Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: mAm0JArOzQ4k1pX9dHZgqUx0LoiQ6RLm1MsQ4fNKnIU=
Subject key identifier: 34:DF:6C:CF:E1:A0:20:D4:39:E4:00:8B:29:52:C0:4C:9C:AE:65:8C
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019D9AE3109F65F592D69D447AA4B90F237F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 13AF
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: i+Aw6heaVCf4eAdgueOhN8oSH2QR+p1hn7OCgAPpjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:10:9f:65:f5:92:d6:9d:44:7a:a4:b9:0f:23:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=34df6ccfe1a020d439e4008b2952c04c9cae658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:2a:9b:93:30:12:99:01:dc:68:20:bb:8c:
97:9d:1a:20:0c:ab:69:79:11:48:8a:41:e3:bb:ac:
9e:9c:57:ac:e9:17:ce:52:47:fe:b7:60:58:54:8b:
8e:78:43:9e:56:00:14:9f:eb:22:3c:88:d4:f8:04:
53:0c:8f:13:0c:5f:99:06:fb:96:51:17:ce:aa:b3:
0b:d1:d1:fd:9c:88:6a:36:be:81:b4:07:c6:e2:17:
66:79:ea:38:64:4b:ba:76:f6:07:24:69:f8:c8:86:
01:57:c1:64:2c:21:65:62:5a:86:22:55:e7:8c:79:
00:3a:95:d9:fa:4c:d4:9f:c9:af:30:cc:50:55:1b:
e1:f7:a1:42:b4:7a:5e:86:81:d2:0e:55:14:aa:c0:
66:82:27:f1:79:3a:db:29:4d:ba:62:0b:d4:06:db:
5e:ed:11:fc:b7:f8:89:d8:14:53:fb:e8:03:92:bc:
6b:10:91:2f:d6:75:af:2d:e1:c3:9e:d7:6a:2e:14:
55:15:40:74:59:b5:0e:b5:d3:43:48:f3:4c:2f:94:
6d:af:63:ba:4b:b5:80:10:97:3f:a6:a7:70:84:b7:
de:88:88:e6:82:62:0f:f5:b3:9a:4b:15:87:24:3a:
79:4c:50:29:f6:2f:91:3a:9f:09:53:a5:40:1c:75:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:6C:CF:E1:A0:20:D4:39:E4:00:8B:29:52:C0:4C:9C:AE:65:8C
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e0:23:b3:69:22:be:93:1c:3f:85:4a:1d:8b:49:5b:98:84:
cf:fb:c3:6b:c5:c3:17:27:60:3d:a2:30:28:42:ef:a6:c3:2f:
d2:cf:31:e8:92:21:78:23:cd:9e:cc:d1:34:3c:2f:32:88:a4:
6b:8c:f0:3d:08:cc:23:d8:e3:48:9a:cb:8b:45:cc:af:0a:f3:
f3:42:bd:4f:59:1d:d1:bf:09:37:ab:33:b6:8a:43:6c:54:dc:
d4:28:bc:1a:b7:df:8b:ca:f2:82:ef:be:16:3a:ed:62:5c:4b:
48:73:f5:f7:65:4a:cf:9e:38:45:33:1a:80:56:0b:39:1e:e8:
48:e5:9d:bb:1a:1d:ac:ac:f8:6d:bf:dd:08:96:85:a4:fa:f6:
94:1a:37:6e:19:42:e5:b3:75:3f:12:2a:ea:5c:84:36:39:73:
49:fb:22:06:4a:c5:24:78:e3:03:51:69:ec:a4:f1:dd:8f:9f:
99:93:db:75:0d:00:2a:e7:cd:92:e1:2d:df:bf:85:d6:6d:b3:
b5:b3:57:35:47:5e:ae:34:eb:60:a8:da:6c:05:8e:6c:ab:47:
47:8c:aa:33:fc:e4:d4:4a:a8:98:20:fc:13:54:b9:d7:dc:d6:
a0:66:0f:6f:eb:dd:fe:23:a9:22:e6:d2:32:dd:7a:5d:58:91:
a9:ec:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:31 2026 by rpki-client