Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: CUURbO4NlcF/d2EiCEc08qZUA42zXTtY8QS3FjCTF1U=
Subject key identifier: CF:DE:FE:82:14:69:15:9D:D5:68:73:6E:F6:B6:0D:B1:A3:66:70:2A
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019D2771C742C2C2674F6651F51CEC8F6659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 0798
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: IhxeW4hWb/cyGBTVCRZfV/Ikzf//P+E7JqGRZUw+roI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c7:42:c2:c2:67:4f:66:51:f5:1c:ec:8f:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=cfdefe821469159dd568736ef6b60db1a366702a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:73:8a:67:56:fb:23:c6:f0:70:70:2f:a4:
37:51:db:92:a6:da:8b:92:05:d5:99:85:7a:77:bf:
8b:54:53:d1:6e:41:1d:08:a4:59:e6:a6:a0:26:83:
10:99:8a:9a:e7:b3:f7:88:d2:3c:5c:ac:45:11:d1:
2f:26:ba:bc:fa:d6:3b:01:f8:e3:46:0a:61:13:73:
fc:b5:87:a3:10:d8:94:30:7a:73:aa:64:85:8b:87:
01:80:44:a2:36:a1:93:7d:61:6d:16:8e:60:12:ac:
d8:3c:64:7e:5a:ac:fa:6c:e2:d6:d5:a9:af:90:12:
a0:09:c6:15:7c:a9:5d:4c:14:31:7c:09:76:4e:86:
b8:2b:5a:aa:ce:e8:0e:cc:eb:c8:8a:62:5c:67:f0:
d4:79:bb:c0:9f:6f:ff:90:4c:48:a8:ea:75:b0:00:
16:2c:ef:c5:79:d8:7e:91:c3:b4:42:de:aa:a0:81:
c2:64:9a:26:d5:1b:76:ec:d4:d8:4e:89:5d:66:79:
7b:98:30:9a:91:dd:bc:bc:c7:d9:a3:a1:75:03:e7:
8e:2d:dd:b3:a9:40:83:fd:85:a9:57:f4:df:dd:a0:
9b:4c:46:03:1b:66:57:3e:51:06:67:b9:fe:13:b1:
26:6a:dd:60:2b:c5:b1:4d:70:a9:d2:23:7e:ab:28:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DE:FE:82:14:69:15:9D:D5:68:73:6E:F6:B6:0D:B1:A3:66:70:2A
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:be:99:bc:b6:a7:61:8d:47:09:91:41:27:6e:f2:b6:0f:39:
20:0c:4c:ab:f0:48:1e:33:68:49:61:b0:61:0b:91:47:b3:8f:
16:4e:21:c6:8e:93:0f:8c:8b:9a:b3:4c:fe:87:9d:4d:55:ad:
49:df:5c:fd:be:d3:fc:76:1d:0c:14:83:fc:52:01:e1:ca:da:
44:19:9c:59:2f:52:c6:63:cb:b5:a7:3b:b4:76:d3:4d:18:f9:
80:0b:09:92:8e:1a:21:36:7d:80:5e:dc:76:86:e2:9b:2e:a3:
8d:b6:bf:3b:c2:7c:54:06:4e:39:1a:98:70:66:d4:81:f8:73:
c0:43:a6:f9:f3:aa:a7:0b:c0:b7:b6:99:d0:bd:4c:3a:5e:ac:
7c:1b:be:30:0a:ba:e8:0b:c8:9c:ca:48:a4:27:20:cb:2f:41:
5c:3e:e7:9c:59:d3:69:e2:1d:66:85:03:3b:10:b1:76:9c:7b:
64:30:76:58:57:0e:47:c9:fd:f7:b6:6d:61:3e:79:77:3a:95:
98:f7:e9:5d:4f:b4:50:f0:43:91:40:5f:15:21:25:1b:ff:f2:
92:50:99:77:84:30:0e:1b:c1:de:e9:bc:17:5a:49:6c:3c:a8:
ae:b1:69:45:f1:d0:45:57:a7:1d:b4:11:e4:21:7a:af:4c:1d:
e6:92:20:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nccdCwsJnT2ZR9Rzsj2ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGM3OWZkMmQ2Y2M0NWVlMWI1ODBmOTNhMDUwNWM1OTdk
ZjZkODkwHhcNMjYwMzI2MDAwMTAxWhcNMjYwMzI3MDAwMTAxWjAzMTEwLwYDVQQD
EyhjZmRlZmU4MjE0NjkxNTlkZDU2ODczNmVmNmI2MGRiMWEzNjY3MDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDJzimdW+yPG8HBwL6Q3UduSptqL
kgXVmYV6d7+LVFPRbkEdCKRZ5qagJoMQmYqa57P3iNI8XKxFEdEvJrq8+tY7Afjj
RgphE3P8tYejENiUMHpzqmSFi4cBgESiNqGTfWFtFo5gEqzYPGR+Wqz6bOLW1amv
kBKgCcYVfKldTBQxfAl2Toa4K1qqzugOzOvIimJcZ/DUebvAn2//kExIqOp1sAAW
LO/Fedh+kcO0Qt6qoIHCZJom1Rt27NTYToldZnl7mDCakd28vMfZo6F1A+eOLd2z
qUCD/YWpV/Tf3aCbTEYDG2ZXPlEGZ7n+E7Emat1gK8WxTXCp0iN+qyi/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/e/oIUaRWd1Whzbva2DbGjZnAqMB8GA1UdIwQY
MBaAFNGMef0tbMRe4bWA+ToFBcWX322JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGIt
OWExMWMzNGMyZmUyLzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGItOWExMWMzNGMyZmUy
LzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL6ZvLan
YY1HCZFBJ27ytg85IAxMq/BIHjNoSWGwYQuRR7OPFk4hxo6TD4yLmrNM/oedTVWt
Sd9c/b7T/HYdDBSD/FIB4craRBmcWS9SxmPLtac7tHbTTRj5gAsJko4aITZ9gF7c
dobimy6jjba/O8J8VAZOORqYcGbUgfhzwEOm+fOqpwvAt7aZ0L1MOl6sfBu+MAq6
6AvInMpIpCcgyy9BXD7nnFnTaeIdZoUDOxCxdpx7ZDB2WFcOR8n997ZtYT55dzqV
mPfpXU+0UPBDkUBfFSElG//yklCZd4QwDhvB3um8F1pJbDyorrFpRfHQRVenHbQR
5CF6r0wd5pIgNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:57 2026 by rpki-client