Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: XO1BnyVMPikv+p2qOoTqAZVmYlCWoQbbxwRoY0bs2T4=
Subject key identifier: 8A:FB:7F:D7:49:0E:23:F1:40:36:3F:BA:D7:CA:47:CD:D3:C4:39:75
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019D3977C004826489202FF99F428D40C219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 12:00:42 +0000
Manifest this update: Sun 29 Mar 2026 12:00:42 +0000
Manifest next update: Mon 30 Mar 2026 12:00:42 +0000
Files and hashes: 1: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 0tbseFQM2KG6k7wc8ZhA0HggIlUnRlMWXJca1cC/shQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c0:04:82:64:89:20:2f:f9:9f:42:8d:40:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Mar 29 12:00:42 2026 GMT
Not After : Mar 30 12:00:42 2026 GMT
Subject: CN=8afb7fd7490e23f140363fbad7ca47cdd3c43975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:6d:d4:01:6c:1e:f8:29:cf:49:9b:5e:9f:
03:30:10:0a:f7:51:a9:24:5f:4e:a8:15:6b:b5:ff:
3e:ca:f3:ad:d5:e3:b9:d2:49:4d:de:dc:03:64:8e:
fc:c8:80:80:72:2e:04:31:91:d2:1b:c9:75:9b:b0:
b0:e9:8d:43:28:ea:54:c5:47:ce:46:70:43:d7:67:
93:cb:f8:9d:61:d9:ac:bc:ca:74:b6:dd:68:83:9c:
c1:bd:52:4f:3b:17:1b:51:e7:4b:77:1a:4c:0c:0b:
72:15:b2:f8:42:42:0e:7f:78:36:92:d3:46:cd:fa:
e5:f2:a4:fd:ba:f2:7f:71:c6:e9:88:d2:2e:82:8a:
b9:6c:97:6a:16:06:a6:b3:65:79:3b:70:b6:e0:a0:
2d:9a:8d:14:35:85:37:a7:5e:d9:ce:bd:e9:19:32:
0b:c5:d6:6b:10:20:03:15:29:4d:8e:75:d7:74:7b:
46:45:3c:a9:24:f7:b4:3c:f5:ae:b3:f1:bb:da:77:
38:e5:85:07:6d:90:3b:78:24:b2:6f:8e:3a:55:aa:
7e:e1:93:8f:45:f6:fc:cc:a4:42:88:69:0e:f2:50:
b8:12:58:8d:e0:25:1e:0d:bb:93:56:45:5c:0d:f6:
be:f5:a2:81:7f:90:5e:45:37:f4:6d:d5:f4:65:1c:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:7F:D7:49:0E:23:F1:40:36:3F:BA:D7:CA:47:CD:D3:C4:39:75
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ef:ff:1b:ff:ed:5d:94:3c:e4:87:3b:09:32:e3:cb:04:30:
5c:96:35:44:9b:99:ed:21:32:65:71:06:cd:3e:d8:8b:98:ed:
aa:13:dc:a2:b3:b0:aa:ab:ce:4c:8a:bb:81:6a:01:f3:0c:75:
6e:d4:07:a3:77:90:b6:ba:fc:de:c5:11:fa:95:0b:86:91:f3:
cc:87:e9:b4:5c:c4:26:7a:74:3c:02:a5:d8:0f:dc:98:1b:0a:
ba:7c:40:42:a6:95:2a:8c:c6:56:3d:18:f3:3c:36:17:d6:d9:
03:6a:21:14:cd:21:dd:60:c3:77:c9:cc:a7:06:3a:cc:be:31:
b1:1a:bd:9f:19:0f:4a:e0:20:15:98:db:27:fa:37:82:dc:e4:
1e:1c:1a:76:23:f6:13:89:f9:39:5b:f2:87:be:98:ce:8e:9e:
81:71:ec:46:c0:b6:ae:bb:4b:88:c5:80:1f:3b:9b:7a:9c:bd:
c6:16:42:dd:87:cf:da:a5:4b:4f:66:8e:06:85:e0:86:37:67:
35:fb:2e:63:40:d0:ee:94:2c:35:3c:75:99:03:3e:67:c8:b1:
d3:f6:8d:64:9d:4c:c6:c4:a2:e6:1a:e7:e9:e4:c8:46:23:f4:
22:67:bb:77:6d:7d:85:69:cf:77:a5:d5:49:0c:b5:87:4e:ed:
f3:95:63:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d8AEgmSJIC/5n0KNQMIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjYwMzI5MTIwMDQyWhcNMjYwMzMwMTIwMDQyWjAzMTEwLwYDVQQD
Eyg4YWZiN2ZkNzQ5MGUyM2YxNDAzNjNmYmFkN2NhNDdjZGQzYzQzOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13Vt1AFsHvgpz0mbXp8DMBAK91Gp
JF9OqBVrtf8+yvOt1eO50klN3twDZI78yICAci4EMZHSG8l1m7Cw6Y1DKOpUxUfO
RnBD12eTy/idYdmsvMp0tt1og5zBvVJPOxcbUedLdxpMDAtyFbL4QkIOf3g2ktNG
zfrl8qT9uvJ/ccbpiNIugoq5bJdqFgams2V5O3C24KAtmo0UNYU3p17Zzr3pGTIL
xdZrECADFSlNjnXXdHtGRTypJPe0PPWus/G72nc45YUHbZA7eCSyb446Vap+4ZOP
Rfb8zKRCiGkO8lC4EliN4CUeDbuTVkVcDfa+9aKBf5BeRTf0bdX0ZRzTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr7f9dJDiPxQDY/utfKR83TxDl1MB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+//G//t
XZQ85Ic7CTLjywQwXJY1RJuZ7SEyZXEGzT7Yi5jtqhPcorOwqqvOTIq7gWoB8wx1
btQHo3eQtrr83sUR+pULhpHzzIfptFzEJnp0PAKl2A/cmBsKunxAQqaVKozGVj0Y
8zw2F9bZA2ohFM0h3WDDd8nMpwY6zL4xsRq9nxkPSuAgFZjbJ/o3gtzkHhwadiP2
E4n5OVvyh76Yzo6egXHsRsC2rrtLiMWAHzubepy9xhZC3YfP2qVLT2aOBoXghjdn
NfsuY0DQ7pQsNTx1mQM+Z8ix0/aNZJ1MxsSi5hrn6eTIRiP0Ime7d219hWnPd6XV
SQy1h07t85VjHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:26 2026 by rpki-client