Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
File: Y2-s66M0MntpXrOwyV6yMJL5PgE.mft (raw, json)
Hash identifier: 8KDE9edxRto++BO5Onj1RP2S13Iezw8y7iJBKJ8P8TE=
Subject key identifier: D2:F8:94:BA:CA:40:4C:12:8F:7F:0E:88:1E:35:2D:48:83:1F:E2:5B
Authority key identifier: 63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
Certificate issuer: /CN=636faceba334327b695eb3b0c95eb23092f93e01
Certificate serial: 019CAB6B3D665557908B3580FF9DA98E2A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
Manifest number: 1333
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: Y2-s66M0MntpXrOwyV6yMJL5PgE.crl (hash: J1kMvr1yybAnrU5OMyoWu2FSwFikkdSGWPdFrITKvhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3d:66:55:57:90:8b:35:80:ff:9d:a9:8e:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636faceba334327b695eb3b0c95eb23092f93e01
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=d2f894baca404c128f7f0e881e352d48831fe25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:0e:49:5f:48:10:07:b8:ae:56:d2:87:26:
4b:00:f9:eb:cb:85:b4:85:e0:a8:f8:24:87:7c:21:
bf:c0:64:54:64:04:f9:7c:f6:fc:57:17:86:d0:3f:
07:61:92:4d:69:c9:0c:8d:a0:01:19:5d:91:b5:8d:
37:e3:34:fa:21:14:67:1e:ac:11:9b:5f:59:c4:b3:
bd:1c:d1:af:02:fa:34:b0:46:dc:3e:b4:00:76:85:
29:68:0c:5d:76:65:e3:60:3c:e8:16:39:3c:4e:a3:
b6:2d:0d:ed:18:e6:e3:ef:67:cd:25:16:db:e4:d4:
e6:18:67:55:43:77:79:dc:ea:20:04:41:c7:ae:7c:
4f:a2:b1:2b:92:2a:c9:8a:18:8f:73:45:a7:bb:48:
eb:9d:8b:2a:d9:15:5d:d9:f6:4e:78:f8:31:75:6e:
f9:33:53:1f:37:09:21:25:ab:e2:34:96:2e:3f:94:
67:85:a5:54:05:31:41:bc:ec:6f:b8:a3:1b:b9:ad:
0c:39:f6:07:e0:32:e9:fd:92:78:06:52:ee:61:52:
05:0d:e9:56:84:37:8d:f0:b3:7d:6a:25:46:ab:6e:
b3:49:4e:30:2c:86:cd:30:6d:c8:f3:3e:88:6d:ba:
a4:5e:3c:76:58:5f:f7:5b:47:a2:ed:fe:70:39:b1:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:94:BA:CA:40:4C:12:8F:7F:0E:88:1E:35:2D:48:83:1F:E2:5B
X509v3 Authority Key Identifier:
keyid:63:6F:AC:EB:A3:34:32:7B:69:5E:B3:B0:C9:5E:B2:30:92:F9:3E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2-s66M0MntpXrOwyV6yMJL5PgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/757786-cea5-49ba-8ef3-ac38d5a20afe/1/Y2-s66M0MntpXrOwyV6yMJL5PgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e1:3a:e1:45:b3:30:69:70:82:ef:3b:ca:53:0e:fa:e2:85:
f4:5a:4b:f8:27:66:c5:0d:55:e4:93:a2:69:93:2c:dd:b7:2d:
ed:44:89:33:43:62:e5:2e:42:e3:3b:f8:0d:e4:51:5b:a9:8c:
a6:6f:b3:af:f6:4e:f7:ce:8f:b8:02:5a:bd:95:39:af:b5:5f:
d3:01:b7:96:60:b6:0c:2a:84:18:fd:f7:2b:64:98:a4:78:5f:
e8:a0:1a:ff:ee:56:24:23:c4:04:68:69:6a:6c:d3:5c:25:c9:
57:4b:1b:ee:3e:4e:0a:7c:01:9f:65:ea:8d:fd:2e:17:80:aa:
86:b6:11:f0:70:fd:37:4f:6a:88:4b:56:e3:d5:5e:91:84:83:
98:42:ae:34:c7:bb:57:89:b4:f1:f1:64:72:2e:76:21:9d:53:
76:90:2f:01:cc:3b:e4:f0:48:d9:fc:d4:0b:8a:b3:0b:c7:95:
ca:c9:45:ef:c4:98:0a:02:3e:62:5f:45:8c:61:ee:64:0f:d0:
14:20:f5:32:98:83:67:90:47:ef:0e:dc:db:28:77:2a:63:d4:
14:23:79:0c:80:d0:d8:4d:7b:58:6a:2a:b8:c6:fd:91:a6:3c:
4d:11:45:2d:bd:00:fe:a4:96:e2:a6:47:f2:81:95:a9:51:94:
35:d7:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:48 2026 by rpki-client