Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: IWw4M3ieHTADuQgDpycxpGA9PSNd/sYGgalOP1btLMo=
Subject key identifier: 52:F8:A9:5C:08:31:9A:38:77:63:48:7D:91:51:DB:2B:EC:70:3B:B6
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 019D28F248DED2FF4B09C7BEFFFEBBFE86AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 179A
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: UO31CjNCs83SEp1n243YZy7YSxIKow10YJIDRnWa0GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:48:de:d2:ff:4b:09:c7:be:ff:fe:bb:fe:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=52f8a95c08319a387763487d9151db2bec703bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:75:e6:b7:89:26:34:85:32:e8:ca:b8:9e:
74:32:77:78:03:b8:a9:5a:80:13:db:2f:32:c6:72:
89:6d:ae:8b:79:da:62:79:11:a8:05:67:62:16:5c:
63:07:89:79:0f:74:a1:5e:ab:ab:fb:1c:e2:12:1c:
07:dc:0d:3a:a9:d2:dd:0b:93:27:8b:bf:19:4f:e6:
b0:f2:61:db:a9:bf:10:18:5f:f0:82:05:94:71:55:
66:71:cf:40:bc:f3:e3:ca:54:9d:fe:31:69:ef:d0:
42:69:61:01:c4:52:ca:68:5e:b3:17:56:85:61:fd:
da:d6:f7:b1:77:59:be:05:82:f5:89:41:f4:be:cf:
1e:ea:94:5a:c0:6f:bf:74:dd:21:af:4d:8e:5c:df:
e9:00:14:10:ff:e3:b2:9b:61:d5:0b:25:e6:56:ec:
29:1a:6f:99:16:9b:40:18:c3:43:13:3d:9a:7c:8a:
fd:39:08:bb:48:94:c4:ab:51:01:09:0a:9b:3c:50:
00:08:d2:55:ac:b7:24:90:aa:9e:4a:1b:b6:a6:3d:
61:89:04:b2:95:ae:c8:e1:ad:b5:b4:32:15:a7:0e:
af:96:f1:63:dc:ae:2f:48:29:4c:61:7b:f7:e4:b6:
83:6b:74:35:94:9f:84:d0:4c:d0:91:70:87:99:3d:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:A9:5C:08:31:9A:38:77:63:48:7D:91:51:DB:2B:EC:70:3B:B6
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:58:3b:77:06:c7:ac:28:76:f7:07:c9:16:7a:47:48:25:
34:97:c9:2a:26:76:76:14:b9:2f:ba:c0:77:88:54:20:cd:44:
52:f2:96:68:9f:6d:fa:31:49:41:67:95:cf:d9:3e:25:f1:c8:
e3:c2:8d:47:a7:3d:fc:be:b9:19:94:8b:43:91:0c:c3:54:aa:
ea:34:14:f7:16:39:8e:40:43:a4:84:95:5b:91:ca:e6:29:a8:
ee:96:80:97:94:92:32:23:06:4b:af:26:e6:99:d1:41:41:30:
c0:ce:7e:82:25:e0:cd:e9:9e:70:11:79:33:22:96:dd:6c:ad:
b3:8c:b0:a3:9e:b6:f1:ad:79:9d:a1:34:ad:e7:bc:56:70:f0:
77:8e:47:50:c4:0e:b2:b8:70:c7:0a:e0:73:c6:53:b8:55:9e:
e3:c5:ee:fe:ec:94:5e:97:b2:0d:2c:97:89:a6:3b:e1:3d:48:
43:3b:32:0d:e1:d8:29:be:63:6e:b6:c5:43:7b:29:4b:09:85:
4a:76:32:39:17:ff:ee:d9:1a:4e:05:aa:27:49:f0:8d:16:c5:
fe:11:b8:0d:ce:c4:04:cd:07:77:c6:35:58:8a:0b:77:d3:df:
ef:6b:d1:e0:8c:36:68:c9:bc:0c:12:82:e4:c8:80:9e:b5:d0:
1b:19:53:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8kje0v9LCce+//67/oavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Mjg4NWVmMjZkZTZkM2IyMjYwYWI2M2QyYzVjYTBmODYz
N2RmMDMwHhcNMjYwMzI2MDcwMTAwWhcNMjYwMzI3MDcwMTAwWjAzMTEwLwYDVQQD
Eyg1MmY4YTk1YzA4MzE5YTM4Nzc2MzQ4N2Q5MTUxZGIyYmVjNzAzYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU915reJJjSFMujKuJ50Mnd4A7ip
WoAT2y8yxnKJba6LedpieRGoBWdiFlxjB4l5D3ShXqur+xziEhwH3A06qdLdC5Mn
i78ZT+aw8mHbqb8QGF/wggWUcVVmcc9AvPPjylSd/jFp79BCaWEBxFLKaF6zF1aF
Yf3a1vexd1m+BYL1iUH0vs8e6pRawG+/dN0hr02OXN/pABQQ/+Oym2HVCyXmVuwp
Gm+ZFptAGMNDEz2afIr9OQi7SJTEq1EBCQqbPFAACNJVrLckkKqeShu2pj1hiQSy
la7I4a21tDIVpw6vlvFj3K4vSClMYXv35LaDa3Q1lJ+E0EzQkXCHmT2mMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL4qVwIMZo4d2NIfZFR2yvscDu2MB8GA1UdIwQY
MBaAFKcohe8m3m07ImCrY9LFyg+GN98DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAt
MGU3MTgwZjk4NzRkLzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAtMGU3MTgwZjk4NzRk
LzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4hYO3cG
x6wodvcHyRZ6R0glNJfJKiZ2dhS5L7rAd4hUIM1EUvKWaJ9t+jFJQWeVz9k+JfHI
48KNR6c9/L65GZSLQ5EMw1Sq6jQU9xY5jkBDpISVW5HK5imo7paAl5SSMiMGS68m
5pnRQUEwwM5+giXgzemecBF5MyKW3Wyts4ywo5628a15naE0ree8VnDwd45HUMQO
srhwxwrgc8ZTuFWe48Xu/uyUXpeyDSyXiaY74T1IQzsyDeHYKb5jbrbFQ3spSwmF
SnYyORf/7tkaTgWqJ0nwjRbF/hG4Dc7EBM0Hd8Y1WIoLd9Pf72vR4Iw2aMm8DBKC
5MiAnrXQGxlT2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:50 2026 by rpki-client