Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: +bUEDP+SW6of3l5coYWLziK3m6oSEiS2SLsvdAttGr0=
Subject key identifier: 3B:F0:54:0C:41:65:DC:75:24:59:5A:F4:FD:16:47:74:3B:68:53:10
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 019D98F51330273A5670739FEFC75D54B21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0E2E
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: cVjKKl61PLtZZ9RVf3Mpt5AZgGxQqhh/xaaFL/arhcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:13:30:27:3a:56:70:73:9f:ef:c7:5d:54:b2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=3bf0540c4165dc7524595af4fd1647743b685310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:d0:3d:55:37:ff:15:15:81:97:74:a2:e0:
99:cf:50:ed:62:4b:09:4e:18:c2:2f:c7:82:3f:b1:
0e:82:28:38:bf:62:27:0c:cb:0e:91:4a:d5:9c:d5:
50:5a:97:61:04:b7:b8:14:b8:73:a2:dc:2c:fa:b1:
19:c4:27:f7:8f:5b:14:b9:14:92:4c:e1:64:92:71:
66:b1:dd:cb:a9:d4:3d:47:32:e2:14:f8:a7:f1:77:
98:56:41:08:d7:40:9d:c4:15:1c:fb:c1:fd:ec:21:
35:bc:93:de:26:03:75:ff:15:20:75:12:96:0f:af:
6a:73:54:d9:bc:66:3a:b8:09:b3:f4:6a:3e:2b:77:
9e:7f:80:c4:83:1f:36:f0:79:36:f7:99:40:91:d5:
34:36:ed:7d:d3:bd:b3:1a:80:fe:f5:03:6a:26:32:
3d:65:3c:9a:b2:22:e8:b2:8c:d4:5a:f6:74:a6:16:
50:22:7d:2b:2b:e1:6d:7a:5e:8c:50:db:f6:5f:12:
4b:80:76:8f:1e:22:c6:8f:ed:bc:22:9a:4a:64:fc:
db:08:a8:cf:bb:e0:9e:f4:22:33:78:bf:67:45:a6:
4e:95:75:b2:60:ab:8c:71:ae:2c:8f:c7:06:e3:2f:
a3:34:e1:75:e3:9c:bd:bf:b4:f6:fe:dc:28:1e:66:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:54:0C:41:65:DC:75:24:59:5A:F4:FD:16:47:74:3B:68:53:10
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:a5:e3:c7:7e:cd:07:c0:36:c0:c3:99:5b:a2:01:f0:1c:
22:4f:e7:58:2d:4b:29:6b:3b:e9:61:87:78:8f:77:a4:f2:68:
39:b1:40:6e:4b:1f:ad:c1:f3:cc:32:ff:8e:a8:ea:b7:eb:1f:
a3:80:cf:b1:27:dc:d2:da:d7:0c:09:7a:3a:68:ea:5a:9f:6b:
18:de:f5:85:7d:b3:04:31:41:f6:56:ae:ef:7c:c3:ca:9d:e7:
30:07:35:58:bc:40:22:2f:67:d6:db:30:57:ea:9d:b9:c9:c1:
25:02:8a:66:b7:91:d3:ec:86:7e:44:46:53:4f:e0:e0:57:c4:
24:a2:66:ed:0d:0f:17:a9:df:07:10:a9:cc:a8:9e:76:5b:6e:
be:29:34:6c:62:63:0b:9f:e2:20:27:8b:a0:dd:8f:22:c7:94:
8a:69:54:b2:89:74:5b:a5:da:70:61:69:c4:2b:3c:b6:64:e2:
13:06:63:8b:ba:ea:d0:3c:f1:95:8a:0a:5e:8c:e0:60:bb:6b:
37:7f:bb:d5:da:05:fb:e3:12:41:9a:66:b1:f6:9e:04:72:9b:
ab:bc:6d:82:31:dc:8b:32:3e:3c:bc:88:24:17:4d:f6:9e:00:
e3:2f:43:6f:e6:b2:51:a9:c7:c8:7a:aa:15:4b:08:0a:70:03:
b0:2b:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:33 2026 by rpki-client