Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: tM7NRn4fqEBShFHGHtFMwQdoUMtWQDMvtvkswHIkLXU=
Subject key identifier: B0:6F:18:D9:ED:E9:BD:64:35:AD:44:F0:43:6D:4C:B6:3C:67:6E:14
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019D38D2E9A6E77C5D365C758573BF897ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 07A1
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: YuYvPsgx/Swi9tNVhyYTQvvmFDN7wXmIqachWSSFpYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e9:a6:e7:7c:5d:36:5c:75:85:73:bf:89:7a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=b06f18d9ede9bd6435ad44f0436d4cb63c676e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:76:ff:d6:37:f7:af:f0:55:92:5d:c5:24:
11:b3:eb:c1:51:54:1f:a3:7e:93:63:68:e5:ae:b0:
7c:87:eb:27:84:f3:7b:ee:89:86:0e:47:72:30:e2:
1a:aa:56:4b:6f:cf:99:2b:80:0a:1c:20:56:0f:a5:
c0:a1:8f:15:f8:12:7d:32:ae:60:ba:fe:17:c6:aa:
32:f5:66:7a:3d:cf:85:49:91:8e:04:ef:89:5c:94:
e4:1f:bd:e8:5b:fe:92:49:50:eb:77:f5:a9:54:24:
0b:50:e0:a6:7e:22:fb:1b:bb:08:ee:ff:59:71:e2:
82:55:49:c7:5a:fa:dc:cf:f6:5f:0c:c6:08:b8:b8:
c1:c0:03:a5:4e:29:39:ae:bf:eb:74:d5:36:c9:a4:
15:6e:b1:f5:ab:4a:b1:e7:f5:7f:2b:7e:12:65:3d:
94:69:2e:b5:4d:6b:ed:83:28:8d:20:bf:4c:15:13:
84:b4:6d:b8:91:3f:9c:2e:c4:96:19:c3:56:79:66:
31:25:c0:84:4d:6b:87:95:ce:9a:8a:b3:5d:d1:7d:
a7:70:86:17:f8:14:20:fa:d6:8a:f2:f3:25:04:82:
16:77:a8:fa:45:09:79:98:36:64:d7:df:b1:6d:35:
a4:71:1b:cb:9f:86:cb:a0:b0:78:19:c7:3f:14:a9:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:18:D9:ED:E9:BD:64:35:AD:44:F0:43:6D:4C:B6:3C:67:6E:14
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:c2:a2:04:ed:f4:ed:54:6b:58:c1:fd:af:ad:7b:34:b7:
b9:b2:f0:d4:d2:5c:0b:61:25:a6:d3:43:bd:68:ec:ae:1d:af:
a0:ae:fb:85:a3:0c:db:07:49:d4:eb:9e:ea:eb:f6:b7:55:ae:
5d:06:76:a4:a3:d9:2d:fd:ec:62:04:0a:b8:1d:b5:9a:17:c7:
bc:32:bc:2a:b1:ee:c6:68:8c:a5:01:a1:ba:fe:87:ef:64:f6:
ad:56:2d:d8:43:7d:6c:35:ca:23:6f:88:68:3f:b1:40:3d:fc:
87:a3:66:19:76:3c:c9:4b:37:24:e3:32:b4:e2:84:13:13:99:
59:75:b5:3b:9a:86:ca:de:62:ba:91:e7:ee:f0:f2:63:ec:b2:
25:1f:fd:32:f0:cc:49:ed:0a:c7:b2:05:26:77:5d:e8:00:c3:
0c:90:3c:28:65:86:42:9d:a8:6c:97:1a:9d:bc:cf:08:f5:aa:
55:10:df:fc:51:17:68:0c:49:49:42:fe:c2:84:8b:45:2f:b7:
bf:9b:74:3a:b7:20:55:7e:bc:6b:f0:3f:3c:ce:6b:f1:a9:05:
3f:a1:a3:24:b0:1d:59:e0:42:c7:90:98:a6:cf:1e:3d:8d:d2:
ba:95:a0:7a:3e:f1:6b:d4:43:72:d6:c9:3f:f0:51:77:43:cf:
20:9b:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:58 2026 by rpki-client