Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier: 0o2Z02wEXzobnMPoSfvvRjKQJJMpFgmdtHSRJArh8HI=
Subject key identifier: EB:18:4D:51:6A:14:C4:8E:84:AB:AE:82:6C:12:2B:9E:A0:D2:37:62
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial: 019D26965343001C1DF2FBE70BC0CDA8783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: gp5m0T6JYPW4wK1DCQ5xLFjXFgA5PJ91o5Iw+yMl9ko=)
2: vagnBvJ7GZHzOrybHsBa0u1gBGs.roa (hash: AHj1V+feefzLimbaTSC6tcBNqcISih6luVdAk+cmYzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:53:43:00:1c:1d:f2:fb:e7:0b:c0:cd:a8:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=eb184d516a14c48e84abae826c122b9ea0d23762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:56:45:b8:38:2f:51:18:b8:6e:a1:96:ab:
bd:f9:2d:a4:2c:69:65:37:ef:a2:7d:c3:4e:21:d5:
43:a2:03:36:99:da:b1:8e:8d:f9:3c:0e:5a:ee:99:
27:6a:3f:b3:e2:82:ff:b7:a5:f6:2b:87:b7:91:12:
37:60:78:56:87:57:73:49:4e:48:37:b5:78:df:29:
98:da:03:24:8e:59:40:fd:6f:fd:8d:20:23:ab:8a:
fb:a3:63:42:4c:52:c0:89:00:1d:72:f0:3f:b9:3f:
82:40:e3:0e:2a:9b:35:84:11:ac:a0:69:c0:c1:e0:
f4:d6:8f:53:36:62:87:31:5f:eb:f9:bc:35:a3:1e:
75:c0:fa:d9:97:51:ed:70:01:e0:03:68:fb:d5:ad:
db:5f:1c:e0:4a:11:99:38:06:c4:2a:8a:04:f7:42:
57:7e:3b:7b:f7:34:8e:55:a0:7b:be:56:d0:a9:45:
36:0c:eb:a5:3b:70:73:fa:48:bb:9b:16:86:67:6b:
67:85:0d:c0:1b:12:2c:05:b7:69:a2:14:8e:e7:eb:
77:91:28:46:9f:d1:e2:35:1c:3e:0d:8b:94:ce:26:
1b:28:27:3a:b6:57:a9:c2:13:87:d2:21:1e:5b:d8:
00:05:6d:5f:2a:35:e6:67:ad:6d:90:0c:61:51:21:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:4D:51:6A:14:C4:8E:84:AB:AE:82:6C:12:2B:9E:A0:D2:37:62
X509v3 Authority Key Identifier:
keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:2f:31:73:10:6f:3d:f3:ca:96:35:a0:82:c8:8f:cb:5d:
5c:88:8d:0c:a9:00:3c:c9:b8:18:e8:68:4f:2d:8f:20:7c:9b:
2d:ae:51:8d:5a:39:17:d6:28:6a:20:21:ce:cd:48:bd:78:5f:
b1:59:e0:49:4e:62:85:cf:2e:eb:0f:ac:4c:ea:d9:2e:6d:49:
47:9c:00:bf:d9:c4:07:53:f4:d5:30:61:bb:a7:05:bf:f1:8a:
25:2b:8d:d4:40:ff:e4:74:f3:05:68:2e:91:e7:70:96:f3:1d:
b0:d7:c8:62:8d:13:0b:96:be:e9:30:9d:c3:20:27:d3:de:83:
ea:ac:8e:aa:f2:17:38:b6:50:db:4a:55:1a:4e:d5:2d:59:63:
10:35:7c:09:c4:cc:09:51:4d:45:74:98:94:1a:ab:00:b4:b2:
2a:05:53:fa:e7:63:f8:ad:f0:c8:51:3e:97:95:c4:bb:78:3f:
40:f9:3e:06:2a:5a:e5:4e:c3:3b:f0:2a:0a:36:3e:6a:3b:bf:
3d:a1:db:ed:98:cb:ac:b0:0d:54:a7:6f:c7:ea:b5:c4:23:c5:
9d:2b:f2:ec:aa:96:7d:71:66:4e:ad:0d:4b:d5:1d:b6:c0:8a:
bd:32:06:25:51:b2:a4:c3:87:ab:8f:a1:46:6d:f1:61:d2:8c:
6d:21:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:28 2026 by rpki-client