Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
File: Y6wkfmJx8GSRY3K1If3IZJslTFU.mft (raw, json)
Hash identifier: yd/kH9qtZTv2+vd9LoBrPsQtS7GY4ax/UXg72x2d5vs=
Subject key identifier: 2A:6D:CE:19:0D:E7:52:E0:4A:33:AA:54:FA:11:06:07:32:2F:9A:1B
Authority key identifier: 63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
Certificate issuer: /CN=63ac247e6271f064916372b521fdc8649b254c55
Certificate serial: 019D38D33489B8306FE7B3FC8660A37C75CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
Manifest number: 027B
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: Y6wkfmJx8GSRY3K1If3IZJslTFU.crl (hash: If+E6ShXAfZtF6tdkCIAHhU84Xmn6cfGaist+VkTZho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:34:89:b8:30:6f:e7:b3:fc:86:60:a3:7c:75:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ac247e6271f064916372b521fdc8649b254c55
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=2a6dce190de752e04a33aa54fa110607322f9a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:6f:38:d1:34:15:3b:c9:15:bd:71:ab:d3:
27:7b:13:53:3e:f0:5c:35:68:06:3f:8d:59:9a:56:
b8:87:0c:1e:6e:59:7e:ec:fd:e9:62:82:6c:02:a4:
02:b3:11:a4:bd:95:e3:7e:a7:08:0b:19:e9:18:b2:
93:60:c7:85:f5:23:93:44:00:00:d2:86:74:58:a8:
30:7f:0d:e7:4b:6f:44:02:0b:87:95:3c:bd:1c:51:
96:d1:eb:04:49:80:e3:f9:36:40:cf:f4:2b:56:f5:
de:30:b1:e9:78:11:85:8b:35:1c:64:fa:13:6a:c7:
b4:80:61:82:53:59:a3:81:6f:72:e8:78:5e:00:34:
56:45:63:0b:be:04:e5:19:14:8e:c6:17:f4:f7:e8:
fe:04:61:ba:f4:3b:f4:40:ab:d7:4e:06:47:dd:64:
a8:54:e0:33:d3:c6:2a:5d:0d:0e:25:51:8e:9a:f5:
cf:45:05:5f:e2:c3:da:52:6b:29:45:ca:b7:13:7f:
da:c5:89:9e:8a:c8:11:9a:2a:1a:3a:0c:2a:af:61:
2e:d1:76:b4:93:ea:13:b4:1c:eb:d2:26:a6:1b:a2:
f4:23:30:9e:b5:72:22:b5:56:52:a2:00:8d:c4:c9:
d6:54:45:e4:54:b9:84:31:f9:3d:d3:70:20:1f:6f:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:CE:19:0D:E7:52:E0:4A:33:AA:54:FA:11:06:07:32:2F:9A:1B
X509v3 Authority Key Identifier:
keyid:63:AC:24:7E:62:71:F0:64:91:63:72:B5:21:FD:C8:64:9B:25:4C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6wkfmJx8GSRY3K1If3IZJslTFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3ad5e6-440b-453c-a29b-6fb67d9b8609/1/Y6wkfmJx8GSRY3K1If3IZJslTFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:68:72:b1:a1:bd:34:b7:12:ac:5a:11:71:cd:6f:9a:33:
e0:10:93:3b:2f:68:07:58:d2:be:c1:2d:14:1d:18:5a:27:d4:
f1:68:06:d7:65:8e:32:e2:98:40:d9:bc:bc:dd:04:48:6d:e1:
48:e2:27:06:a7:3f:75:85:d9:5b:1d:ff:42:6b:d8:2e:53:c2:
78:92:90:82:93:b8:18:70:09:b4:13:f4:ef:65:9b:5a:00:90:
84:3b:1a:bd:c4:a3:44:4c:1d:e0:f7:f8:90:96:f5:b0:19:8d:
be:d9:27:b5:39:1b:40:60:25:c2:91:63:0a:39:1e:17:00:02:
c4:b4:b9:44:3e:18:26:a5:86:23:53:df:a4:89:7b:e0:57:03:
39:5b:e4:fb:64:b7:bb:24:ee:d3:44:4c:c1:cf:7f:e0:e7:05:
a0:29:9f:4d:5d:1e:d5:21:de:e3:a0:ec:9a:df:64:ad:39:41:
47:47:f9:40:ae:4e:7e:3a:69:63:82:1e:f3:5f:a5:58:c3:5b:
23:d5:d5:59:0b:ca:35:b3:fa:e7:9b:53:4c:41:8e:89:0f:a2:
9e:26:c9:46:34:77:00:d4:6a:88:cf:73:8c:47:df:0a:19:56:
d4:15:a8:5e:09:e0:fe:ef:f0:d7:03:33:9b:db:6e:4f:18:8a:
9b:df:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:12 2026 by rpki-client