Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
File: y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft (raw, json)
Hash identifier: okDLprPpzlgaIJNJzcdc1HXbeIPVVrHid2nJ07CS444=
Subject key identifier: 13:C3:A1:5A:E6:81:F4:89:C0:21:4C:80:73:2A:9C:D9:CF:F7:06:0B
Authority key identifier: CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
Certificate issuer: /CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Certificate serial: 019D38D2DB59A1F92686B92BC034C3083EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
Manifest number: 02BE
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl (hash: EfSj57juq+g98ey/pRQNC9+2HePtPPWUXODTqkEZ2gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:db:59:a1:f9:26:86:b9:2b:c0:34:c3:08:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7973b6a3c322e71946e7da700ffbd3b0a097e
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=13c3a15ae681f489c0214c80732a9cd9cff7060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:16:d4:24:7d:68:77:e7:dd:1d:92:d0:81:
ef:fa:14:c5:92:53:6d:9d:13:2a:24:c5:61:d9:11:
30:8d:07:8c:2d:af:25:2b:26:81:ea:1e:55:b7:fb:
86:48:7c:d4:a8:c6:91:06:f3:2e:73:96:0c:74:5e:
20:1e:0e:a1:76:28:4f:77:27:a7:cc:b1:1f:1d:ce:
d7:62:d0:99:60:fd:7d:6b:fc:83:bd:15:c5:b6:5e:
62:b1:84:c3:fc:eb:6f:4a:c7:d2:0f:45:17:75:15:
84:47:bc:bb:fd:ee:93:d5:da:b5:2d:07:a8:8b:8c:
2b:df:2f:4a:b8:62:2d:f0:95:be:4b:d7:a1:80:c7:
3e:be:d5:48:12:6b:5c:70:fe:2c:80:14:d3:1b:b6:
27:78:3b:49:02:f0:93:62:19:63:07:27:cf:d2:a1:
b3:89:d0:88:db:54:51:83:40:4c:80:09:97:1c:da:
26:db:90:0b:81:1c:72:00:af:a8:d6:4a:0b:86:e8:
ae:84:30:67:7a:49:03:e8:f0:ee:f8:4c:6b:3b:e7:
74:a1:c8:a1:67:d1:f8:3e:f5:ff:fc:1a:ae:7a:6a:
32:74:28:e1:f3:31:7a:54:34:e2:ee:01:4c:04:3f:
3e:5f:8a:0a:ad:89:49:70:27:ab:15:77:ed:33:61:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:A1:5A:E6:81:F4:89:C0:21:4C:80:73:2A:9C:D9:CF:F7:06:0B
X509v3 Authority Key Identifier:
keyid:CB:D7:97:3B:6A:3C:32:2E:71:94:6E:7D:A7:00:FF:BD:3B:0A:09:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9eXO2o8Mi5xlG59pwD_vTsKCX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cad520-bb1a-4001-92bd-0daed984e849/1/y9eXO2o8Mi5xlG59pwD_vTsKCX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:e0:a7:36:cf:03:60:16:88:58:c6:c1:1d:c7:bc:53:4b:
0e:0f:3e:cf:ba:15:21:39:ad:13:47:74:5c:38:b7:c1:02:ae:
67:76:6a:4e:48:82:88:90:69:1b:90:ff:e6:f1:8b:69:24:56:
9c:cd:49:78:7c:56:fb:16:27:e1:24:36:19:a3:f9:c7:99:20:
a0:21:c9:6b:e5:fb:55:8f:14:bc:97:84:8e:0b:86:b8:09:22:
db:3e:d2:2f:bc:11:c5:bd:10:21:d8:6e:69:cb:f3:33:6e:9c:
27:a3:4b:3c:eb:84:ba:89:8c:9d:ee:d6:df:f2:7b:09:89:d3:
8c:7a:49:d0:d1:03:03:25:a3:4c:95:3d:90:ab:89:f1:17:17:
8d:d2:a8:db:5f:53:c4:a1:28:ef:9b:36:85:1b:ce:ec:8c:0e:
76:92:47:9e:24:f5:5d:2c:c5:5a:3c:4e:50:0a:0b:46:29:c6:
4d:f5:73:04:8a:eb:51:41:a5:d1:18:bf:a0:ee:f4:16:55:a6:
cf:8c:ee:ba:17:8c:a4:2e:e1:88:af:8b:64:db:5d:5c:fd:ec:
fb:6f:3b:dc:4e:04:1c:f9:6c:a3:32:bb:01:2a:a2:be:af:e9:
20:9f:d3:01:d7:96:3b:67:d0:b4:04:be:13:7e:5f:85:0b:e1:
47:af:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:08:13 2026 by rpki-client