Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: x8MjHJyd5Y1pXRZOwHbkaw0SRC5qP7QEaowtiyWVGVo=
Subject key identifier: D9:12:3A:10:6E:91:9E:D9:99:78:91:C6:CD:8C:F3:F0:80:CA:4A:13
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019D38659CDC35E910CE17116C592DD2F1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 137C
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: UO8M2pr9C3g/RxvXsD4CB/RxsRbDDP9eTJ+aV1W540I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9c:dc:35:e9:10:ce:17:11:6c:59:2d:d2:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=d9123a106e919ed9997891c6cd8cf3f080ca4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:1e:ac:c6:10:52:04:b7:51:50:a5:b4:5c:
d6:ea:dc:40:f6:35:51:a0:8e:7f:4c:6e:a1:ef:7e:
54:b5:b0:6c:57:15:1d:6e:dc:f1:5e:9c:43:41:ad:
31:75:2a:a3:6a:40:b2:17:2d:53:87:3a:b3:d9:9b:
92:4f:4e:54:e8:de:42:a4:bd:ea:64:88:19:3d:43:
ca:b6:d6:ff:1b:de:bb:3e:17:71:00:ce:38:e8:bf:
48:1b:9e:b2:9a:57:d1:15:bb:b7:40:80:7e:07:31:
ef:56:6f:05:36:43:d5:c0:fd:48:71:b7:a8:60:d4:
b5:56:9a:2f:4a:9b:0d:f7:4e:14:f8:4e:b4:03:6c:
93:89:27:54:22:f8:06:b3:9e:65:26:d3:4e:d9:33:
d6:a3:d6:3c:16:3a:95:ad:bb:62:c4:24:2e:78:7e:
37:a7:a2:0f:27:96:0c:00:28:c2:24:1a:6e:46:75:
8c:ff:8c:5b:47:7b:ab:ad:49:38:e0:34:ee:b6:c8:
1c:57:3f:57:5c:9c:a6:9a:8e:22:f5:ac:c2:57:4e:
5c:86:7a:07:ff:97:93:e3:91:76:64:39:35:0f:7f:
8a:c6:c2:dc:30:b5:89:91:ed:06:be:58:90:74:5f:
63:f7:79:3d:49:d9:5a:ed:e1:65:9b:cf:63:fe:08:
d9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:3A:10:6E:91:9E:D9:99:78:91:C6:CD:8C:F3:F0:80:CA:4A:13
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:7b:53:16:84:b4:6b:eb:86:21:f7:66:3f:49:0c:e9:84:
d7:81:f7:14:24:08:83:95:9d:95:4d:a7:e9:39:8c:39:f2:7c:
05:40:63:ed:ea:28:a4:57:8f:2c:6c:a9:ec:d8:8b:43:c7:db:
03:a5:07:ea:c7:1d:2d:48:cf:df:f0:a4:59:c3:ce:47:3b:38:
b4:43:1e:4f:11:23:c6:93:75:ab:22:80:77:96:03:94:9a:03:
de:f1:2b:26:c5:fc:ef:b8:60:48:0d:e8:15:b7:97:14:2f:73:
6e:25:64:7f:62:2c:24:9c:f9:48:d3:3f:0a:6d:19:ad:b3:d6:
e6:4f:05:19:06:f2:1c:55:88:ab:32:15:f2:81:43:4c:7f:fc:
ff:66:01:a2:33:d4:e0:d2:ca:35:60:72:bf:6d:bc:fa:c6:1a:
ec:06:7f:4d:b5:cd:f9:39:ed:6e:ff:a7:13:ee:de:ce:49:43:
29:f7:80:fc:e1:00:5d:8a:d0:f4:dd:c9:b4:0d:9e:0e:70:3d:
e5:3a:7b:4e:0c:f9:ba:a4:cc:54:5e:7b:5b:62:da:be:ce:8c:
fa:0d:1e:6c:13:a2:cf:9c:76:55:d3:9d:f9:b5:16:9f:31:9d:
e9:f9:dd:94:8d:91:3a:0b:cc:22:83:25:ca:95:79:c9:09:b5:
a6:86:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:12 2026 by rpki-client