Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: J3Ygk3ua2ifWCJDPa3l08Pj8uZyRGdvZrv14dYqL+X4=
Subject key identifier: 2F:C1:41:75:15:47:43:CD:4C:EF:45:21:BF:63:CD:05:F7:A1:45:7F
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019CAE70B8973FD82BC38DD09B7F09956921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 12:05:48 +0000
Manifest this update: Mon 02 Mar 2026 12:05:48 +0000
Manifest next update: Tue 03 Mar 2026 12:05:48 +0000
Files and hashes: 1: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 9ujYcrhsRNLoAmkoRB2FMx18Ve7vlKQhtTaB/Vk7vlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:70:b8:97:3f:d8:2b:c3:8d:d0:9b:7f:09:95:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Mar 2 12:05:48 2026 GMT
Not After : Mar 3 12:05:48 2026 GMT
Subject: CN=2fc14175154743cd4cef4521bf63cd05f7a1457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:34:ae:e3:80:31:5f:18:e9:dc:bb:44:94:
11:28:63:2a:bf:01:76:f3:14:86:26:4e:77:4b:57:
a8:85:0c:88:8a:f4:a8:bd:42:41:a8:53:0e:33:f1:
5e:14:5f:00:1a:fb:09:3e:2d:a2:61:4e:34:1a:89:
5e:cf:b7:b6:d0:ea:f2:a0:f8:c4:a9:3d:0e:05:a8:
5d:92:1c:67:9d:3e:b8:92:d7:13:30:ed:09:d3:04:
b3:19:e2:50:51:e4:2d:18:d8:99:87:95:3e:8d:aa:
dd:93:f8:1b:e0:2f:9f:c5:fe:60:0b:6a:11:b7:b1:
42:81:cc:9c:99:76:4e:d3:49:33:cb:3e:be:5b:cc:
41:18:e0:d1:33:bb:6c:f0:ff:d0:58:c8:da:98:21:
cf:ee:c9:5e:9a:ee:44:7f:4e:45:b0:f8:21:84:4c:
fb:bd:13:e8:90:f5:1f:c3:bf:e1:ee:a8:01:b3:3c:
3f:4a:17:9e:78:03:73:57:77:ba:6d:89:0b:1c:35:
1c:31:6e:78:3d:0e:65:5c:55:86:8c:71:b1:84:da:
a3:27:9a:20:62:86:3e:56:0b:79:53:05:7b:56:ca:
ff:31:7a:9a:76:1f:4b:a3:7c:9f:3b:ba:fa:8f:0b:
2c:ad:27:c8:79:30:9b:f8:1d:70:18:9a:83:b9:4c:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:41:75:15:47:43:CD:4C:EF:45:21:BF:63:CD:05:F7:A1:45:7F
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ef:19:16:8d:d2:07:c9:2f:4b:7e:44:ef:d9:10:c8:45:e5:
0b:ae:3c:a7:71:77:1c:7b:ee:63:e6:5b:6b:35:21:d5:ae:05:
0e:0e:9e:d4:0d:49:2d:fd:24:d8:f4:e3:6b:c2:de:50:cd:3c:
3f:9a:58:b9:37:ba:85:5e:b7:be:2b:de:6d:c9:07:b1:71:9c:
95:fb:55:5b:0a:b5:17:04:3f:94:7b:90:9d:e1:a5:77:a1:af:
24:0b:09:fa:b0:9c:1b:72:ef:24:51:54:fd:a8:92:33:db:f7:
16:5a:80:ba:79:f1:55:8a:d7:5e:e7:af:fc:88:4b:17:e7:45:
1e:8e:a3:cf:8e:f2:92:b5:61:4c:52:43:8c:6f:75:e0:cf:6a:
d4:d7:1b:41:f3:3c:5a:d2:76:b7:73:13:40:f9:da:5f:71:32:
ad:d3:fa:34:7d:5e:99:65:30:01:d5:74:61:eb:c3:50:db:4d:
19:5d:51:2f:80:bd:7a:d1:a0:dd:49:7e:18:7c:a4:b9:a5:ba:
83:e8:3f:9a:c4:fa:c3:14:c0:56:89:11:94:a8:ca:78:86:5d:
30:71:43:f5:eb:82:4b:a6:06:77:9e:a6:f4:d4:0d:9a:ee:ae:
4f:06:a4:69:ed:5f:0f:b8:5a:ac:f8:95:32:ab:c1:7a:88:df:
8c:00:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:32 2026 by rpki-client