Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier: pedMh7bi5+GkCOWvV24nWROP1wHIjbHOlMJgVD5a9E4=
Subject key identifier: 73:45:C2:D2:5B:01:3A:6B:5B:F5:EF:B5:7F:FF:21:41:15:3A:18:6C
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer: /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial: 019D9AE30FB8A02C00717EEC01995820AC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: SoATavcgI266U3FbW2ZaXme4gXBrKYyTGKXGnH4Fsoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0f:b8:a0:2c:00:71:7e:ec:01:99:58:20:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=7345c2d25b013a6b5bf5efb57fff2141153a186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:7e:02:87:5b:7e:8e:be:d7:cf:3c:1f:a6:
c2:05:60:37:9d:ea:03:2d:35:9e:5e:0e:6f:f3:b8:
2e:e3:03:79:ea:6b:3b:f8:85:06:2f:8c:af:20:d6:
4b:83:c0:14:7d:df:33:aa:ba:1f:5b:14:7e:b2:7c:
0a:d8:cc:71:42:69:ec:39:38:bf:54:6f:8a:4f:b6:
4b:3f:46:9f:a9:cc:34:51:aa:51:f0:4a:63:94:d4:
37:b9:37:23:bc:48:3e:12:b6:c6:b7:73:d6:8c:c1:
e0:ef:34:57:ea:9b:ea:60:32:56:cb:d8:85:7d:ca:
ea:97:67:e6:87:f6:9a:de:04:4a:d2:56:ef:ec:71:
0f:ca:69:08:eb:a7:3a:f8:85:ea:85:28:89:71:e1:
21:32:0f:1a:46:91:10:94:68:6c:d6:8b:97:06:d7:
17:d2:84:1d:9f:40:06:6d:72:7c:e0:17:9c:ac:05:
ef:e9:55:f0:dd:33:2d:39:8a:7f:87:47:fa:9e:ec:
53:db:1f:09:a2:66:ea:bf:1b:3f:d7:4b:50:cf:0b:
34:bd:5c:b1:f7:88:bd:de:14:a1:a3:85:1a:6a:b1:
55:c5:cc:3c:54:f4:85:6c:9b:cf:c9:e4:76:cd:08:
8b:c9:04:bd:f4:eb:bc:c5:32:bb:51:ae:13:e8:a0:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:45:C2:D2:5B:01:3A:6B:5B:F5:EF:B5:7F:FF:21:41:15:3A:18:6C
X509v3 Authority Key Identifier:
keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:87:aa:87:3b:61:e6:b2:bc:0a:b5:c6:a2:c6:f5:5e:67:24:
9e:4d:50:b3:f7:e2:3b:70:e6:15:56:8e:13:f3:f8:8d:da:11:
12:c5:db:21:54:ed:c8:08:e6:72:ce:fa:12:0b:72:20:45:56:
d0:e4:df:95:ac:fc:ed:0d:dc:3c:81:0c:c5:c0:3c:d8:e4:6b:
cd:1d:9e:b5:67:3c:f1:a6:a2:79:09:51:64:4a:89:b4:cb:95:
cd:95:04:39:f5:6e:dc:d2:c2:86:eb:85:4a:ea:87:54:ea:f7:
e9:71:2d:22:b7:f2:f2:7d:f8:70:ce:ac:c5:db:61:f4:82:b2:
e6:fa:67:f9:b5:c0:f4:bd:c8:71:e3:8c:39:5a:ac:97:56:1e:
49:cb:b3:25:db:a6:80:28:0b:4d:6b:4d:d8:d8:bb:ab:de:90:
28:6f:a4:fe:0b:82:ac:4e:6b:f4:53:04:f7:b1:b2:89:d5:b7:
e9:1b:b4:5e:d6:9d:36:42:0d:98:80:56:d6:cf:0f:a1:78:6c:
49:d5:69:de:76:1d:cf:e4:34:4b:30:fa:50:4b:94:96:51:c7:
55:63:05:29:ba:07:d3:ab:af:27:73:6a:5f:d9:a1:20:12:52:
ca:fd:2b:dd:84:b2:db:88:66:8a:f8:6f:21:29:ea:55:1d:3e:
e2:c8:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:00 2026 by rpki-client