Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: gT9HNa3xArFqqd6v6rDOmdaQBnOtc4HAi9fMFCYIyuU=
Subject key identifier: 39:5D:CF:5D:5F:33:CC:36:45:B9:21:5A:F5:3F:EB:4C:44:85:AB:73
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 019D3865E61FB6453D414EA9D6307769CF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 1059
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: Xtb0c8vQf1E+HvF7xXwYX4cdVUY/A/rcS/2FlQhazgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e6:1f:b6:45:3d:41:4e:a9:d6:30:77:69:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=395dcf5d5f33cc3645b9215af53feb4c4485ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:17:7e:8a:5c:20:2e:bf:39:39:4f:74:60:
19:40:82:b8:b5:cf:4b:5b:48:bc:e1:b1:3d:bf:95:
0b:3b:45:ae:01:5f:3c:ce:8a:b1:1a:b0:b3:50:04:
75:39:a0:11:03:09:a0:7b:f2:a7:79:b3:b9:dd:32:
11:af:45:53:09:b9:e4:ab:3b:e8:e4:8d:84:a7:77:
0c:f4:48:29:d0:39:18:58:11:08:45:a5:24:9c:15:
b7:f8:d5:21:88:4d:92:8d:5f:d1:31:8b:b1:91:2e:
27:ba:b9:a9:26:69:f8:80:03:c2:de:e3:17:92:1d:
61:53:48:b1:7f:fc:fa:8b:e0:b2:7f:46:df:e9:3b:
00:1e:90:a9:12:a1:82:e4:70:cf:cb:94:89:fe:7d:
f9:bc:27:1b:74:ed:a2:ad:00:04:10:bf:1d:f8:b3:
ca:9f:da:c3:bd:16:f6:ad:db:3c:74:60:0c:80:ce:
92:95:cb:c4:c9:7f:45:63:0c:de:db:95:dc:12:ae:
2c:ee:d7:9e:db:89:fd:be:8f:9e:31:0a:fd:4f:8a:
70:c8:ec:1f:bf:c7:df:b5:b3:0b:2b:70:71:a2:32:
94:7f:96:91:0f:1b:13:60:10:2b:97:6f:63:64:04:
be:9b:04:e6:d2:35:2a:87:db:04:40:f8:04:0f:43:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5D:CF:5D:5F:33:CC:36:45:B9:21:5A:F5:3F:EB:4C:44:85:AB:73
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:01:52:ca:dc:7a:35:7b:2b:6d:15:d1:89:22:a8:af:ba:16:
f2:78:0e:3c:5a:53:aa:35:31:9e:c8:5f:b5:65:fb:1e:08:b5:
7c:bb:1d:13:bb:a7:86:70:36:28:e4:c1:34:70:55:78:68:3f:
0c:17:52:b5:99:08:d2:24:50:50:2c:f8:6b:d9:2d:ce:c8:ae:
35:9c:7d:6d:78:05:ce:15:d8:8f:80:e2:0c:b7:32:a4:37:32:
e1:8e:8c:30:13:58:5b:0d:00:a3:83:eb:07:b7:37:10:ec:d1:
70:f1:50:5a:90:a3:06:92:46:bd:29:6a:5d:e7:85:c6:fa:b8:
87:cb:8d:d3:ad:3b:b9:d6:f7:a4:08:33:83:ab:e2:36:4c:cb:
3b:86:44:8f:21:bc:e1:7a:d7:80:a5:81:09:3b:e2:5f:37:6f:
5c:a0:a7:64:cb:6c:6f:57:d3:e3:88:5d:d2:4f:9d:9f:ea:38:
2f:d4:6a:ca:e7:19:c7:5c:93:32:7e:2b:a2:16:d1:21:c5:cc:
5e:7e:e7:75:27:29:96:48:b2:d0:8e:c0:1d:ac:e3:6d:89:94:
0f:f1:bc:ec:6d:c5:ec:6d:bc:14:56:68:f4:15:a6:c1:2d:30:
bf:f8:f3:3f:24:8c:76:ba:e2:e8:c3:4b:57:f4:06:62:cc:42:
37:eb:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:36 2026 by rpki-client