Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File: y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier: KMoY0ler+vUvpsCHZ3ztdRoSEhf8365necpQrEiUSv8=
Subject key identifier: 90:45:0D:09:BC:87:C5:CB:5D:9A:74:72:7C:44:02:FA:68:07:EB:3A
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 019D38D33A05DCF67B043B4087467C0FF22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number: 0229
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: onvZJwYEjJafGyGzcVtC56mfp+P5wkAaS+PA0Qm/CYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3a:05:dc:f6:7b:04:3b:40:87:46:7c:0f:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=90450d09bc87c5cb5d9a74727c4402fa6807eb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:22:93:82:53:d9:b0:68:14:61:2b:88:2b:
cb:94:cf:de:f1:63:5b:18:1c:dd:66:2d:e7:3f:64:
55:bf:11:dc:69:27:99:b8:49:51:c7:27:a4:6b:74:
b4:2f:a1:4b:97:a5:a9:5b:54:ee:e9:7b:7d:5b:93:
ac:ee:b9:51:73:7c:19:60:a7:46:d8:b2:31:81:27:
8a:c3:2d:2e:f4:02:86:dd:8d:06:90:5d:e9:d5:e0:
3d:54:d8:7a:ec:0c:93:07:cf:d1:29:55:b5:c9:65:
ed:96:4c:6f:ce:4b:b2:c7:31:51:51:e3:f3:4d:ea:
85:57:3a:a5:3e:4c:4e:7e:3b:2a:06:01:53:a6:b9:
01:46:c2:97:a2:7d:f8:16:50:30:a6:6e:07:00:ad:
bc:f6:17:ac:b4:5f:62:bb:0a:4f:e4:d0:d0:78:c6:
52:2f:61:93:d2:d5:8c:a5:4c:49:d2:f5:69:00:98:
c4:f6:94:77:98:ef:ef:8e:3b:4c:ab:fb:95:fa:39:
e4:2c:91:51:e1:47:bf:19:4c:a1:27:c7:f5:3e:7c:
1d:6e:31:b9:c0:4d:bd:ac:7d:14:04:11:32:15:c9:
c7:07:32:e9:62:18:4c:ef:e2:c9:b5:35:da:90:15:
62:8c:e6:25:e2:20:f9:4b:00:3f:0a:d8:ed:1b:3a:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:0D:09:BC:87:C5:CB:5D:9A:74:72:7C:44:02:FA:68:07:EB:3A
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:34:84:f1:bb:45:89:6c:5b:c0:6e:f3:4c:86:34:49:a8:d6:
5e:5b:4a:5b:49:80:39:fc:3c:2f:70:87:83:a1:0e:b4:33:9c:
41:16:0a:54:95:6a:5e:65:9a:f4:4b:c4:d2:27:00:dc:72:a1:
81:86:5d:72:2a:d0:aa:00:e6:8b:9b:a5:3a:a7:d1:c2:66:f2:
0b:4d:88:63:3c:16:28:ae:c4:39:e8:d4:4b:b2:0c:ed:01:80:
5f:8c:a8:87:13:8c:bf:1c:ed:7c:d5:24:83:3a:f0:12:53:07:
31:26:8b:93:35:0b:a9:8b:f2:6c:86:ce:68:e6:27:eb:cb:ed:
13:37:89:26:47:21:6e:86:ba:3d:bb:d3:7b:6c:66:30:0c:39:
00:80:a3:ed:47:04:a4:67:aa:d1:88:b2:d9:d4:84:f1:72:31:
8a:72:75:e8:ad:75:58:45:49:30:df:f7:01:d1:e2:24:10:f0:
95:08:3b:a8:54:a2:98:9a:ba:98:68:5e:a6:86:2e:9c:30:c0:
ef:f0:e4:48:65:ee:a8:a3:e6:4b:fc:e6:35:fd:3a:1b:ec:dd:
8c:d8:0d:05:3d:56:2e:09:1e:43:7c:a5:dd:a9:41:af:dc:4e:
41:db:4c:47:08:c9:69:4b:ce:2d:b5:89:84:60:c5:58:97:c4:
ab:57:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:12 2026 by rpki-client