Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: cE82Yc0Bl3g0V2NBRgQCjlAk1101rKsxdiZuZuN7kLI=
Subject key identifier: 53:8E:21:31:69:44:A0:B2:AC:0A:00:D5:A9:04:A9:19:4C:74:F6:94
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019D3865A8785F1F86D0E12863547759D6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0E13
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: JbSLCTq0PveMPuKXrAbOUAhEgsVhkwAyKzFuc+YfIsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a8:78:5f:1f:86:d0:e1:28:63:54:77:59:d6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=538e21316944a0b2ac0a00d5a904a9194c74f694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:82:36:d7:d7:83:38:2c:88:9e:78:d2:c6:
d8:fa:d8:71:bf:98:9a:36:c4:e4:dd:6f:21:bd:f5:
26:88:ab:9e:82:ee:ef:76:c0:7c:82:c1:a6:21:e7:
1d:5c:c9:87:89:90:ce:d8:3c:25:90:70:39:38:b2:
70:99:de:08:99:de:d8:aa:6f:76:25:23:1c:e5:19:
e0:b9:7e:d3:c3:38:d5:dd:05:74:d8:7f:a5:59:4a:
b3:30:87:02:68:09:5b:d2:2a:d6:12:d4:e0:0e:e7:
4e:0e:20:89:ff:77:3e:c1:98:bd:25:68:c6:2f:ea:
72:f2:c1:55:32:7d:10:2c:37:2f:3f:c5:6f:bb:04:
27:30:d9:7e:7f:01:5d:e8:b8:db:41:1a:51:5c:f5:
70:a4:35:a4:ea:d1:9d:0d:93:76:61:77:89:93:a2:
88:25:7d:50:c5:e2:6f:7f:f9:78:a8:3d:05:26:1c:
f5:ec:46:f0:c9:6c:20:c3:39:02:22:c1:59:94:c3:
9a:2c:c7:b9:41:be:21:07:9d:66:51:fd:e3:3d:a3:
36:9b:ad:37:f5:46:0c:49:c5:cf:dc:e5:02:6a:23:
75:ab:22:ee:1a:eb:57:0c:d9:d4:8f:52:a1:a3:02:
7c:6a:9c:ef:c6:16:42:a8:1d:ea:8f:5a:9f:81:88:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:21:31:69:44:A0:B2:AC:0A:00:D5:A9:04:A9:19:4C:74:F6:94
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:9f:bc:f6:7d:10:42:19:16:0d:32:4f:12:d7:75:d7:d1:
95:49:ed:59:54:ae:3e:ca:06:3d:e5:07:e1:26:9e:6d:79:8e:
44:27:3e:80:89:93:33:d3:31:ff:96:c2:f9:60:2e:40:90:02:
c9:31:7a:05:82:b0:95:38:c3:88:04:47:09:9b:ea:d4:ca:1f:
79:05:66:7e:57:e4:04:c3:98:2a:02:04:b7:96:20:95:f4:19:
c7:2b:dc:1e:f4:89:4d:4d:d0:60:5e:26:c8:cb:cc:cb:bf:a8:
4b:ca:ce:1f:e9:6b:d2:99:b6:51:60:9f:d1:03:89:0b:f0:42:
0f:10:84:aa:61:da:98:40:19:a9:72:be:78:04:27:f6:c7:bc:
3e:0d:d0:f2:58:fb:32:36:9a:10:46:88:f9:6b:51:22:03:aa:
c2:69:75:9b:9c:ed:74:59:dd:67:b4:24:e5:3b:f5:55:86:22:
42:05:2b:79:6c:68:31:c5:f0:f9:30:3e:76:15:84:6f:8f:43:
27:0c:64:9d:06:5e:36:61:ad:24:5a:e2:ee:f8:27:63:3a:35:
e1:fd:02:c5:a9:64:fa:f6:9a:8a:ef:92:50:41:bc:fe:2e:ac:
e8:4f:89:15:a7:09:10:9e:da:62:62:1c:83:23:df:23:1f:36:
5f:fc:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:39 2026 by rpki-client