Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier: 9hCkPOiAE0celq0S8qaPh9sjofmw6IA9JkfFkaKtNzU=
Subject key identifier: F3:17:4B:B8:3D:CB:7A:D9:24:98:85:75:54:F3:EC:35:26:BD:C1:14
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial: 019CAB6B044F941DE0B1E4891E208D6F6259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number: 0DB3
Signing time: Sun 01 Mar 2026 22:00:43 +0000
Manifest this update: Sun 01 Mar 2026 22:00:43 +0000
Manifest next update: Mon 02 Mar 2026 22:00:43 +0000
Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: 5JDkBdZoDGfUpVKO6F2bJqrqSWjUtz4rIS2qf2zWJOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:04:4f:94:1d:e0:b1:e4:89:1e:20:8d:6f:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Validity
Not Before: Mar 1 22:00:43 2026 GMT
Not After : Mar 2 22:00:43 2026 GMT
Subject: CN=f3174bb83dcb7ad92498857554f3ec3526bdc114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:1d:32:5c:5a:69:d7:83:c2:80:46:ac:f7:
dc:3d:bc:41:09:16:92:e9:7c:4d:77:d9:99:98:e7:
36:a8:01:c4:2f:e3:bb:2d:87:21:41:bc:8a:e2:ba:
da:4d:a0:ae:4c:6a:1d:dc:ad:c4:04:27:38:f5:08:
ed:b2:ae:a4:94:5c:0d:17:04:16:0e:7c:21:84:70:
70:e4:07:18:e7:3a:9c:4e:58:f6:2b:4c:02:2f:82:
3c:38:1d:aa:fd:41:4a:51:7a:97:71:81:42:4a:aa:
88:66:a4:77:08:27:b9:04:5e:dd:af:c6:96:c1:08:
f5:6f:87:2e:75:ab:a9:12:75:ed:bb:39:43:f0:e9:
8f:2b:8f:91:31:93:99:19:e0:42:c5:50:dc:e8:c3:
dc:0c:6c:d9:de:c6:8e:95:a9:22:23:c4:97:3c:c6:
a1:a8:3f:b1:5d:cc:6e:e4:e9:62:f1:7a:3e:ba:02:
db:6d:05:c3:4d:fa:be:06:24:94:2c:6e:8d:08:b1:
bc:4b:2b:62:d6:06:22:8f:f9:6b:da:eb:fd:c3:0b:
a0:71:13:90:98:92:5a:18:5d:76:78:9b:e3:20:4d:
77:e4:f6:ea:4d:6c:81:6c:5c:ac:10:7a:1b:cd:dc:
f3:20:22:c5:47:6e:45:0d:07:db:c6:74:6a:e1:5e:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:4B:B8:3D:CB:7A:D9:24:98:85:75:54:F3:EC:35:26:BD:C1:14
X509v3 Authority Key Identifier:
keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b4:e7:1e:df:f2:f7:9f:c8:05:7f:3a:78:a9:0f:e7:b2:86:
20:c9:7a:79:c4:b4:49:10:93:5b:32:af:93:72:28:72:99:58:
84:1b:db:dc:4a:6b:f4:e6:f8:fa:f6:bd:01:c8:7f:92:c7:00:
d8:19:2d:27:d4:38:c8:84:61:f9:1a:8a:b4:12:68:81:10:c1:
d3:12:f9:61:c8:a4:74:a0:ac:47:2a:d0:ae:67:1a:90:3f:e7:
8e:13:9e:8a:92:47:f3:bc:c1:9e:5e:3e:69:e5:cc:d0:e4:67:
8d:01:7e:21:c1:87:98:de:4f:29:7c:67:ba:9a:a8:d6:26:60:
0d:2b:4b:f6:52:e8:90:cf:cd:6e:67:87:0c:15:27:fd:f3:8b:
a9:b7:d1:02:4e:9d:28:cd:0b:1f:e6:0c:d7:38:6b:9f:0a:85:
15:f3:a5:2d:d6:44:81:7f:fd:2d:15:4f:ca:cb:fa:ea:99:30:
f4:5e:d4:42:8b:cd:86:f9:92:51:8c:5c:27:ef:d1:68:60:3e:
a9:5e:6d:7d:64:19:26:a4:19:89:75:fc:50:b3:72:60:46:db:
88:16:a9:29:35:9d:e6:d6:1a:95:61:f9:fa:e1:63:f0:35:00:
b2:15:75:f2:eb:b6:c9:81:4a:44:ae:75:e1:e2:f2:5b:53:77:
25:45:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:29 2026 by rpki-client