
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: 6F13BCplEgrzJTeLi+D20szPWqLnmprD/ts8TN9M3ow=
Subject key identifier: 05:4F:7D:68:76:64:43:06:86:8E:CA:D5:96:38:B5:2F:4D:38:F4:5E
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 019CAB6AFAEF1644926A542052F4CA75321A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 0B6E
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: oLkvKsVTzV3X2uECtnLQNEKiz923S82UcjLOeVqJSTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fa:ef:16:44:92:6a:54:20:52:f4:ca:75:32:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=054f7d6876644306868ecad59638b52f4d38f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:9e:2c:3b:f6:c2:b2:3e:e0:ec:e4:ed:73:
48:78:81:85:81:12:63:e2:ec:6f:d9:20:53:fb:36:
60:01:b5:d2:cf:f7:f7:c5:35:cb:90:77:c4:dc:b8:
6f:ce:94:2a:42:e6:52:4d:96:58:91:2f:2e:7d:72:
6a:b5:c3:16:d8:a8:e5:d3:30:85:1f:ac:aa:f1:98:
a0:05:9e:70:c6:74:7d:9a:ca:15:b8:f8:ac:09:86:
2e:0f:dc:3c:bb:e1:dd:fe:7a:e9:9f:fc:bb:bd:b8:
ac:35:3e:08:45:9c:31:ca:6a:40:08:4d:ef:20:a5:
7d:35:47:4b:9c:70:db:30:20:59:f7:97:cd:b0:e4:
7e:04:2f:75:ba:a2:5b:94:32:88:11:03:49:6b:33:
20:0e:53:34:28:b2:75:de:bc:9c:91:6e:37:34:1a:
08:d0:d4:e8:7a:19:3e:3b:14:f2:19:ce:79:ae:5d:
3f:34:93:42:ac:7b:cd:f6:f8:5d:fb:54:cd:28:82:
8c:a3:cc:9b:81:76:5e:67:d6:0d:a0:4e:fa:c7:57:
2d:43:ec:cd:ab:44:ae:f6:cf:1c:41:60:15:40:a8:
88:34:47:83:07:7d:df:88:73:9d:eb:b7:dc:41:85:
ed:e9:dc:e3:1b:34:07:0c:a8:cb:ac:48:6f:b9:e5:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:7D:68:76:64:43:06:86:8E:CA:D5:96:38:B5:2F:4D:38:F4:5E
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:60:1a:8f:21:45:a1:71:d6:ce:95:5a:a7:c5:54:c5:00:
bb:83:75:47:19:b3:14:45:13:cc:df:e4:5b:eb:ae:94:70:3a:
f0:88:31:49:de:0c:bd:bf:e3:18:4e:dc:56:6b:8d:8c:17:cf:
d0:dd:48:80:38:99:57:e1:f1:e0:f0:44:13:8a:47:db:a7:89:
cd:a7:b2:50:de:97:c1:16:d0:58:50:49:1e:4d:47:69:19:0b:
77:a0:5f:33:66:1a:fd:ab:9c:24:0d:16:9a:ba:6d:bf:aa:33:
8d:d7:0a:19:31:25:ca:04:5b:82:f9:b3:3e:be:c3:6f:74:b3:
20:37:28:23:62:82:6d:d6:df:83:79:0c:77:27:4c:15:df:aa:
cc:11:44:b9:a3:94:4a:e6:f0:44:f8:87:63:bf:e0:77:04:65:
df:0b:bb:40:36:c7:b7:3e:3a:53:ca:a8:09:bf:c9:ac:23:57:
97:0b:71:24:4f:5e:7b:f4:fe:4d:de:74:c8:52:ad:e0:87:c9:
f2:95:50:54:45:68:d7:c3:19:f4:f0:56:cf:e1:d5:f2:0b:ac:
14:93:e3:81:bd:27:94:63:8e:d2:67:e9:67:0c:43:e8:e4:bc:
7d:4c:b5:80:7c:49:9e:dd:c2:c6:c1:29:58:a1:db:e0:c1:8f:
1f:92:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:10 2026 by rpki-client