Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
File: Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft (raw, json)
Hash identifier: McqV264kAroNXwTxi6p6cyRqtWXOh3I7+7qwWOUbFxg=
Subject key identifier: 37:B4:07:76:A8:96:8A:62:25:10:C8:73:D3:9A:BC:5D:48:1A:07:2C
Authority key identifier: 63:75:51:1F:F7:89:4C:BC:19:C6:31:D7:D1:D6:9A:3E:C3:9C:23:AC
Certificate issuer: /CN=6375511ff7894cbc19c631d7d1d69a3ec39c23ac
Certificate serial: 019D3977B4A1E711DFF7378C452AF5019114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
Manifest number: 6C
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl (hash: YiuNsCMgVVo2eQAq0VB+mm4yt3CCjoYPLBsTZf6i8sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b4:a1:e7:11:df:f7:37:8c:45:2a:f5:01:91:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6375511ff7894cbc19c631d7d1d69a3ec39c23ac
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=37b40776a8968a622510c873d39abc5d481a072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:d1:61:7e:d2:e0:cc:86:2a:f6:09:ba:12:
86:fa:fa:8b:62:cd:19:3f:ca:93:99:85:ea:9e:9a:
c4:49:b5:89:45:ad:c0:fe:9d:a8:96:26:cd:79:62:
9c:ae:f0:df:bb:e9:01:a3:f8:ed:38:54:70:99:e0:
f5:f3:96:1b:4e:63:2a:28:b3:b2:a8:06:45:e9:0e:
4b:66:ab:bd:de:93:1b:47:b9:1a:4b:aa:4b:68:b9:
97:07:05:bb:d8:bf:1d:13:14:f8:13:a5:95:d1:6b:
ae:c7:0c:09:31:3d:dd:02:bd:fa:42:9d:ca:1a:55:
27:6a:d0:6f:fa:df:9d:bc:ed:93:fc:5b:6a:b1:cc:
a2:4e:7f:c4:18:3f:74:35:bc:a6:5d:db:34:ed:c1:
55:40:d4:52:97:9e:9d:d5:8b:e6:c9:c2:7f:4a:53:
cd:94:09:a9:47:30:a6:f8:62:49:88:e5:3a:87:cf:
3b:22:38:05:ad:30:05:c1:2d:00:a3:6d:51:44:74:
cc:07:78:d2:f5:d7:c9:35:c1:0c:12:9b:0a:56:4f:
f0:6f:c1:72:7f:34:68:bb:20:00:9a:c6:26:d8:25:
36:25:f0:d9:69:6f:5e:dd:c5:f6:7f:74:d3:73:05:
80:ec:d4:bf:a6:ae:e4:ea:b6:8b:2a:30:b3:f9:6d:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:07:76:A8:96:8A:62:25:10:C8:73:D3:9A:BC:5D:48:1A:07:2C
X509v3 Authority Key Identifier:
keyid:63:75:51:1F:F7:89:4C:BC:19:C6:31:D7:D1:D6:9A:3E:C3:9C:23:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3VRH_eJTLwZxjHX0daaPsOcI6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/955d98-ca57-4b4c-a476-260d473d0df6/1/Y3VRH_eJTLwZxjHX0daaPsOcI6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f4:27:48:d9:ae:b8:15:d9:f0:64:bf:fe:26:1b:d7:a9:df:
24:a5:4e:c5:a6:ed:43:31:16:78:15:8b:c2:fd:f9:d6:0a:1f:
22:cb:6d:a6:63:90:4b:04:03:38:a7:5c:70:53:bf:1b:a8:cc:
7d:57:9b:5b:ba:e5:ee:be:d4:3b:5a:28:20:37:21:0f:bc:57:
2b:0d:87:b7:1c:22:2c:29:76:31:61:bf:06:64:b3:0a:ec:25:
76:45:30:66:1b:98:ce:61:e2:ec:9e:31:e5:c8:34:a4:9b:9c:
85:0d:0a:53:bb:27:74:72:39:47:89:fa:4a:1a:87:d1:bd:fe:
c3:52:42:2d:21:7e:bf:d9:64:30:03:1c:6e:14:0b:ac:f1:74:
fc:cd:e0:d3:4e:80:fe:22:7e:03:bb:05:eb:d3:d9:b3:da:04:
d7:13:31:2f:ea:dc:e9:61:ae:47:d3:3e:c5:49:52:49:4d:c5:
60:f8:6b:d0:31:50:7f:f0:28:d2:73:7c:ab:af:df:69:c2:cd:
47:18:9c:d2:9d:d6:f5:d6:72:9b:60:d2:73:36:32:46:27:1b:
8a:16:5c:69:e9:f9:42:d1:bb:b8:bf:33:1b:c2:7f:eb:02:6d:
c9:3b:9e:a8:30:c7:d6:8e:69:9c:90:78:4d:8b:b8:11:e8:38:
d0:3b:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:28 2026 by rpki-client