Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json)
Hash identifier: DmKhZU8WD75RfQOcETBlKdE51VUxUXZyeWMWTRoa/Y8=
Subject key identifier: C7:02:F4:44:83:3D:80:05:C8:43:30:85:60:E7:16:39:7F:31:A5:65
Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Certificate serial: 019D98F54201399535FFB38C2D091A2FB9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
Manifest number: 15AF
Signing time: Fri 17 Apr 2026 01:01:43 +0000
Manifest this update: Fri 17 Apr 2026 01:01:43 +0000
Manifest next update: Sat 18 Apr 2026 01:01:43 +0000
Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: 0/4UunNMQIaigfvSwcGdX/tDmgJefOS1doUvZ0Ic3Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:42:01:39:95:35:ff:b3:8c:2d:09:1a:2f:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a
Validity
Not Before: Apr 17 01:01:43 2026 GMT
Not After : Apr 18 01:01:43 2026 GMT
Subject: CN=c702f444833d8005c843308560e716397f31a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:78:28:4f:e0:de:87:0c:72:a9:83:d7:7d:
44:e4:2e:aa:4e:06:4d:9a:66:b7:3a:74:95:b3:d5:
52:80:9b:ac:58:1f:0b:6c:28:c1:57:7a:a3:38:ec:
29:67:3e:06:ea:bf:ba:96:22:f0:58:59:9c:89:18:
f6:5b:ab:40:b0:35:03:f2:42:57:b4:02:08:b8:6b:
54:fe:6c:a8:1e:14:20:08:77:4e:61:15:dd:31:59:
4d:c0:e9:8f:9f:0a:e2:cc:11:d8:e2:9d:36:ca:ad:
ae:f1:fc:74:99:20:e6:6a:b7:2d:88:33:3c:95:24:
29:e4:58:a2:4a:ac:10:60:aa:fb:f5:cc:8d:39:82:
02:85:14:02:61:18:6a:ba:40:7b:9a:42:91:3d:ae:
97:f1:25:89:b2:cc:f9:a7:45:df:c5:6a:d3:01:41:
7f:10:bc:26:1b:99:d6:7d:14:23:df:7b:b0:83:53:
d2:e6:5b:c2:cb:33:c1:a0:c8:66:73:90:d8:ec:c3:
8c:e4:8a:48:8a:ba:59:39:01:de:21:fe:41:7c:25:
78:78:83:86:82:5b:7b:0d:45:04:98:0e:f7:22:7a:
4b:21:1e:a2:fd:63:c9:95:36:29:8e:89:b6:66:3d:
b7:75:bd:ef:d4:cc:59:e6:fa:4c:dc:95:3c:c1:58:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:F4:44:83:3D:80:05:C8:43:30:85:60:E7:16:39:7F:31:A5:65
X509v3 Authority Key Identifier:
keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:93:1c:53:17:6b:e4:f6:d9:50:f3:89:5d:16:12:95:9f:2e:
1d:85:1c:08:ef:84:99:4c:36:32:fd:3e:dd:78:73:e6:ae:f9:
81:b0:55:a6:59:4f:e4:b1:c0:4f:1d:d2:a1:21:dd:09:7a:ac:
1f:59:08:6c:4b:43:f2:25:34:d9:7c:03:d3:65:5d:8c:82:a6:
d6:37:5e:25:ff:5c:1e:43:7c:24:ab:f9:a9:5d:05:f7:8d:40:
35:bf:34:60:bd:16:ed:a5:5a:eb:70:a2:c3:3e:12:34:a8:24:
37:51:c4:5b:32:56:a5:0c:86:a0:40:7c:d8:36:0b:91:06:85:
cf:53:2e:3b:0b:16:c2:6b:18:15:76:59:21:b2:3c:fd:62:50:
9f:51:82:74:08:cc:66:25:d0:43:fc:ec:f2:14:22:a5:70:55:
bd:d6:46:4c:6a:97:5f:6d:65:97:01:1d:69:c5:2a:de:1e:ba:
56:51:e3:28:6b:d4:a8:df:fd:de:5a:aa:33:28:8f:43:d7:45:
33:26:2f:99:87:0f:46:5b:85:20:64:08:f3:6d:1f:9a:3e:5c:
51:ab:42:09:1a:8b:a0:bc:dc:ae:60:d3:64:b1:c0:89:13:83:
69:1c:3d:d5:fe:6b:c8:18:88:72:bf:1f:d8:5c:a8:51:2a:ab:
e3:3a:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:14:44 2026 by rpki-client