Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: jYBvMr3s8BjzuJtSIduLrpWqqZWwwmAEiqBro6E/myU=
Subject key identifier: 30:6E:42:2E:EB:66:FB:CE:BB:CE:65:E9:2D:A9:8B:68:26:08:E1:3C
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 019CAB33F29B98016FE70D44843B77BBEBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0C02
Signing time: Sun 01 Mar 2026 21:00:34 +0000
Manifest this update: Sun 01 Mar 2026 21:00:34 +0000
Manifest next update: Mon 02 Mar 2026 21:00:34 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: sIycDoWYX1putxz1UKRdOQcGHOk/Xr8pxN8sm/oamMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f2:9b:98:01:6f:e7:0d:44:84:3b:77:bb:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Mar 1 21:00:34 2026 GMT
Not After : Mar 2 21:00:34 2026 GMT
Subject: CN=306e422eeb66fbcebbce65e92da98b682608e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:5d:b9:09:be:86:ef:af:af:7a:7d:11:ce:
54:54:50:88:94:66:ad:84:26:37:ec:ed:da:4b:7d:
b0:df:74:26:c0:69:64:1a:df:3b:6f:9d:17:2f:f9:
b6:01:ce:4a:5f:eb:6d:46:ca:19:fc:0d:08:34:80:
40:cc:bb:29:ff:1f:0d:76:9b:b4:51:76:d6:f8:9b:
f0:c9:6d:01:a8:c1:5c:4b:c6:24:22:08:7b:4d:47:
85:e0:82:cd:02:35:5a:0d:91:1e:2a:3a:ec:8a:80:
78:22:80:8a:34:d1:cf:de:fe:07:e9:a0:3d:cc:e1:
5d:b8:4e:42:fe:03:60:c6:e5:5e:1d:a5:38:fa:99:
19:d8:11:c8:d2:0d:a0:5a:5c:3d:1d:f8:ab:53:7c:
7b:f7:c1:75:61:96:9f:dc:9e:bc:3e:7c:01:7d:a8:
0b:c8:c1:55:7f:75:d6:4f:0e:17:b2:7c:7e:4f:36:
27:95:2a:a3:e9:03:0b:90:06:f0:66:9e:b0:e5:54:
45:64:ed:f4:b8:7f:29:50:e8:ed:7a:a8:0f:41:30:
8a:7e:9b:f0:75:c0:ae:81:ae:3c:7d:5a:03:ca:1e:
5e:39:a7:fc:bc:43:98:3b:f7:28:99:4f:05:78:18:
ea:9c:c5:c6:ee:b7:1b:b3:9b:5b:04:00:9d:fc:db:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:42:2E:EB:66:FB:CE:BB:CE:65:E9:2D:A9:8B:68:26:08:E1:3C
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:16:1c:a8:20:3a:a1:4a:33:52:5e:fc:3d:fd:01:43:d3:5c:
6a:f2:df:c7:93:eb:53:97:7e:ef:77:3f:f3:06:18:83:b8:1c:
71:92:8a:28:15:e6:01:4a:a1:2a:06:53:1c:7f:11:2b:a1:ad:
ec:60:a4:f2:6e:62:a2:1a:97:1d:8d:28:60:4c:53:c7:f5:d7:
d3:1e:b2:66:11:11:7a:f4:66:46:be:df:96:8a:fe:55:99:ea:
1b:34:6b:d0:09:e6:35:f7:15:38:e5:39:7f:83:f5:51:bf:fe:
a7:68:50:a0:d7:db:bb:c4:b9:6f:90:44:48:f6:ba:a5:3f:c0:
33:17:94:0a:5b:52:ef:66:db:e7:8a:12:80:1d:0d:b1:7b:9d:
4f:b3:f7:12:89:f6:ad:8f:09:4f:5a:f2:dc:1f:bb:03:6c:2b:
11:aa:8a:94:e0:3a:be:16:4a:af:84:ff:b6:73:b3:68:fe:fe:
8b:c4:46:8d:d6:9f:54:31:c6:de:4f:0c:17:2f:5a:9c:83:19:
39:d4:f3:65:be:32:6c:fd:54:d1:df:95:df:cf:90:d9:06:af:
a5:86:08:1f:86:8f:01:4c:7e:89:69:ba:c1:a9:71:25:42:f3:
e1:e9:79:bc:36:2b:44:5d:57:87:63:34:6b:6f:b0:df:27:e5:
4b:a9:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:22 2026 by rpki-client