Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: pGfjT+G1m5hXIfP6yfESenG8bnQQaUYgcVf2o6ZsNVk=
Subject key identifier: AD:CD:66:B7:98:8A:7B:F6:80:14:D3:76:6C:F4:3F:0C:C5:BF:0C:8C
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 019D386638714734B4FC5249E80CB926D064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 17F1
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: 7FMSvropvFPsnEP8/EoVvtZI7SzOHS+s+fhB7dDS7RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:38:71:47:34:b4:fc:52:49:e8:0c:b9:26:d0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=adcd66b7988a7bf68014d3766cf43f0cc5bf0c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:53:c6:e4:6c:22:6f:bc:9e:41:55:4a:06:
4d:c8:c0:86:7d:61:11:8e:f2:b3:58:a9:de:06:a3:
5a:72:8e:c6:3f:f5:11:12:d5:44:0c:9e:3b:9b:7e:
89:fb:fd:c0:c9:9b:6f:35:c3:e9:08:20:84:c0:db:
30:b7:95:75:e2:bf:b4:82:1c:66:ff:e7:1c:97:eb:
2c:6e:c0:9b:8e:ce:96:e7:e6:e0:a8:4f:d1:db:a7:
39:0c:3f:44:39:7d:93:6e:70:03:33:2b:f1:10:ab:
bd:c6:aa:e0:18:f1:2b:91:43:1d:38:0e:a0:4f:a6:
76:10:38:02:f5:18:05:d8:8c:33:1c:f4:7c:23:c8:
4c:b2:b8:68:f9:7f:aa:3e:d3:f3:6c:a1:09:3b:06:
04:97:93:a1:68:26:a3:1c:da:2d:c9:b3:c8:ac:2a:
85:99:0f:cf:23:4b:78:d4:43:6b:8f:33:2c:31:88:
f4:b4:1c:79:ea:db:b5:c1:71:41:ea:a5:19:19:b2:
27:28:55:f6:8a:c2:db:09:11:42:09:a4:e7:50:47:
d3:73:62:dd:80:c1:7a:03:92:3a:a2:af:ae:c2:22:
3e:13:4e:ec:f1:b5:41:50:1b:d9:a2:2a:a0:5e:f3:
3d:e9:d0:09:1e:9f:eb:d2:93:c5:1c:51:2e:ca:d1:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CD:66:B7:98:8A:7B:F6:80:14:D3:76:6C:F4:3F:0C:C5:BF:0C:8C
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:60:68:40:f0:6b:b0:d2:88:c2:4e:f7:81:f2:b6:84:2b:
ce:2e:cf:cf:1c:01:59:99:ea:59:f4:3e:89:83:4b:6f:71:5d:
af:6d:db:b7:f2:97:8e:d1:83:72:3c:1f:3c:d8:b2:a9:d5:3d:
78:7b:fb:2b:97:aa:0d:5d:b1:d9:0f:77:a6:75:56:3c:f2:9c:
c3:6d:7d:93:91:44:cb:e4:5f:67:69:3b:4c:87:68:2e:f8:1a:
d3:b0:07:e4:36:53:c4:b3:b9:d4:67:d9:84:3b:ca:17:da:74:
a9:24:7e:f0:33:52:de:67:e2:71:54:ba:2c:04:c8:cc:65:a4:
5a:ee:82:51:e9:ef:a8:78:60:78:c4:49:62:8c:aa:7c:b8:b7:
c3:83:b1:be:85:87:12:88:9c:83:93:45:d4:71:a0:25:28:39:
8d:b7:c9:ea:7d:db:58:58:c1:f3:e7:90:ac:16:18:09:f5:b0:
29:50:d4:20:a1:8e:f9:fc:35:6a:6a:33:6e:84:1d:00:d7:86:
62:73:c5:04:4e:f3:2c:51:7e:64:ff:b3:99:95:41:34:dd:7d:
ba:b0:12:99:3e:02:6f:a1:04:3f:a5:64:46:e4:9d:51:12:e5:
4b:8b:92:a8:e4:12:64:59:71:2f:1a:1a:74:11:8e:57:ca:52:
51:16:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client