Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: fYldTQuJMOGFCh8gp800XLyiFTN1WH5xTxzMvshCIUI=
Subject key identifier: E2:A6:B5:39:9E:8D:8F:A8:F1:67:CE:FE:DF:79:76:84:61:F6:19:D4
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 019CAC1061F289CE92E14FEFAE77DE093E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 01:01:20 +0000
Manifest this update: Mon 02 Mar 2026 01:01:20 +0000
Manifest next update: Tue 03 Mar 2026 01:01:20 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: MirY9ZJ6uszPAHDKculuNOnULL9kv7AuLEJR5nI+TuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:61:f2:89:ce:92:e1:4f:ef:ae:77:de:09:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Mar 2 01:01:20 2026 GMT
Not After : Mar 3 01:01:20 2026 GMT
Subject: CN=e2a6b5399e8d8fa8f167cefedf79768461f619d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:78:87:ae:e0:7d:ea:08:7a:0c:84:b0:d4:
3f:00:79:08:2a:06:2b:2b:84:44:01:0a:46:d2:cc:
03:0e:0a:ef:35:d2:44:f1:da:10:f4:e1:f9:73:8b:
3a:1a:d4:5f:e4:51:69:fb:7f:66:d5:1e:65:f0:77:
e7:f3:88:d8:2e:c1:be:a9:7d:8d:2e:b9:01:79:6f:
38:98:d3:68:f3:20:92:99:8e:f2:88:97:c5:8e:48:
b3:d0:d8:d3:9b:3f:13:c1:14:dd:3d:b4:9e:78:5a:
41:3a:76:13:e2:43:62:72:c8:69:45:92:95:7f:69:
52:90:62:2e:00:f2:00:cc:f2:a1:2f:a7:ad:a9:f0:
3e:56:22:fe:66:1e:4e:e7:ef:9d:2f:d6:22:dc:d7:
a5:37:7c:ac:5c:f7:70:fa:e6:cc:b9:32:e0:31:f6:
6a:57:c4:d0:f7:48:95:05:64:6d:85:f1:b2:a7:04:
c3:a1:fc:32:20:17:09:06:6d:81:34:cc:5a:37:3c:
b1:58:ac:98:87:2b:31:7a:f8:d0:52:7a:d6:ee:e3:
b6:e0:9a:c1:b7:ef:22:37:48:aa:ea:2f:9e:d2:3d:
38:5f:09:bf:70:9d:fd:7b:23:79:a0:76:cf:1c:42:
59:3c:f1:8b:89:25:f9:1a:e7:98:1a:45:c7:bf:13:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A6:B5:39:9E:8D:8F:A8:F1:67:CE:FE:DF:79:76:84:61:F6:19:D4
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:ab:82:21:27:14:c2:5a:2f:fd:a4:74:be:a9:2b:80:8e:9a:
a4:ea:c3:fa:e2:0f:6a:84:82:25:c0:bb:d6:53:e4:f1:44:da:
eb:81:87:e7:be:8a:fe:e0:77:de:f0:d8:18:d9:2c:35:24:a9:
bb:5e:01:85:d0:d0:bc:4c:6b:1e:80:1a:d5:b5:07:24:32:0a:
69:57:e5:b1:65:bf:c2:fa:ff:80:11:6d:77:42:b8:5a:bc:cb:
76:6d:52:6c:05:7a:71:65:bb:92:3f:21:6f:1d:1a:b6:d3:1d:
73:8c:8d:15:2e:3b:66:a4:7c:04:72:d4:a6:82:1d:4e:a9:ce:
bf:c8:d9:59:28:f6:44:bb:e7:12:4a:8b:60:ba:6e:f9:55:8a:
9b:52:a2:27:72:6d:13:1b:d9:a0:ff:2f:e1:b5:d0:51:ef:a7:
71:c4:bc:a4:82:7b:15:d5:36:5b:e0:61:38:0c:ff:e5:c9:cb:
83:a8:51:5c:7a:49:39:6b:b0:40:47:60:b0:98:b8:56:0b:f4:
55:0e:6a:bc:11:fc:0a:56:04:bf:a6:35:61:ff:c6:1b:97:a1:
66:39:cd:87:43:08:31:ac:44:25:d0:36:65:c2:47:65:d3:af:
67:3a:97:2e:54:fb:15:50:c8:15:2e:88:b6:2f:08:f4:c1:a1:
05:73:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:16 2026 by rpki-client