Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: WCztR4eIh6uksN+AoHGtYCRiCQxEkBbBXuvcRZUY3wE=
Subject key identifier: 75:ED:78:CE:4F:C0:2D:6F:2D:2A:3D:36:BA:B5:82:4F:13:92:7C:A4
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 01A13E26CA616ABB71311B6B1B8D19523962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 09B6
Signing time: Thu 15 Oct 2026 06:01:31 +0000
Manifest this update: Thu 15 Oct 2026 06:01:31 +0000
Manifest next update: Fri 16 Oct 2026 06:01:31 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: LdFz3Eh3gkgNup6K+240AQbq65MwqGfNvGEFUkRmA8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:ca:61:6a:bb:71:31:1b:6b:1b:8d:19:52:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Oct 15 06:01:31 2026 GMT
Not After : Oct 16 06:01:31 2026 GMT
Subject: CN=75ed78ce4fc02d6f2d2a3d36bab5824f13927ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:3b:81:f1:da:06:c3:5c:72:00:7a:a6:8d:
1d:0c:2d:14:61:f8:85:e9:33:47:00:fa:5d:e5:7b:
7f:43:5c:7b:69:1e:1d:0f:b4:86:5a:43:c4:b4:dd:
8f:5f:a9:ea:cd:b7:65:3f:85:52:45:c6:d0:fb:c6:
3b:7d:e8:60:6a:1b:6e:98:d1:fa:f9:af:e9:aa:7d:
51:0d:85:d3:77:4b:24:1d:17:53:4f:21:2c:1d:c7:
eb:71:34:bc:4e:5c:56:04:0d:ab:bc:d7:50:42:44:
b6:a2:22:aa:87:bc:d9:3b:c9:53:27:4b:57:77:9a:
64:25:97:83:0a:30:c1:86:e0:42:d9:c4:4f:49:d9:
e7:57:8e:27:40:96:c8:12:af:ed:58:c8:0a:86:3e:
0a:e1:ec:02:9b:ac:b6:59:26:c9:5d:df:6e:50:c4:
81:4e:44:0b:bb:0b:2a:0e:b9:50:74:7d:5c:2f:8c:
76:8b:8f:b8:f8:7c:5d:cb:ee:c4:2f:94:1a:44:a2:
f7:77:e0:09:29:ba:9c:55:ad:8a:b6:56:ab:b5:ad:
79:6c:a3:5c:e4:1e:d1:0e:8b:7b:49:53:4e:ae:04:
4e:b6:55:93:27:de:33:1c:08:0c:99:3f:59:ca:07:
82:78:6d:b9:bb:6c:d7:31:b1:70:16:1e:b1:a0:f1:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:78:CE:4F:C0:2D:6F:2D:2A:3D:36:BA:B5:82:4F:13:92:7C:A4
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5a:c4:05:f9:7c:04:be:7b:1f:a4:4c:1e:ca:8e:01:28:6b:
03:fa:a0:e7:95:a9:37:29:32:c6:0d:ca:45:73:41:4f:37:eb:
04:a6:9f:45:71:18:8b:e7:ab:e6:7d:1e:3f:e8:f9:9f:7d:18:
b5:80:f8:51:95:99:10:8a:c8:01:87:3b:ea:37:ea:81:a4:e0:
a2:66:9f:da:97:30:32:4d:fd:76:e1:14:3f:f3:02:d0:a8:3a:
a0:6e:79:b9:cf:05:a4:31:84:83:06:9f:6b:91:2b:4f:5b:ea:
b8:e0:09:0f:0f:fe:f6:9e:bc:f1:42:7f:96:e0:80:5b:57:2c:
bc:95:34:fb:63:00:0d:ef:ac:eb:36:19:bc:3e:ea:6d:b2:14:
c0:c0:ed:23:d6:17:bf:3f:d1:49:74:86:f7:3b:17:e6:72:76:
2a:64:b8:fa:b8:38:4e:a0:1f:95:5a:f3:e6:57:7a:ba:e8:f5:
4b:85:d5:2a:35:91:12:b3:0f:f2:9d:38:bc:70:f5:9e:81:1e:
f6:52:29:95:4b:b5:7c:82:de:41:23:c3:f8:07:64:e9:9b:5f:
ac:9f:1d:26:42:16:04:3e:9e:34:0f:c4:c0:40:0f:a1:67:2a:
e5:12:ce:ae:82:6b:ef:3c:7b:15:ae:93:12:c4:5f:73:f8:77:
eb:3e:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:18 2026 by rpki-client