Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: Z06YY1rsreq/KKV5y56JwXPAJzzCbV6N0rIzW+Ce2vY=
Subject key identifier: B9:DF:6D:A6:71:2F:F1:AD:69:B2:FE:80:EC:FE:87:B0:FA:6F:E7:37
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 019D98F4D85AB56E43143D1F03AE078850B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 17D4
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: KiG5JSQIZzGdps54L2wyVPvNX7kTB6krP+rRu4qAM0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d8:5a:b5:6e:43:14:3d:1f:03:ae:07:88:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=b9df6da6712ff1ad69b2fe80ecfe87b0fa6fe737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:74:0c:0f:8d:4d:44:c2:a4:4a:db:e3:ff:
83:e2:d9:b0:05:22:d4:e1:77:80:fd:d9:32:05:92:
52:2b:ac:18:10:fe:c8:51:50:b3:45:63:3e:3a:c5:
90:cc:53:3b:aa:c5:bd:19:cb:8e:bb:2c:7b:0c:99:
2c:aa:95:72:6f:20:1b:9e:f8:f2:27:5d:6c:0a:e4:
ce:e0:57:e1:f5:f2:97:c0:e9:73:fc:6d:9d:e0:9a:
f2:ab:bb:a2:74:02:d4:f3:bd:df:f6:84:38:6a:2a:
45:eb:5b:c2:58:2d:10:44:ad:43:c4:ba:e7:28:e7:
7b:8f:cd:ac:c6:31:af:cc:cd:bc:9b:85:f0:97:ba:
fe:fe:d6:67:ee:e1:43:8c:5b:df:7a:f5:7d:74:43:
41:63:70:7e:ab:4d:90:cb:b7:29:d4:d7:be:1a:a6:
99:8c:b7:cf:3c:74:bb:6e:ad:5b:35:be:a6:76:aa:
e4:ed:e1:c5:d4:f7:2e:5a:dd:c9:18:aa:ff:4c:7b:
6e:d8:de:36:5e:83:93:bc:ae:e9:48:db:61:8f:0c:
45:17:86:b2:be:0e:47:1e:dd:fb:5c:2c:a4:14:e7:
61:22:d1:bb:52:a3:33:a9:9b:a6:a2:da:34:a1:bf:
98:17:34:1d:30:51:bd:4e:eb:96:49:52:1c:56:f4:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:6D:A6:71:2F:F1:AD:69:B2:FE:80:EC:FE:87:B0:FA:6F:E7:37
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:81:c6:e5:54:71:a2:b9:6a:3a:32:aa:19:0d:0a:68:d6:ce:
91:c5:b7:4b:90:a8:65:a3:65:71:2b:f3:2a:84:ea:eb:04:64:
31:f7:0d:cd:5b:72:b4:2a:bd:3b:bc:d1:31:c3:5c:1a:bf:38:
e6:97:2d:a4:2f:1d:5e:b4:f7:86:c2:38:f9:82:4e:8e:de:b8:
a9:db:b9:dc:a9:36:30:59:71:f4:a7:f8:e2:67:76:60:03:f7:
50:47:91:40:14:e6:a0:8a:9d:35:34:8f:a1:11:bf:8a:0e:62:
e3:c4:28:eb:4c:8d:72:37:d0:d2:ae:3d:5f:91:0e:0b:27:1f:
52:c3:df:bf:2a:39:30:7a:c0:df:a7:37:89:ac:48:16:db:e3:
38:bb:53:13:6c:b8:0b:04:bb:35:76:f4:49:66:60:71:1c:bc:
d9:b2:6a:33:e7:26:09:86:12:56:20:67:78:d7:28:ea:ca:8c:
51:c7:89:30:96:d2:7b:81:a8:2d:43:7f:52:29:3d:59:0a:a4:
11:0b:bd:24:dd:ee:5c:6a:ad:96:c6:d5:a5:ae:55:09:b8:7b:
e5:3e:4d:81:52:88:94:93:1b:57:01:3f:21:dc:15:ab:25:2d:
c1:eb:d5:a7:a6:f4:90:bc:bf:c9:ec:71:d8:df:76:88:12:27:
53:0e:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:20 2026 by rpki-client