Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: 1DFuG6VGi3nqTG5R9XU8HJecYaND4Htq4CoNO1tf8Gg=
Subject key identifier: 9A:D0:81:63:23:AD:C2:FF:6C:82:AD:57:1F:AE:2F:12:C3:14:37:89
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019CADFE8141CB45697DAE556CA308D8DA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 11C6
Signing time: Mon 02 Mar 2026 10:01:03 +0000
Manifest this update: Mon 02 Mar 2026 10:01:03 +0000
Manifest next update: Tue 03 Mar 2026 10:01:03 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: Af6yWZFSz2Qgv38Cnco6BRzu4q1FhyuvTmbFPWK++Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:81:41:cb:45:69:7d:ae:55:6c:a3:08:d8:da:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Mar 2 10:01:03 2026 GMT
Not After : Mar 3 10:01:03 2026 GMT
Subject: CN=9ad0816323adc2ff6c82ad571fae2f12c3143789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:b0:42:f8:87:15:cd:d0:64:aa:72:40:cd:
c5:2a:8c:0f:f1:a5:ce:aa:e5:8f:d9:7e:14:fa:cc:
d7:76:d5:96:dc:0a:63:65:83:af:eb:fb:f0:4b:6e:
09:45:4b:1a:b0:b7:a1:b4:6f:e2:0c:25:20:4c:e2:
20:d8:bc:c6:f4:b0:25:90:b9:95:15:83:8c:c4:2a:
6c:8e:a5:ac:52:05:a3:ff:11:54:4a:8a:a5:4b:af:
d9:87:44:e8:b6:af:4e:25:dd:37:fa:93:ec:cd:48:
6e:6f:d0:9e:ee:ef:6a:79:6e:f2:ae:a0:90:6f:e5:
c0:f8:95:43:2a:c9:ba:13:19:9a:d4:29:27:8c:8f:
a8:cd:cb:31:9a:f3:eb:f2:24:4e:da:a9:13:2b:4c:
28:d8:14:fb:33:2a:5e:6b:67:3a:ef:1a:0a:ba:b0:
72:69:04:6e:95:d6:e5:63:bf:2d:00:4f:ad:29:c8:
76:79:80:89:ed:a9:ef:a8:03:e7:f0:4c:4f:e0:73:
54:92:01:e3:27:dd:24:61:39:b6:e7:52:60:79:7c:
18:bb:06:e8:3e:b8:84:be:a3:26:c2:e5:b9:ce:b9:
13:e2:d2:c6:1a:c6:f5:fb:57:35:c4:12:98:37:80:
81:fe:ef:1d:d6:2a:7c:01:00:73:d5:4e:86:67:40:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:81:63:23:AD:C2:FF:6C:82:AD:57:1F:AE:2F:12:C3:14:37:89
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0b:b6:a8:df:e8:f7:bc:45:61:fe:03:4a:3a:0f:19:bc:50:
31:85:cb:63:2e:59:ba:ab:ed:ef:c8:b3:0f:12:5c:81:f6:b9:
65:8a:8d:4d:29:52:27:1b:57:e1:60:be:97:fa:8f:1c:6e:03:
1f:e6:33:0f:8e:e8:64:09:0f:0a:64:b6:c5:62:8a:6d:71:72:
c9:bd:ed:3f:2e:89:b2:21:80:f8:54:b6:21:1f:47:29:b4:5a:
49:aa:27:61:ee:51:1e:59:0f:54:34:1a:33:0e:f5:b9:d3:f6:
9a:0f:7d:d4:61:af:4c:9d:4d:95:23:0c:1f:3c:ab:2f:fe:10:
38:a0:0f:ab:42:72:58:bf:9b:ba:2e:35:1b:ec:2b:34:3e:4b:
7a:49:fd:d9:18:48:47:cb:04:c6:56:95:20:fd:0a:70:ab:d6:
b1:13:68:4a:55:f5:48:97:d7:bc:a4:cc:cc:c6:2e:50:5c:88:
d1:da:2b:fd:a8:8d:ef:36:15:fc:e2:4d:49:ef:a6:85:51:f8:
09:5a:36:f8:1a:7c:c3:dd:e3:bc:fb:b1:b7:19:c1:71:a8:52:
7b:eb:23:40:20:d7:a6:e2:dd:ea:7f:34:fe:85:f5:13:17:ee:
20:69:e5:2f:39:f2:ea:e4:14:94:08:b6:4d:82:51:d0:9f:b4:
d4:bb:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:40 2026 by rpki-client