Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: LNSZTVrbqvuUsKOXsKS8MP3xONbJFv2PXF3TL7mhqd0=
Subject key identifier: 1E:32:C3:5F:09:D4:5D:0E:5D:26:BA:3A:69:1C:47:22:C7:5E:BA:B5
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 019D37C09074D156EB81F107209D1495EFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 1286
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: Qcuf2a5e0TmmFpb9GMHE4r68CTDggrPp97KbxNIqFs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:90:74:d1:56:eb:81:f1:07:20:9d:14:95:ef:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=1e32c35f09d45d0e5d26ba3a691c4722c75ebab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:0d:dd:0c:95:d9:63:76:b7:b3:8b:21:1d:
64:a2:bb:59:4a:77:35:08:d4:a3:15:09:c4:a7:0d:
76:51:4a:1d:b7:bc:76:61:60:a6:fb:6d:9f:b5:0d:
9d:8e:df:77:25:15:fb:12:81:ff:1e:f1:6d:b2:08:
9b:9f:3d:e3:75:bd:ad:95:2b:37:28:27:4b:0d:f3:
59:bf:aa:10:2c:d0:bd:16:54:b6:cb:90:d9:be:d0:
7f:17:4c:5e:14:2a:d7:65:09:a7:d5:fb:ca:8b:82:
13:bb:4b:65:7f:0b:0d:86:92:44:97:6e:c9:38:7d:
67:d4:a2:e8:f7:79:a3:57:8b:0d:ae:80:e8:ef:7e:
39:d2:c5:59:9b:7a:3e:89:49:0a:59:4f:e9:58:ae:
c0:01:c7:6a:76:1a:33:bb:5d:2e:3f:9d:b6:61:c4:
cf:ea:5d:25:ca:6a:0e:ae:01:3b:91:59:4d:21:23:
5e:be:57:04:0f:6b:e5:5d:f0:5c:46:0b:31:5a:c5:
d8:4a:e4:8c:35:4a:f8:3b:6a:46:82:bd:70:03:6c:
28:90:c7:3b:c3:f8:36:12:ed:7b:4d:32:46:ff:93:
91:35:02:1f:4e:d7:8b:74:26:ea:de:37:71:5f:7d:
13:e7:c2:7f:9d:3c:3b:1e:8b:8f:ba:10:b5:f5:9f:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:C3:5F:09:D4:5D:0E:5D:26:BA:3A:69:1C:47:22:C7:5E:BA:B5
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:88:ef:41:c6:16:b0:5f:e6:db:a1:9d:bf:7c:b9:ad:9f:
b2:80:26:63:96:04:db:ec:25:fa:b0:99:b8:3e:0d:98:a5:ee:
a0:e6:8d:3f:74:ab:52:37:de:23:79:9c:22:e7:1b:f8:d6:6b:
75:eb:64:ed:f8:4d:9e:a8:a2:09:25:49:07:52:2f:7f:6d:27:
d0:0b:ad:b6:32:60:80:24:ee:38:12:d3:3e:c8:c2:af:0a:e7:
98:42:71:9b:bf:31:a7:49:7a:bf:d4:a4:f7:9a:e3:a5:c3:1e:
c4:68:b3:6d:2f:db:9d:a3:0e:86:c8:a2:ca:f6:05:90:98:76:
2b:bf:ce:8a:94:46:05:f4:fa:fe:2e:97:d1:21:75:b7:0f:80:
9d:a7:95:da:66:3d:46:8e:bf:ca:22:a6:a3:fa:b2:e8:10:52:
73:f5:07:cc:f8:49:fd:34:e8:58:41:ab:a6:68:10:2a:04:b4:
37:6b:52:dd:3c:55:02:91:67:bc:12:6b:83:e0:46:d4:44:77:
02:8e:f3:d4:04:4a:dd:22:cd:56:fd:ee:6f:34:66:52:ba:bb:
5a:30:3e:8d:72:e1:c6:a4:d4:45:c6:85:9c:2a:fa:0a:23:56:
40:54:1d:44:7e:c6:98:39:ff:b1:dd:fd:fa:ad:6e:04:ab:fd:
f6:51:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client