e7:0f:46:ee:7e:9f:d4:7b:
9c:10:75:d9:cc:d3:24:38:55:f0:00:ef:91:da:97:51:db:29:
a4:8d:c3:5e:ba:61:c8:22:2c:5f:94:76:fd:57:90:05:ac:da:
af:30:6f:a2:3a:51:3a:67:97:fe:85:27:1d:fc:b9:e9:56:83:
47:79:50:8d:50:ad:12:b0:25:93:2a:bb:87:c5:36:ed:5f:62:
8b:f2:42:7a:8f:6c:1f:08:bb:56:fd:17:89:99:20:c5:41:a7:
1c:d6:1e:4e:7a:15:e4:a0:1a:b3:a9:d5:7b:63:16:af:ec:11:
e9:c2:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:30:38 2026 by rpki-client