Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
File: cnOYybFuqY0iKkwpyvey68mE8oI.mft (raw, json)
Hash identifier: CIauGdslxQPhcQgpWgFuFYIMljtgzrkpU9nkjjtR9Ms=
Subject key identifier: 54:DA:6B:CB:CD:12:AD:45:99:0F:4C:A7:3C:E3:4F:84:4B:5F:D9:7D
Authority key identifier: 72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
Certificate issuer: /CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Certificate serial: 019D28F2EDFE639EA8C83CA6C2DB3C7A277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
Manifest number: 041F
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: cnOYybFuqY0iKkwpyvey68mE8oI.crl (hash: K7fkSN9ZPFkw9SJJ6/Xn+MSitBMpNqIpd+8++4Ef1bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:ed:fe:63:9e:a8:c8:3c:a6:c2:db:3c:7a:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727398c9b16ea98d222a4c29caf7b2ebc984f282
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=54da6bcbcd12ad45990f4ca73ce34f844b5fd97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:42:65:ce:45:e9:2a:61:63:20:e8:f3:90:
12:fe:f7:95:9b:84:c2:d1:d5:1f:91:22:ba:32:96:
08:f3:fd:df:cf:49:66:bf:1b:f6:4c:75:08:84:72:
b9:e9:87:f4:44:28:e0:e1:de:eb:47:22:3f:37:f2:
f4:ee:50:eb:f0:b3:a0:b4:80:50:78:55:02:9b:5d:
28:5f:b6:e4:ce:47:bb:f8:b9:d1:b7:82:3e:19:c3:
15:7c:37:b0:12:99:6f:46:ef:8c:4d:6d:5b:13:4d:
7d:76:c9:36:2c:c3:96:6e:e1:17:f2:bc:e4:38:c1:
68:99:07:17:8d:5b:12:9c:bf:e4:ed:4b:59:34:79:
19:7d:d9:f4:2e:c4:80:7c:0f:7b:ed:34:71:a5:d7:
ca:60:46:9c:1c:69:f6:b6:8f:4c:e2:b2:58:77:02:
39:dc:ba:5a:9d:d0:31:6d:a7:c9:ef:e1:05:ba:c0:
45:ca:4c:20:49:09:85:79:dc:a5:09:33:5b:a0:d4:
dc:a5:e3:68:21:0e:7e:8f:35:9f:cf:a4:e1:18:da:
db:f1:c5:0e:54:b1:e6:30:15:e1:8f:55:47:3b:18:
22:25:d2:7c:e6:0a:f7:ba:3b:62:96:71:a7:a4:83:
57:e2:83:8b:e1:db:77:e0:77:9e:6f:2a:ba:6b:99:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:6B:CB:CD:12:AD:45:99:0F:4C:A7:3C:E3:4F:84:4B:5F:D9:7D
X509v3 Authority Key Identifier:
keyid:72:73:98:C9:B1:6E:A9:8D:22:2A:4C:29:CA:F7:B2:EB:C9:84:F2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnOYybFuqY0iKkwpyvey68mE8oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3c604e-e6a8-4e4e-b769-5a07e26fb822/1/cnOYybFuqY0iKkwpyvey68mE8oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:77:35:c7:73:81:ad:e2:48:00:ce:99:ab:b3:28:93:45:
90:d0:ba:0c:72:ab:99:ee:51:87:84:aa:80:d1:00:d5:39:b9:
79:32:11:71:6a:3f:35:ae:b1:c6:02:37:fe:47:0b:cf:f6:24:
6c:31:56:70:dc:18:4e:05:70:24:42:e9:8e:99:e8:60:92:d2:
c5:f4:2a:4f:db:c2:44:b3:81:22:b5:9a:22:9a:69:05:57:b4:
b7:b3:dd:4d:6f:2c:1e:0d:c5:32:84:0d:4a:22:03:93:08:00:
31:f1:e6:3b:80:fe:19:9a:0d:c5:52:eb:36:92:eb:9b:e9:8a:
ad:ec:ee:4d:b5:32:97:40:4c:9f:20:d5:67:78:3f:1e:b0:d0:
af:1c:4a:ee:90:85:f6:28:9e:60:8e:13:5b:c7:a4:ce:e8:2d:
58:fb:e8:a1:a6:f2:32:21:55:e6:b5:2b:48:9a:d1:2d:7d:57:
12:e6:b5:9d:98:76:a7:dc:03:11:72:82:b9:7e:70:84:80:9c:
8e:48:4f:dc:01:eb:15:22:c5:4f:c0:57:5b:28:38:7f:63:27:
40:2b:ed:c0:1d:54:dd:f5:01:e2:e1:91:c7:3e:46:19:f5:6f:
c5:4c:7e:73:41:79:28:bf:d0:44:ae:aa:bb:2a:e0:97:3f:a8:
dd:73:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:04 2026 by rpki-client