Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: xw1O8lE/VfBP4Weqo9ZP655WM/kWVdXP62JM1A68GOk=
Subject key identifier: AB:1E:F0:15:00:28:4A:5F:4C:16:FA:AC:6A:3F:89:34:48:0F:34:AA
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019D9BF54DAE5FB60FBFAAF0880A5CC3D2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 15:00:37 +0000
Manifest this update: Fri 17 Apr 2026 15:00:37 +0000
Manifest next update: Sat 18 Apr 2026 15:00:37 +0000
Files and hashes: 1: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: vGZdrYW2TBL5j1JOuIFc1sECqgFsh84kuLNBgfWJRDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:4d:ae:5f:b6:0f:bf:aa:f0:88:0a:5c:c3:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Apr 17 15:00:37 2026 GMT
Not After : Apr 18 15:00:37 2026 GMT
Subject: CN=ab1ef01500284a5f4c16faac6a3f8934480f34aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c3:38:2b:ba:a5:6b:76:2c:22:26:96:d0:29:
14:41:9c:3d:70:ee:90:be:28:67:b9:03:7f:ff:4e:
b6:f6:d2:81:cc:6b:a2:05:c2:82:9c:0e:32:ce:48:
de:63:4f:92:03:a0:3b:d5:e6:c1:82:d5:76:83:58:
8a:de:0c:a0:55:12:d7:f5:3c:4e:c5:84:3f:72:e5:
c7:cf:84:15:a3:44:4e:9e:98:5d:26:7f:19:aa:21:
50:65:4a:01:bd:88:60:c0:39:c9:40:b6:62:e5:72:
cb:5c:4e:27:56:65:45:3c:5a:95:00:97:78:66:84:
3a:ac:f5:a6:ae:e0:ce:53:7e:5b:fb:d0:3b:5f:59:
35:17:0b:8e:47:4b:0f:b2:33:0f:a8:61:c9:ca:ea:
a0:35:03:08:77:cd:7d:db:04:97:4a:76:fc:42:db:
9c:92:9c:3f:9e:03:fe:ab:12:1c:ac:f0:99:96:08:
7f:eb:ca:06:28:02:b1:81:c8:de:20:17:da:c4:66:
04:b6:e3:fc:1c:41:1c:53:8d:87:de:6d:f6:51:da:
a6:8a:36:67:13:97:58:5f:76:19:27:a2:47:54:73:
32:08:ce:6f:f2:97:b5:1d:c5:b2:fa:88:c8:b9:25:
b8:db:27:09:ac:c1:b1:70:da:a0:f8:41:3e:16:52:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:F0:15:00:28:4A:5F:4C:16:FA:AC:6A:3F:89:34:48:0F:34:AA
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ad:79:91:2f:c1:3d:0a:1c:19:47:12:de:b0:fe:7c:07:bc:
80:31:fe:51:e3:fa:bf:47:40:10:c8:6f:d8:8a:62:2b:15:db:
3d:cb:75:e7:b8:87:56:29:50:94:78:ef:1c:5f:b0:f7:9d:5d:
e6:a0:8d:e4:2e:d9:77:23:ce:5c:f1:4b:3d:5f:6a:92:61:1c:
1c:c2:79:10:0a:44:b3:f2:68:e7:cb:db:0b:70:60:0f:01:f3:
34:68:4d:44:2d:21:a0:57:53:a9:d3:ec:67:9a:7e:00:06:63:
da:cd:72:f8:88:0e:ed:c0:ba:65:3a:fb:29:32:83:14:c1:eb:
7f:5d:d3:5a:7a:81:f2:c5:de:1d:55:a2:05:ff:2e:c0:66:bf:
52:c0:02:e4:da:d0:36:51:a9:d7:58:a5:c8:fd:b7:40:23:17:
8d:f1:e8:15:77:10:00:3b:4e:97:7b:1d:0f:61:5a:97:6c:2d:
2a:55:3d:26:fd:01:fe:5a:b4:b4:41:30:9c:ca:4c:55:53:58:
16:78:42:70:b4:46:67:f1:da:b8:b9:05:5d:f8:a6:dc:67:87:
c0:5c:d8:e2:2d:79:e9:a1:c0:55:6f:1a:75:66:0e:df:07:e5:
bb:85:01:15:44:00:71:0a:01:5f:63:cb:1e:b5:ee:74:66:d7:
2d:9b:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:42 2026 by rpki-client