
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: aodPq/r3aA3oeAq39Uf3ByipdFtVHCGedHe/jf+ucnE=
Subject key identifier: B5:46:39:C0:6A:FD:E0:8F:D1:D6:EC:B7:A6:3F:4E:3D:D1:4E:82:08
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 019D3865766D4FCCC4BCDE5738AFEF4FA48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 0BB7
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: I15NA/3b2bdGou/pbPoBjnDS/vYS33Xlaizk/d+t4ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:76:6d:4f:cc:c4:bc:de:57:38:af:ef:4f:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=b54639c06afde08fd1d6ecb7a63f4e3dd14e8208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:f0:7a:a4:0f:54:77:d4:4d:3e:dc:4e:c8:
14:60:4e:da:4c:55:50:15:05:1b:00:36:29:99:19:
c3:7d:62:14:22:89:95:8f:76:04:53:3b:07:f3:6e:
e4:d0:36:8e:a2:3c:1f:db:63:37:5b:76:59:4e:4f:
80:2b:de:1a:9d:04:5b:09:22:e7:06:5a:79:60:12:
c1:c6:7f:4e:20:56:f4:cd:f2:22:74:67:9d:d2:aa:
6e:76:7b:23:06:3e:a4:33:0c:49:37:96:2f:dd:bd:
9e:2e:ab:74:81:48:cd:23:e1:9f:33:22:5e:6b:c9:
3f:27:4b:cf:d3:23:5a:02:0d:86:64:ac:b0:88:93:
90:4a:63:db:2a:fb:5e:a3:b4:00:45:59:45:1d:1a:
e8:f7:7f:fd:5d:15:4f:c8:3f:49:67:8b:2e:9e:f9:
cb:bd:3c:ce:25:43:76:81:08:a4:56:4d:5a:1f:fa:
23:c5:7a:e5:56:c0:4b:eb:de:3b:4a:21:f5:86:d2:
15:ab:61:4c:85:3d:6c:eb:c8:3d:81:1c:a1:68:68:
c7:50:77:8a:f2:a5:ea:46:15:af:ef:d0:94:37:9b:
36:4a:e3:c7:6e:bb:97:72:ce:88:d8:dc:f9:53:32:
d3:d9:90:c7:ba:f9:65:c0:0e:5d:32:e5:c5:dd:fa:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:39:C0:6A:FD:E0:8F:D1:D6:EC:B7:A6:3F:4E:3D:D1:4E:82:08
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:8f:4f:0f:65:35:80:f1:55:6f:79:51:22:a2:6f:4f:8a:
3d:5c:44:3a:d3:9d:d0:18:2e:aa:bf:5b:db:d4:f6:38:fd:13:
ed:e8:e6:35:89:8b:a9:08:42:94:37:28:0d:60:1b:2e:4d:fb:
ff:5b:f5:49:6b:30:37:57:05:ef:94:b1:e5:e8:06:cd:48:b3:
48:d4:e0:04:81:46:54:e1:7e:80:53:a0:a6:02:52:39:c9:a4:
af:b9:78:23:c4:b3:cc:32:1e:c8:8e:50:5e:4e:a3:db:cb:a5:
9f:15:3d:ce:e8:ed:d5:ae:9b:8e:2d:93:d5:2b:74:c5:69:ea:
b3:59:b7:c9:e6:30:f5:c8:bd:fd:dc:9a:a8:0f:e3:eb:00:14:
9a:d2:83:bf:7a:22:f0:f2:c3:b4:b4:af:6e:80:41:37:d5:34:
07:0b:5a:1b:e4:7e:90:e9:34:7c:20:c8:df:63:e0:ea:34:dc:
48:3a:de:87:3c:f2:e4:39:88:19:96:f1:c1:8f:f2:4d:4a:8f:
79:65:1c:3c:c8:7e:b0:7f:ca:6c:c6:74:b6:8b:50:4c:1e:62:
75:79:aa:65:0c:4a:56:3b:fb:42:c9:d3:6b:17:fb:b5:06:e9:
cc:7c:c8:3d:19:a9:db:01:23:54:81:f1:1c:53:58:48:ec:5c:
9e:0d:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:27 2026 by rpki-client