Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: Bv1jlIAzMQB+jnwuKNHzD3WPzD0NrHXbCd1+lTawWgw=
Subject key identifier: 37:42:81:10:C3:62:9A:50:0F:C8:67:66:CB:49:92:FC:00:D7:D3:8F
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019D39419E4E98ED909333602D14497B8D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 15B1
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: uQfvuTURLyMXAmvEwH95g214eE7At6cDikleqHh8GA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9e:4e:98:ed:90:93:33:60:2d:14:49:7b:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=37428110c3629a500fc86766cb4992fc00d7d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:74:0f:44:e9:d7:12:56:69:ac:0b:1c:a2:
f6:dc:62:f1:cc:c7:ec:e2:f5:09:a8:1a:36:5c:b2:
87:35:b1:a5:aa:fc:12:cf:bd:f9:1d:36:98:99:5e:
81:72:c9:3e:eb:89:b5:c2:6c:23:99:f8:9e:b1:62:
c0:2d:b3:67:9d:63:0f:0e:6e:84:10:8f:03:1b:68:
7c:e5:05:9b:b6:73:93:03:82:f0:95:65:03:d2:cb:
f1:d7:0e:4f:de:fb:30:1a:f4:34:83:d4:f4:06:51:
03:d1:1b:8e:93:c1:dd:2f:07:da:d2:aa:42:d0:ee:
0e:a0:9a:91:0c:7e:61:c1:8c:ca:7c:d2:68:b6:6a:
e6:3d:77:7c:19:34:0e:95:e9:fa:88:93:d1:6e:16:
5f:98:3d:69:a5:03:d4:2c:d1:8e:35:65:b2:4e:aa:
74:79:f3:6c:b1:40:4f:81:b4:3f:b4:3d:cf:6b:63:
58:24:40:1f:d7:52:c1:1c:81:a6:27:71:7c:a3:ed:
bd:0e:a3:e3:40:b8:47:ab:a0:b0:0a:6c:54:bd:00:
c3:57:a0:d8:38:40:32:f5:4f:1d:02:35:40:56:cf:
cc:25:d4:12:cb:ab:74:2e:ad:d8:17:18:f6:fb:24:
99:70:d1:d1:4f:a5:de:69:64:40:e0:3d:57:a0:d4:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:81:10:C3:62:9A:50:0F:C8:67:66:CB:49:92:FC:00:D7:D3:8F
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:a4:04:ee:ce:7e:4f:b7:01:61:15:8d:9d:7a:45:96:80:
38:cb:68:2f:dc:16:d6:de:ae:15:c5:98:a7:b4:2c:f5:49:da:
6f:f5:88:12:7a:06:7b:a7:e0:25:77:98:6f:96:df:11:3b:0b:
16:03:86:8d:56:a3:7f:61:ac:76:12:6b:be:b6:84:dd:89:13:
26:79:ba:93:25:64:8b:4a:e4:bf:1e:df:7d:f7:32:8e:22:76:
fb:52:a6:4c:d6:ee:e6:8d:4b:26:30:b0:3e:72:2e:8d:e0:22:
01:74:40:ae:40:cd:a2:dc:b9:c2:a6:f2:cb:d9:34:a6:16:4e:
d5:3c:4b:35:61:fa:00:f4:51:77:b9:a4:03:9d:6c:98:cd:a1:
63:b1:34:a2:7f:92:fd:26:ae:42:41:ed:b8:6a:20:9c:9f:a9:
73:cc:eb:f0:69:94:3b:5d:b9:aa:e4:12:df:6b:85:ef:25:39:
93:a7:e8:35:97:1e:4d:30:d4:ef:04:82:7f:54:19:50:53:a1:
af:78:aa:da:fe:02:90:8a:44:9b:d4:92:08:0b:d6:6f:bf:57:
59:11:8a:e2:72:92:f7:ce:d3:f2:d5:9f:21:3a:3f:1a:7d:f9:
e0:64:d4:f5:9a:58:eb:fa:20:9e:72:e8:a8:03:0d:27:9a:8d:
3d:1f:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:18 2026 by rpki-client