Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier: NxWXhVgZ1xbFSOBZGubVBOQyVweonbSdtUZtu/3zuXc=
Subject key identifier: CF:07:D6:63:69:80:97:77:FF:FA:7C:79:93:8D:00:39:5C:B6:EC:DF
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer: /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial: 01A0FF480D5F3BE69CFAF52503C465BB162B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number: 1823
Signing time: Sat 03 Oct 2026 01:01:47 +0000
Manifest this update: Sat 03 Oct 2026 01:01:47 +0000
Manifest next update: Sun 04 Oct 2026 01:01:47 +0000
Files and hashes: 1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: jOxYHPtzYYHmuSzkONr6CQd9CcFLYNcjWgLr/5M50jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:48:0d:5f:3b:e6:9c:fa:f5:25:03:c4:65:bb:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
Validity
Not Before: Oct 3 01:01:47 2026 GMT
Not After : Oct 4 01:01:47 2026 GMT
Subject: CN=cf07d66369809777fffa7c79938d00395cb6ecdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:15:57:2e:d4:fc:03:b7:a3:9b:8f:aa:07:
b9:cf:b5:83:82:69:f1:dd:77:28:05:ac:70:b1:5b:
a3:2e:76:eb:72:45:e4:62:b4:22:e8:a8:41:d3:a9:
10:51:f4:89:eb:42:59:da:b8:cc:e6:34:18:5f:18:
ec:c2:c0:e1:05:97:65:65:d5:1a:8c:c6:3a:9b:7c:
fa:64:a1:4e:52:3f:79:7c:f3:91:a0:d4:60:31:24:
19:d8:44:65:40:d8:52:b2:99:36:c1:e7:3b:5f:e5:
3b:08:3b:34:98:3c:1d:2b:73:33:7d:4a:c0:2e:c0:
c3:df:e4:e2:4d:73:eb:12:5c:31:46:8a:eb:70:a2:
95:96:b3:c4:74:ac:87:dc:37:3d:0a:56:f5:d6:04:
0b:95:34:aa:99:85:d2:0f:5d:c0:7b:7f:0e:9e:aa:
3b:f1:00:db:6d:df:75:be:7f:1b:09:a0:49:11:ca:
1c:17:9b:95:60:1f:a9:76:90:e6:dc:23:30:76:53:
55:83:e8:5e:69:51:b6:0b:72:1e:fe:17:54:ef:7e:
da:5f:92:5b:d7:4c:25:4b:4c:6b:20:0f:c1:7d:17:
43:6f:de:2e:35:be:2e:c4:d5:9f:cd:15:53:88:82:
40:f5:77:61:5c:67:94:e4:e9:6d:9d:63:93:61:f7:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:D6:63:69:80:97:77:FF:FA:7C:79:93:8D:00:39:5C:B6:EC:DF
X509v3 Authority Key Identifier:
keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:dd:9b:2e:07:ee:cf:9a:5e:b1:7b:72:8d:e0:3c:82:ee:
4d:b3:0a:6b:ff:d7:2d:98:4e:09:50:9a:27:2e:1c:cd:cd:04:
b0:fc:a7:a8:fa:c2:9c:4e:2c:0d:63:95:f2:f5:eb:d9:40:a3:
38:12:81:e3:9e:1e:b8:0f:17:c3:2c:fc:50:f6:63:90:ae:3c:
cf:84:c5:14:f7:fc:3b:8e:36:c8:14:ef:7d:40:41:31:c6:d6:
2f:df:86:5a:54:d6:ad:ab:92:47:22:48:a5:09:a2:4b:64:54:
03:cf:90:7d:5b:38:12:43:c2:8b:b1:77:8a:04:09:66:1b:24:
76:a8:21:72:0f:46:79:e1:94:9d:1a:2c:2d:21:ce:a4:ca:00:
1f:51:b5:83:e6:ea:db:71:48:6e:e9:8f:ce:48:90:73:cc:7b:
54:18:d5:a6:1e:dc:48:8a:23:a7:c9:f0:67:2d:32:11:98:a1:
58:4f:1b:6a:e2:eb:f4:37:6f:4d:cc:43:29:0e:13:0b:54:10:
7d:25:92:58:af:12:af:51:6f:66:ea:4b:30:0c:c1:e3:59:f3:
5a:0d:b6:4e:75:91:18:b5:dd:b8:b2:0d:57:2c:74:1e:79:59:
4f:65:4c:48:c5:86:01:0e:20:38:38:6a:b6:00:5e:35:95:9d:
ef:6c:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:42 2026 by rpki-client