Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json)
Hash identifier: A4HbRr/rc3+3r/o4w/xebAwadMtsiMc0AFEt7lxkUXc=
Subject key identifier: A2:F1:AA:D4:5D:9E:2C:64:6F:6F:A2:7B:58:B2:AB:0F:53:B9:59:A6
Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Certificate serial: 019D9A3E78CA8B3EC9B888DCF76DF2E85B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
Manifest number: 12B9
Signing time: Fri 17 Apr 2026 07:01:18 +0000
Manifest this update: Fri 17 Apr 2026 07:01:18 +0000
Manifest next update: Sat 18 Apr 2026 07:01:18 +0000
Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: tSpidb/GCiMSEW6AQlKmPm2qIhjzlIsTc9FrgMIU3Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:78:ca:8b:3e:c9:b8:88:dc:f7:6d:f2:e8:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9
Validity
Not Before: Apr 17 07:01:18 2026 GMT
Not After : Apr 18 07:01:18 2026 GMT
Subject: CN=a2f1aad45d9e2c646f6fa27b58b2ab0f53b959a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:8d:29:45:1d:87:be:a1:ff:32:45:08:ce:
37:93:59:24:97:e6:4b:d0:e8:98:03:a6:d3:2e:11:
f8:8a:4b:46:fe:2b:65:03:fd:94:b4:8d:3e:17:f8:
3d:89:78:dc:1a:f1:49:8c:5e:68:d1:37:8e:0d:cf:
55:68:b1:f0:2c:b2:9e:4b:ab:eb:34:77:cf:d0:74:
fe:27:c5:da:fb:fd:b9:4d:ec:3c:c4:fd:5c:eb:94:
ce:d1:07:b8:78:c1:b1:d6:5d:3a:aa:43:c2:a1:72:
fc:45:7c:54:87:96:74:68:45:f5:50:9b:2e:dc:6d:
4f:02:1f:ad:74:cd:7a:6d:61:bc:d4:57:f5:0c:ee:
05:8a:91:7b:f5:56:b6:19:55:2c:40:86:e7:05:e3:
d6:1f:e4:cc:62:3e:18:a5:f2:af:33:e1:91:d9:0a:
44:ba:97:33:46:fa:a0:ee:c2:02:55:7d:2e:b5:80:
a5:d9:4e:33:01:65:6d:32:da:b8:b3:c5:e2:d0:54:
0e:bb:ba:0a:6e:27:79:30:a4:e9:36:e4:70:d3:31:
5e:8e:c7:ef:51:d4:d0:42:c1:92:1b:fa:7b:6d:48:
a1:ee:99:4a:99:a4:a1:96:bf:31:fe:a7:b9:8a:65:
48:e1:10:a9:ad:b1:3e:82:91:95:6d:95:9d:ef:20:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:AA:D4:5D:9E:2C:64:6F:6F:A2:7B:58:B2:AB:0F:53:B9:59:A6
X509v3 Authority Key Identifier:
keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:06:fb:85:37:07:59:be:2d:73:db:50:b3:e8:fb:92:52:68:
dd:e8:e1:85:0a:fd:34:b0:15:23:48:67:96:95:0f:72:59:f1:
d1:31:5e:4c:49:e5:1a:e8:f3:4f:db:82:95:99:b3:b0:c5:71:
3b:8c:43:d4:8c:15:be:5b:19:c2:5a:5c:96:95:b6:04:cd:ab:
8a:ee:e9:3a:50:c9:57:1a:be:a9:31:67:94:98:d5:22:a1:8f:
cb:2b:7c:45:63:55:8f:c3:d4:70:95:2e:35:38:b5:be:0c:2b:
cb:8f:f8:63:85:e6:1e:bd:95:94:a9:82:26:f9:5e:8e:34:9d:
3d:5b:d0:ba:32:8b:fb:d6:82:e6:94:7f:c0:47:5f:21:c8:86:
90:3e:10:c2:ad:07:31:eb:0b:c1:0d:6c:e4:6a:fe:b2:ca:e4:
51:c6:d7:0e:08:59:12:28:51:d2:26:35:27:b8:80:e2:13:32:
80:fd:47:f8:d6:e5:56:05:a3:9f:15:81:77:a1:8b:0d:bc:4b:
c6:1e:7e:19:27:ca:17:0b:a7:63:da:0e:63:da:0c:7d:a6:e3:
c0:66:ab:65:1f:10:5c:51:2e:89:52:45:12:cc:35:03:dd:28:
25:44:e5:1d:34:e1:1d:ea:32:db:21:7c:e4:fe:87:2c:6d:93:
4a:74:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:06 2026 by rpki-client