Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: 89ew4kVfYCFnGiHSSUg+Uwlhn8Roe26cXY0M4GwyY74=
Subject key identifier: 84:C0:72:78:50:D2:D9:4E:90:2B:3D:4D:FC:B5:B3:26:F8:49:5B:04
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019F8F7E6632ED78A763339EE8890E9F039B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 08D7
Signing time: Thu 23 Jul 2026 15:00:53 +0000
Manifest this update: Thu 23 Jul 2026 15:00:53 +0000
Manifest next update: Fri 24 Jul 2026 15:00:53 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: d0EMmtWTuGvu7BjdufHI4AN/qV6NPNePDzv439t45ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:66:32:ed:78:a7:63:33:9e:e8:89:0e:9f:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Jul 23 15:00:53 2026 GMT
Not After : Jul 24 15:00:53 2026 GMT
Subject: CN=84c0727850d2d94e902b3d4dfcb5b326f8495b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:d0:9a:20:4e:ef:1f:38:34:29:71:a3:70:
d0:60:ac:37:fb:94:4d:d1:39:e7:42:91:24:6f:e7:
0d:f4:ee:e3:89:b3:53:b3:5f:e9:73:bf:3e:08:ef:
4f:01:eb:ec:20:b6:f7:bc:61:4d:ec:6c:96:c2:d2:
b8:df:85:9b:13:f0:7a:56:69:94:07:0e:87:12:bf:
ef:f9:ec:02:77:52:c0:05:24:57:38:24:6e:67:88:
a5:c2:16:68:9a:d1:38:3f:86:91:58:0f:6b:b7:96:
c1:04:32:27:01:4d:0c:7b:ba:cb:53:ac:02:6e:ef:
07:b2:73:45:ff:e9:e3:3e:db:12:1e:6e:80:93:c0:
36:e2:d6:db:d3:c0:78:92:5b:3b:b5:41:44:70:c3:
00:0a:9f:d1:b8:23:17:10:71:b0:0a:24:f6:01:64:
cf:3d:f5:ab:57:b9:05:dd:4b:fd:78:0b:92:1d:7d:
f9:a5:f8:76:ad:b4:53:fd:6e:c7:36:04:af:95:e0:
a3:65:40:6d:0d:65:0b:3d:eb:d2:af:02:17:50:04:
7b:df:54:cf:74:c1:02:d0:95:b1:a5:4a:a4:87:2d:
12:4f:0d:fb:c0:44:b5:55:33:bd:f9:de:7a:f4:a5:
e6:1d:a6:07:b6:01:c5:9a:43:f8:71:52:38:c9:b4:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:72:78:50:D2:D9:4E:90:2B:3D:4D:FC:B5:B3:26:F8:49:5B:04
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:e4:1d:07:61:39:0a:a7:53:f2:01:98:b2:65:eb:8f:1e:
d5:c9:77:3c:f5:ef:9e:79:0e:b5:d8:7d:95:57:b7:07:4f:b7:
f8:52:56:4c:0c:76:2d:55:e0:6f:aa:15:1e:dc:d9:d3:5f:c7:
ea:8e:5a:8e:55:b2:3b:21:2b:33:8d:7f:7e:55:10:97:23:e4:
ac:7e:2b:a7:de:61:04:db:49:82:4f:f7:92:f8:8c:09:a4:f0:
68:9c:92:72:77:d4:f4:63:cd:53:a5:db:1c:af:41:2f:ed:6f:
26:52:eb:a5:34:cb:1b:ac:d0:40:98:39:3f:be:d4:60:3d:c9:
2b:97:1f:8e:cd:ad:7f:0b:19:1b:24:91:77:23:7f:f4:92:d5:
4a:53:5b:41:5d:92:90:78:d2:cc:c7:de:1c:c5:64:18:0c:0a:
98:a8:90:45:4f:8e:02:5c:e2:61:35:89:e7:fd:64:75:56:91:
41:86:1a:a0:0f:25:a6:ed:85:a3:c7:51:9a:78:2f:26:fd:00:
83:e0:af:f5:fe:2b:28:b4:0e:56:d1:99:6d:fc:6f:48:d7:4c:
8b:0d:4c:4e:e4:93:40:e6:10:4d:cc:cf:66:91:21:72:c8:73:
fc:0c:51:13:40:c0:cb:e4:d2:68:29:51:4e:aa:21:d7:4d:6e:
43:18:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:50 2026 by rpki-client