Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
File: y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft (raw, json)
Hash identifier: Hh5S0Ll1lJpkJzA22HXSypBQvAxTnzg1u7pcvF1kEHE=
Subject key identifier: 12:C1:74:42:0B:7B:09:99:5C:DF:A3:9C:B2:B9:23:6D:51:44:36:3B
Authority key identifier: CB:C2:EB:DA:3A:B0:85:10:EB:E9:A1:0E:60:BE:23:16:02:28:A9:42
Certificate issuer: /CN=cbc2ebda3ab08510ebe9a10e60be23160228a942
Certificate serial: 019CAB6B914ADCFBDC6CF321A934983DD28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: y8Lr2jqwhRDr6aEOYL4jFgIoqUI.crl (hash: npk8h8jsRamZq2P6TL0K+oZoPGImfqTw+Kgxvk3sHSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:91:4a:dc:fb:dc:6c:f3:21:a9:34:98:3d:d2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc2ebda3ab08510ebe9a10e60be23160228a942
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=12c174420b7b09995cdfa39cb2b9236d5144363b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:b7:5c:f0:f8:db:56:43:19:49:fd:10:f4:
6b:54:27:71:51:1f:24:ca:01:1a:88:84:9c:9b:ce:
62:d6:75:3c:b7:57:1e:1a:91:78:fe:0b:43:bc:7f:
45:68:94:35:82:46:f2:e3:da:d5:e8:33:f1:d0:b4:
2b:2a:f1:44:28:1e:09:04:69:85:3d:b5:66:bc:46:
62:40:da:db:87:40:ef:a8:dc:c5:02:0d:3f:a5:68:
84:13:d5:5a:79:5b:eb:77:28:0d:ef:e3:6f:b1:b0:
fc:63:bf:a4:5c:da:9f:14:8e:eb:30:bc:e6:f0:89:
dd:28:9c:63:27:72:41:e7:9d:d0:f6:94:47:2d:a5:
03:93:03:37:5d:11:1d:e9:e9:89:20:cf:64:5d:fe:
55:46:25:a9:e6:1c:fd:ca:5d:86:0c:3f:bf:5f:23:
f3:fe:dc:45:12:19:49:bb:03:fb:30:c3:70:7e:29:
fa:0d:6d:ac:33:f7:5d:d6:58:34:03:f9:c6:19:f7:
e5:e8:d6:74:a4:2d:94:9e:b1:75:bd:a9:24:cd:29:
02:3f:29:12:7a:e8:19:ca:96:e3:3c:5b:72:48:fa:
9b:31:f7:cd:3d:71:13:3b:50:ae:57:34:0a:8b:4e:
6f:0b:a7:57:e8:75:4f:f8:a3:64:8a:28:c4:68:b6:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:74:42:0B:7B:09:99:5C:DF:A3:9C:B2:B9:23:6D:51:44:36:3B
X509v3 Authority Key Identifier:
keyid:CB:C2:EB:DA:3A:B0:85:10:EB:E9:A1:0E:60:BE:23:16:02:28:A9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/814dd0-09e1-4273-873a-7463815a3f4e/1/y8Lr2jqwhRDr6aEOYL4jFgIoqUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a1:7c:a4:29:16:70:4c:67:9a:90:d9:7d:01:b6:f3:6e:f0:
6f:bf:2a:f1:1f:6f:b4:c0:30:02:fe:42:88:20:d4:22:03:fa:
37:b5:36:49:f5:92:4c:f6:88:59:7e:f7:2f:32:8a:e6:83:38:
fd:a2:1b:c5:ea:4d:ef:55:10:cf:62:ee:38:61:97:2a:de:07:
bb:33:14:6f:72:3c:99:ad:02:35:14:38:12:c6:69:16:af:3c:
85:5d:5d:70:db:86:56:b0:63:d3:3c:dd:a2:70:70:63:e4:2d:
f8:e7:df:2c:5d:67:dd:f6:10:8c:d9:a0:5d:d3:fd:74:e5:57:
4b:bf:10:a2:5a:94:73:5a:d8:dc:8a:6d:9e:c9:ab:0a:05:f6:
98:f5:90:c9:ae:65:a0:49:80:b6:4a:0f:50:91:fb:b3:e0:9e:
c4:02:2c:54:54:ac:2c:d9:dd:26:a6:90:95:e9:fc:d7:90:8b:
c4:97:57:23:7a:f0:d3:aa:3f:9c:90:fd:d9:c0:fc:3a:f5:6f:
a6:61:99:74:a8:55:7a:0d:96:4d:41:8f:4e:b0:7e:b7:97:69:
bf:16:f0:10:6f:4b:91:79:c5:6b:84:b3:c2:4c:a0:29:b4:28:
83:98:6e:9a:41:bc:7a:db:9e:a5:60:ce:f7:cc:be:df:e3:e6:
54:0b:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:09 2026 by rpki-client