Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: KpNA/p7t5lyi6nFj9JhkHSYCunKZ2OQ6KDNP4CxwjVQ=
Subject key identifier: 6B:11:B9:CF:FF:CB:59:A3:D8:E2:CF:33:8F:94:25:E4:88:44:3C:41
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019F1943CA20BC00CC48C1EB3B1AB7149215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0F0C
Signing time: Tue 30 Jun 2026 16:01:40 +0000
Manifest this update: Tue 30 Jun 2026 16:01:40 +0000
Manifest next update: Wed 01 Jul 2026 16:01:40 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: WZTUkmtzs1J0P0PeMWr3W0YvAGNaZ5YH9TO3hrUDGwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:ca:20:bc:00:cc:48:c1:eb:3b:1a:b7:14:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Jun 30 16:01:40 2026 GMT
Not After : Jul 1 16:01:40 2026 GMT
Subject: CN=6b11b9cfffcb59a3d8e2cf338f9425e488443c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:a4:01:61:5e:5b:13:e3:eb:0e:8e:a3:f6:
27:43:33:ac:6c:22:8a:91:d3:33:82:8c:fe:41:11:
a6:55:ed:38:9e:85:94:14:8a:be:4f:c4:15:8c:54:
78:b5:de:4e:59:42:f8:c6:ef:ad:8a:8d:c6:20:c4:
b5:ce:f9:f3:9f:1c:4c:76:3f:1b:72:58:e4:38:30:
80:21:09:87:35:9e:13:53:2b:c4:62:5b:1c:34:15:
61:55:77:a4:77:2f:4d:03:22:90:0c:c4:c9:72:d4:
d6:62:0b:3d:6b:a0:f1:6a:10:f1:73:45:11:d8:86:
09:06:fc:60:15:7a:05:1f:ab:f5:84:10:75:6c:b8:
9d:df:07:96:4d:73:d6:aa:9c:72:58:a6:dc:18:7b:
14:f4:39:88:f3:5c:4a:16:c7:42:b7:e6:68:36:e2:
c3:c3:db:7b:d7:71:a7:09:31:4a:ce:1f:c4:50:6d:
f7:d0:60:82:0e:18:f0:11:0f:ac:63:5c:57:ea:3a:
19:d1:bf:65:2e:c2:16:bf:c7:99:da:5d:e8:26:66:
8f:eb:9d:ba:8b:a4:d8:53:36:78:0f:19:30:03:17:
b4:83:94:a5:3d:98:6b:55:06:38:5f:65:c3:85:3c:
86:07:8f:5e:91:b4:3b:d3:41:52:df:91:a3:01:56:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:B9:CF:FF:CB:59:A3:D8:E2:CF:33:8F:94:25:E4:88:44:3C:41
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:a4:aa:db:23:66:6f:2a:fd:c8:df:29:d0:f0:81:7e:fc:
7e:b3:92:38:bf:68:16:bf:66:29:1a:3c:66:6c:67:c7:43:01:
fd:3d:1d:7a:85:3c:a7:7b:72:fa:55:72:d4:b1:b9:b8:cb:c7:
18:52:24:c8:3d:fc:1d:35:85:a6:8d:da:86:f5:72:b7:03:72:
aa:31:ea:3c:f8:f8:4f:de:32:1d:da:ba:bc:98:d2:bc:e2:c6:
e1:4d:d0:b1:1e:cd:af:ce:de:39:3d:4c:b7:8a:7b:c6:2c:65:
db:e7:8b:df:3f:f3:2f:a0:f1:d7:68:7d:c5:be:b6:18:7d:58:
de:ef:9a:2e:fc:26:7b:34:cc:f7:6a:d5:a3:42:bc:35:3f:17:
a1:63:05:f1:fb:a0:73:a9:19:6d:cc:a5:11:0b:71:7d:a7:09:
bd:86:81:7e:b7:65:3e:c1:8d:c1:18:20:e8:e1:09:bd:8e:e9:
45:be:00:80:d5:d2:29:47:8a:74:e5:b1:55:17:21:b5:aa:e5:
57:31:84:0d:9f:a6:fe:1a:72:3e:66:67:7a:7f:92:49:6d:93:
f6:5c:cc:9c:ef:ae:f1:c9:6e:95:36:f2:69:5b:c0:03:c9:e5:
6d:4d:e4:93:46:78:44:1d:0f:8c:f2:e9:1a:2b:58:ad:46:d5:
61:7c:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client