Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json)
Hash identifier: xcrbBokFhHTLDX8287HtHxBINESvMCX1d4YKoDAaP9k=
Subject key identifier: 7B:FD:AF:45:33:01:6C:0F:55:99:25:9E:4A:EC:20:72:4A:81:0F:14
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 019CAE6BDDDAAFA0ECE34D1D1FD74E275820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
Manifest number: 0947
Signing time: Mon 02 Mar 2026 12:00:30 +0000
Manifest this update: Mon 02 Mar 2026 12:00:30 +0000
Manifest next update: Tue 03 Mar 2026 12:00:30 +0000
Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: DmLHHhFSHHfEOEU6L13YZ6ZTLdvm0gpvnHc+gVH2JpI=)
2: s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa (hash: BNwYHP0l3nBNhLmZ7ujjnphTmZw0h/PTPtEuxgq/BC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:dd:da:af:a0:ec:e3:4d:1d:1f:d7:4e:27:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Mar 2 12:00:30 2026 GMT
Not After : Mar 3 12:00:30 2026 GMT
Subject: CN=7bfdaf4533016c0f5599259e4aec20724a810f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:dd:8f:b6:88:81:f9:df:70:dc:4b:58:16:
4b:c0:09:9a:41:51:77:37:20:6c:c4:8a:ac:8e:0b:
49:68:f1:17:90:cc:1c:41:6c:43:b3:d1:c6:d7:4d:
c1:24:cb:aa:84:1a:83:36:7a:5b:14:d9:8d:72:be:
d2:18:c5:9c:7e:98:13:ff:26:da:e2:03:df:4c:f3:
ea:20:0d:74:42:9f:c5:df:14:bd:ac:65:ff:ea:cc:
b3:5c:ee:ae:58:f2:88:ba:d3:c9:4e:53:f1:ce:31:
ec:89:55:5b:48:04:46:6e:0f:64:31:4b:73:72:05:
df:ae:b2:09:fc:fd:2c:fd:55:01:d7:90:0d:62:c2:
eb:61:53:c7:fb:98:7c:5f:37:28:bd:8d:4e:b6:60:
2b:db:bc:0c:63:73:52:8c:f8:32:98:ee:08:54:9f:
8d:09:92:23:64:b0:cc:d0:eb:51:a2:11:7c:49:16:
14:72:e0:ed:96:81:b8:a6:f0:47:ec:13:fb:74:72:
82:1e:b9:38:ed:51:9e:b3:ff:de:42:1d:19:da:cd:
42:32:51:09:85:a6:10:45:a8:49:83:98:07:66:3b:
70:cf:8f:9b:03:a0:56:f8:2a:b2:61:be:1c:a5:47:
77:46:3e:c0:c4:5d:68:4f:dc:db:08:22:31:22:5c:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:AF:45:33:01:6C:0F:55:99:25:9E:4A:EC:20:72:4A:81:0F:14
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:b6:9d:de:56:5a:05:91:c6:bc:69:04:ec:1a:66:46:f6:
d8:29:00:e9:2f:e8:69:2c:ba:3c:0c:b8:c0:28:84:01:54:79:
e1:84:48:8a:1f:79:2e:3f:ee:3e:eb:f5:e1:58:03:38:b4:52:
97:28:42:44:b4:87:ab:74:d3:c3:34:93:3c:cb:af:2a:3a:8a:
ef:12:e4:d1:26:f6:cb:67:0c:bc:55:51:af:9b:55:42:8d:be:
dd:dc:c4:c9:6e:be:24:b8:e3:fd:d4:47:87:55:02:9b:00:3d:
56:3b:44:11:ed:e8:3a:62:8d:6d:e9:6c:75:11:cf:c4:34:bf:
0a:dc:3d:e9:56:e9:4e:4c:78:84:cb:3d:67:a2:76:aa:e1:78:
30:5b:22:49:a9:bf:2f:a2:0e:2e:c5:01:0d:f8:58:0f:6d:f9:
16:95:f3:0d:1d:4d:32:1f:ac:d5:cf:7c:fd:fe:c9:70:ed:34:
5b:d9:a1:69:6c:9e:d0:06:cc:88:d4:dc:39:14:a6:c1:15:11:
73:0d:de:d0:04:1c:75:32:b9:88:21:80:57:d1:d3:65:59:0f:
07:aa:21:03:37:18:24:94:f4:86:b5:9b:da:94:a3:1a:51:f4:
5d:2b:86:9e:70:da:b5:bc:be:83:b5:77:c9:44:df:4a:1e:10:
55:1f:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:24 2026 by rpki-client