Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier: 8DAC9uwvy5QqRtGL1smeVVrdjsi5CFE3xMcxYcxwlpM=
Subject key identifier: 22:86:A1:3C:B4:2F:53:40:60:7A:BA:E7:4A:2F:D7:EA:A9:7B:44:3D
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial: 019D38D3D47B87717FD9124FAA98B0DFF25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number: 03E9
Signing time: Sun 29 Mar 2026 09:01:39 +0000
Manifest this update: Sun 29 Mar 2026 09:01:39 +0000
Manifest next update: Mon 30 Mar 2026 09:01:39 +0000
Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: l/GddyLsUY/SO9NMbUQ7U7deVzlN2Wg64JTskaZPhGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d4:7b:87:71:7f:d9:12:4f:aa:98:b0:df:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Validity
Not Before: Mar 29 09:01:39 2026 GMT
Not After : Mar 30 09:01:39 2026 GMT
Subject: CN=2286a13cb42f5340607abae74a2fd7eaa97b443d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:dc:7e:5a:64:96:36:9a:d0:d5:f9:27:08:
f5:15:88:78:29:6b:9b:0c:fb:d1:f1:55:47:c7:54:
95:46:a6:72:51:b3:4d:26:72:c8:37:6c:60:fd:88:
20:ae:15:60:51:94:57:ab:2f:87:67:80:47:68:e1:
eb:8b:ed:55:86:5b:fe:bb:34:ea:fa:ab:5d:b8:56:
91:9d:df:f1:b8:b2:2a:62:6e:44:c9:62:1d:19:d5:
d3:82:c8:33:7e:14:43:ce:74:a9:81:6a:86:44:10:
fd:c1:3d:12:62:07:cc:d0:3d:45:e5:7a:b2:68:bc:
59:f8:24:1a:3d:a6:25:5b:ec:24:51:c8:c9:bb:f9:
0d:49:a8:5d:1d:2d:6a:7b:c2:26:d5:ef:c9:3d:2a:
2b:ae:ad:9e:2d:c2:28:5d:81:32:ef:e6:95:43:a1:
6b:f5:5b:72:57:37:f5:f2:6e:fd:5c:d2:70:d2:54:
7a:84:82:56:0f:f6:cb:30:3d:ca:65:70:86:4e:dd:
1c:e9:60:d0:1b:55:4f:42:4b:ff:a3:85:dd:1d:5d:
f5:27:4b:db:dd:33:a9:30:57:ec:e5:3b:5b:c9:a4:
f4:d2:ed:02:cc:82:51:7e:63:66:a8:bc:01:96:17:
78:8f:27:dd:94:67:10:3e:5c:45:ca:77:e3:c6:4f:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:A1:3C:B4:2F:53:40:60:7A:BA:E7:4A:2F:D7:EA:A9:7B:44:3D
X509v3 Authority Key Identifier:
keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:d2:82:49:a9:ca:a0:df:cb:c7:45:af:af:b9:ee:25:20:
be:ab:1b:7b:57:76:1b:4f:2f:cc:1d:0e:01:fe:8d:c5:92:c0:
ad:e4:56:e2:ad:d9:98:47:5b:c7:c8:55:39:32:a6:27:bd:ec:
96:d7:6c:6c:ea:42:b1:cb:f5:40:f2:33:d9:fd:05:24:0f:9b:
71:30:aa:64:15:24:a4:23:e4:bb:1d:73:b0:f8:a9:03:fb:6c:
c9:57:8d:b6:08:c7:81:ce:b7:7d:cd:d0:98:af:d0:ab:97:c9:
ec:76:bb:93:cb:3e:1c:01:1d:bc:45:f6:32:4b:61:06:e0:37:
af:7c:70:4f:ee:cc:b0:12:05:5d:6e:1f:61:53:73:12:58:ac:
75:a0:04:8d:df:14:db:e7:ac:32:81:3b:1f:eb:50:20:56:5c:
11:80:83:1a:c5:54:70:cc:8e:22:a6:4d:e9:27:67:4c:77:e1:
6b:70:2c:10:58:3b:1a:6f:ee:e4:f0:62:62:d6:33:eb:a1:00:
ad:8d:99:58:3c:24:c1:17:27:a8:f5:94:40:b0:64:f2:7b:b3:
17:de:f3:82:32:f1:8e:89:f3:35:4e:70:f2:a0:0d:d6:02:87:
d1:de:94:88:f8:90:89:16:9b:50:b8:94:f5:f2:bd:05:88:f3:
07:e9:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client