Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
File: y3yVUPThoer5UHL7G5q7JpVNJj0.mft (raw, json)
Hash identifier: /H4JDpp8q/jbyoH7YsN/OhnGLEWUoVJEu7k3iA97U24=
Subject key identifier: B3:C8:09:82:24:D2:4A:E7:78:0A:4D:63:95:9C:E7:69:E7:AC:13:86
Authority key identifier: CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
Certificate issuer: /CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Certificate serial: 019D3940E687C71608C989CF54FC29465F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
Manifest number: 0F37
Signing time: Sun 29 Mar 2026 11:00:47 +0000
Manifest this update: Sun 29 Mar 2026 11:00:47 +0000
Manifest next update: Mon 30 Mar 2026 11:00:47 +0000
Files and hashes: 1: y3yVUPThoer5UHL7G5q7JpVNJj0.crl (hash: Brxgzco7JIrVRPMQrh7kPBkIYt72PU37HnWw+GE35bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e6:87:c7:16:08:c9:89:cf:54:fc:29:46:5f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7c9550f4e1a1eaf95072fb1b9abb26954d263d
Validity
Not Before: Mar 29 11:00:47 2026 GMT
Not After : Mar 30 11:00:47 2026 GMT
Subject: CN=b3c8098224d24ae7780a4d63959ce769e7ac1386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:67:a5:ac:92:5c:51:37:17:64:48:7c:e5:
b2:a2:19:57:c8:5a:5f:6d:57:68:f6:de:93:e7:51:
e9:fc:7a:1d:01:59:37:5d:c3:c5:b1:99:24:b2:ff:
d0:2e:5e:38:48:4a:f1:53:2f:f8:3a:79:d7:2b:eb:
68:d2:58:7a:80:c2:8b:01:59:68:9a:32:d6:e7:48:
e2:f3:f9:54:3a:98:d4:5d:0d:fe:01:19:9f:3d:33:
48:dd:00:e0:c7:90:e4:66:79:fd:57:f0:16:e8:8d:
f1:15:32:1d:9f:56:ef:ae:71:da:d0:47:8e:6e:0d:
98:e3:4c:f6:3f:5c:87:71:ea:46:5f:76:b4:1c:95:
54:4d:1b:37:c5:4b:77:1f:36:d5:7e:10:ee:38:e9:
77:ab:7f:db:6a:58:1b:ba:22:fb:56:2e:df:c8:61:
1a:1e:23:7f:14:d9:11:59:36:bd:0b:53:16:6d:b0:
51:96:f4:8e:bb:a9:01:49:b3:ac:4b:85:ab:32:84:
a9:79:a3:41:43:c1:66:a4:a5:e0:73:e5:f3:b3:67:
e8:21:ea:2a:fb:78:87:38:7c:25:71:92:e1:1a:07:
2b:da:56:4e:4f:30:d8:fb:10:ed:c7:ea:e4:b3:ca:
d2:20:32:87:cd:4a:60:5e:0e:97:15:09:18:4d:51:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:09:82:24:D2:4A:E7:78:0A:4D:63:95:9C:E7:69:E7:AC:13:86
X509v3 Authority Key Identifier:
keyid:CB:7C:95:50:F4:E1:A1:EA:F9:50:72:FB:1B:9A:BB:26:95:4D:26:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3yVUPThoer5UHL7G5q7JpVNJj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/689b19-4958-4423-85a9-9626f9f6cda2/1/y3yVUPThoer5UHL7G5q7JpVNJj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:88:ed:f5:a8:37:b4:a9:77:99:fd:15:af:aa:43:f7:e6:
f7:ba:6d:f6:d8:0b:06:86:5c:9f:56:de:07:0e:c7:42:03:e6:
ab:27:b2:64:15:bf:a4:9f:bd:fa:35:e5:79:fa:9f:fc:13:38:
07:33:3e:af:68:38:b9:38:ba:01:55:07:2c:f0:b2:dd:ec:3f:
28:f9:88:37:24:10:54:33:a9:be:6c:c7:b9:6c:de:a9:cc:fb:
be:37:ff:95:71:57:a2:cf:5f:68:57:78:a2:66:50:c5:97:54:
56:d8:e6:87:84:5d:98:21:f9:b2:ed:50:c4:92:6d:f8:49:53:
c0:b5:91:5c:27:b4:77:a0:4c:18:75:00:6e:c7:6a:55:d5:af:
3c:f1:98:51:ae:ef:d7:77:8b:40:26:c4:4e:5d:ad:5c:09:e6:
29:bd:17:20:f2:6b:7f:ab:b0:3e:8a:eb:a2:a9:b1:39:e2:fb:
42:a4:99:5d:09:a8:db:a9:c8:e1:86:be:50:4d:33:c2:4b:94:
99:09:14:70:f5:96:fd:16:63:9e:6c:38:f9:fe:09:61:e0:06:
56:45:82:74:79:b5:ed:d6:e2:57:bb:8d:f2:a7:b9:37:f2:91:
59:08:2e:1a:09:f0:20:a4:1d:74:6e:c9:e2:79:82:9a:91:6e:
aa:e0:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:02 2026 by rpki-client