Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: XEg+DRqhbRrXnqt3YmYHQ4mZdgtc/MbGEWrG/x/BLIA=
Subject key identifier: 0C:C0:FD:E0:51:55:71:A4:B3:F8:E9:2E:44:FA:0F:99:9C:C2:7C:83
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 019CAB6B6AACC4A7F460A479A56686816A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 22:01:09 +0000
Manifest this update: Sun 01 Mar 2026 22:01:09 +0000
Manifest next update: Mon 02 Mar 2026 22:01:09 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: A9hGK++HDiCCE54LZfHVGzeGvMlErslKvnm0xdNWkPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6a:ac:c4:a7:f4:60:a4:79:a5:66:86:81:6a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Mar 1 22:01:09 2026 GMT
Not After : Mar 2 22:01:09 2026 GMT
Subject: CN=0cc0fde0515571a4b3f8e92e44fa0f999cc27c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:bd:97:e8:24:7f:3f:42:88:b1:56:7c:66:
ac:56:7d:3a:1f:82:09:a3:fa:cf:9a:ed:a5:56:af:
18:ca:06:18:f8:8f:f9:9e:c8:92:7f:c8:60:dd:26:
9c:9e:e8:98:6a:27:f4:ff:75:21:b9:b0:aa:99:8b:
b4:06:e8:11:ec:33:9a:b9:63:c9:c2:d0:f8:62:c6:
f9:ec:85:80:2f:7c:38:1b:64:84:96:36:be:79:ae:
2b:e6:90:05:d2:5a:1e:50:69:a7:85:2c:62:e0:13:
45:46:e1:ea:1c:0e:4c:1d:b2:5f:e8:06:6f:4f:5c:
ce:da:c7:2d:47:d5:10:0a:f2:09:3b:c1:e9:8c:29:
0f:06:01:80:11:47:81:19:bc:e2:f3:8b:44:b7:02:
e7:e5:65:59:a9:a4:24:1b:45:ff:44:04:60:f3:d5:
d1:45:05:1b:dd:f0:b0:7a:9c:a3:bc:c6:b6:28:b3:
6d:75:21:77:e8:60:a6:1e:3d:09:09:3e:51:27:4a:
cb:e4:fb:84:8f:d4:39:c6:3c:19:45:44:43:6f:31:
b2:12:78:d0:d4:ee:8c:ab:a5:b5:ca:04:a0:68:88:
74:37:db:25:a3:f6:8b:37:06:35:0c:1e:4a:0b:f2:
b0:2c:f9:d9:e2:47:d7:5a:bc:c2:f6:8d:07:29:91:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C0:FD:E0:51:55:71:A4:B3:F8:E9:2E:44:FA:0F:99:9C:C2:7C:83
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:61:17:22:be:37:e6:d9:52:b3:76:7c:0a:7f:d6:da:3a:cd:
42:ee:03:13:3a:4d:c4:2a:61:37:62:f7:0c:f4:5b:83:8c:c6:
3c:2e:05:53:0b:59:3e:8b:a9:68:7f:b2:21:50:dc:d8:9c:44:
68:2d:df:b3:a2:1c:62:cd:66:0c:5b:16:83:ef:b1:2f:09:88:
69:2c:81:46:64:23:ce:50:e0:21:89:29:70:bd:8f:19:62:2a:
b9:c2:88:75:92:68:99:6b:72:44:ed:49:bb:31:b3:35:97:1f:
9e:5a:6e:43:d2:dd:37:b2:a6:58:94:bc:64:8f:9b:70:18:ff:
fa:52:3a:26:03:db:ff:84:3b:0d:73:0e:86:74:a7:12:35:2d:
c1:88:5f:8c:04:a1:a3:28:ab:73:37:7d:dd:8f:11:0e:60:48:
70:0a:78:c3:50:21:1c:67:43:9b:3d:81:a2:2b:a4:af:21:09:
53:c4:8d:49:3b:a8:ce:c6:58:2c:4f:f1:8c:cb:68:93:37:ae:
98:ff:6d:29:f4:63:07:ae:d6:0c:99:a5:da:cf:c5:c0:3f:07:
36:5f:b9:00:e6:90:67:f9:a7:7a:8d:d7:b0:6e:52:65:34:fc:
d0:37:c9:ac:b0:72:31:65:6c:32:52:48:47:7e:3c:89:16:29:
c4:e1:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:46 2026 by rpki-client