Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier: c1siapRYTnINnR6qOXtTXuAFcn9ppC3QkUM1VZdz8ic=
Subject key identifier: 23:AF:AE:8A:F4:4C:B2:95:BA:33:6A:71:2F:68:03:C4:31:44:4D:E2
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial: 019D3940EF273D9716B4E2C4F0D2B2A4BACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number: 0308
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: tj2WtjEBqzGtCrtWp0PXlO7L2pnXZKpGTo/iVru7mOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ef:27:3d:97:16:b4:e2:c4:f0:d2:b2:a4:ba:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=23afae8af44cb295ba336a712f6803c431444de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:af:4c:ad:93:29:93:35:7c:77:91:5f:cd:
f2:85:cd:dd:3d:a3:6d:63:e3:9d:83:b9:e1:af:8a:
d9:4b:9e:c1:73:e9:ef:7e:f2:f6:22:a4:89:e3:f2:
f0:0f:a7:1c:1e:50:7d:0b:82:b2:a2:f7:5c:d3:fc:
45:58:72:05:0f:53:37:e9:3c:83:8f:08:74:21:e6:
b8:6c:70:47:9e:93:d7:9f:e7:76:0b:a6:60:0f:a0:
09:05:4e:2b:bc:fd:1f:e7:81:4d:aa:c5:60:83:b2:
9a:c7:af:64:fc:2a:c9:0c:78:63:19:67:c9:62:82:
27:bc:29:34:41:23:f0:01:e9:58:88:18:f7:d7:ec:
57:18:1d:34:77:73:ae:59:9f:ce:fb:8a:0b:45:eb:
15:c2:a5:5b:c4:e0:4e:b0:fc:d6:63:c6:34:1b:92:
ba:d7:5b:21:cb:d4:41:cb:88:7e:1b:5d:ab:71:83:
36:65:ea:a7:8e:e9:fc:7c:91:27:77:ea:92:fa:31:
54:c4:a9:37:f0:3e:8a:6b:81:e1:d6:57:03:2b:70:
fb:78:dc:50:be:d4:c9:67:33:85:f5:9d:5e:72:01:
4f:0e:97:d7:e5:59:9b:e8:85:e7:c5:c0:ff:86:38:
9d:37:1b:f2:21:06:9c:a9:8d:01:89:39:1f:bc:af:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:AE:8A:F4:4C:B2:95:BA:33:6A:71:2F:68:03:C4:31:44:4D:E2
X509v3 Authority Key Identifier:
keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4a:88:bb:ce:f3:02:0f:80:e4:8f:cc:28:07:8c:ed:7e:6e:
aa:81:69:dc:f1:43:c2:cd:af:3d:0a:ca:b6:e9:c8:c9:81:e2:
5a:d5:6f:42:44:4d:07:e7:ee:13:35:e4:6c:d0:d0:fa:a8:35:
4b:8c:7b:fd:aa:03:ca:c2:fb:61:03:93:b6:9b:13:42:76:32:
34:43:68:d1:d6:b5:b3:29:32:41:97:d2:b0:22:60:bc:e3:f3:
1e:5e:ec:f1:e9:a9:f3:39:3d:a0:05:c2:c3:84:c8:6c:78:58:
14:cf:0a:a1:7f:69:bf:15:57:88:a2:60:56:38:89:4f:b6:3e:
4c:ae:3c:53:0c:6e:f2:80:ac:fb:c5:92:13:1b:a5:29:41:3f:
f1:0c:6a:07:d4:68:41:8a:ed:8d:13:c4:40:cc:5e:5b:e7:a3:
5d:ef:e1:1b:4f:d4:2b:aa:72:9f:86:10:76:56:7e:3d:5e:ad:
1c:4a:11:02:8a:19:ea:81:21:c6:be:84:fd:2d:67:34:4e:16:
cc:02:b0:eb:27:47:74:ef:bd:ec:e4:cf:3c:c8:fc:fd:fc:54:
76:67:b7:ed:1f:2e:5c:fc:33:a9:21:d5:2f:aa:f4:ca:72:0d:
e6:ed:5a:51:51:39:bb:e0:2c:55:dd:26:d0:ee:0c:ec:30:7d:
e5:6e:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:48 2026 by rpki-client