Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json)
Hash identifier: yDiePZJAKu4iuGEodZaCZ+rdbfGF3CuvbwgGwvDQai0=
Subject key identifier: C8:ED:AE:8F:64:50:0C:0D:65:F8:B0:D6:05:B3:20:41:28:68:9D:A5
Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Certificate serial: 019CAB6B76194FFE62B8601E5A829DB3EF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
Manifest number: 1010
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: lUaz/rk0UGBC94MyJbnMKAqsEagoYq/EAIVZb4lKiuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:76:19:4f:fe:62:b8:60:1e:5a:82:9d:b3:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=c8edae8f64500c0d65f8b0d605b3204128689da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:02:4f:08:a4:7d:34:f3:5c:ea:72:f6:fd:d3:
3f:fe:26:1f:35:6d:70:99:e8:b3:e8:f6:82:2f:68:
ed:58:0e:5b:df:f5:ae:67:13:c5:84:5c:42:ca:5d:
cb:77:4e:3f:a7:5c:6e:cc:8c:8c:f9:fa:7c:0b:4c:
be:c9:f1:68:e7:81:c4:f5:b2:7e:70:9f:86:0e:80:
dc:82:3e:53:1b:5c:07:8b:9e:a1:ec:1b:ad:f7:3f:
bb:25:27:e5:c3:0e:f8:a6:8f:ba:25:53:75:bf:c9:
6e:cd:5a:b7:81:1e:1e:bc:12:12:89:19:f2:11:7c:
01:f7:f0:84:03:04:d3:6f:07:33:30:12:37:fb:aa:
2c:c7:7f:bb:9c:52:cb:eb:70:ff:e2:b4:6f:4d:f9:
a0:9c:36:c5:50:5f:3d:ce:db:07:c6:46:44:02:17:
eb:6f:59:2c:d4:d5:7c:e2:f4:bc:da:5d:21:3c:89:
c4:20:47:02:f2:65:4e:95:f6:cb:9f:57:1c:53:d0:
b5:b8:76:4a:ec:1c:d9:d3:c4:5c:e1:fb:02:f7:e7:
42:e1:f6:2f:dd:e3:c2:81:ea:a4:64:11:19:75:d4:
f8:c0:0e:8f:e8:bb:38:4a:da:ea:1e:5b:3e:25:3e:
85:dc:74:bc:f0:d2:08:e3:f8:04:85:90:24:46:48:
c5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:AE:8F:64:50:0C:0D:65:F8:B0:D6:05:B3:20:41:28:68:9D:A5
X509v3 Authority Key Identifier:
keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:ce:8e:a9:7d:67:49:ef:d0:a7:1c:fc:9d:eb:6a:2b:54:
88:34:a5:95:2a:3d:1e:87:1e:52:15:21:12:87:82:c7:7d:3d:
fa:ad:c5:26:6f:9d:03:ff:f0:3f:82:fb:77:eb:07:47:c0:b5:
09:28:a1:51:5d:ec:9a:79:45:78:e2:70:b2:42:df:e8:bd:75:
88:79:5b:a3:d6:b2:9b:25:3c:96:3f:72:67:c9:96:a2:15:f4:
ad:9f:6e:89:a3:91:b7:b2:48:e8:d9:cf:22:dd:8d:c0:6a:d4:
72:32:aa:e5:93:59:e8:a0:79:22:2a:85:fe:eb:2b:e1:24:48:
1e:a7:78:b5:9f:a3:08:88:71:37:02:c9:5f:be:7c:f2:0d:db:
5b:aa:6e:0d:7b:3c:94:ea:ba:a9:a2:ee:07:97:0d:e6:24:95:
16:a3:07:81:dd:5e:cd:30:ea:1b:ae:41:a4:c4:3f:ff:80:16:
dd:e5:0e:42:3e:15:2c:e8:86:ff:41:35:81:5f:2a:51:ef:fc:
a5:0d:0f:22:c7:96:96:e8:3f:5c:51:28:d5:60:e7:de:cf:56:
8b:20:22:3e:b0:c2:08:05:7b:0d:6d:9d:c7:18:19:02:3d:a7:
3a:92:ba:af:82:cd:3c:f3:d1:7e:47:da:fe:ee:35:e5:c2:50:
e5:3f:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:24 2026 by rpki-client