Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: qbl37vlAYD6uMZ4rTnBlUG0feSTon6L8HF6lwsKrXK0=
Subject key identifier: 09:D5:46:AB:4F:A2:CD:B7:60:9D:A7:F3:8D:98:78:E3:D8:18:25:EE
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 019E1E360B64D36C0929920F8810B9631FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 1895
Signing time: Tue 12 May 2026 22:01:58 +0000
Manifest this update: Tue 12 May 2026 22:01:58 +0000
Manifest next update: Wed 13 May 2026 22:01:58 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: uH4rktiYHOFg+M/N6w5j/a91H1uJ5+VFiVF91E5KJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:0b:64:d3:6c:09:29:92:0f:88:10:b9:63:1f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: May 12 22:01:58 2026 GMT
Not After : May 13 22:01:58 2026 GMT
Subject: CN=09d546ab4fa2cdb7609da7f38d9878e3d81825ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:85:5d:b9:bd:d8:b6:a2:e4:96:a7:4e:5b:
ca:8a:15:66:e7:fb:7c:9e:40:c8:f6:cf:40:be:11:
02:29:c6:c5:44:d9:da:c0:71:b0:b2:3b:cd:f2:2e:
8d:65:8d:92:b6:7f:f9:7f:3b:5f:58:9f:a3:1f:77:
8f:f2:16:74:e3:f2:8c:32:ba:16:65:e9:b7:94:60:
f6:3e:b8:9d:4f:be:a5:74:65:c5:6b:ae:6a:bb:53:
31:1b:a6:6c:10:56:ee:92:e4:5d:11:cd:48:0c:f0:
57:8c:35:3b:85:fd:2f:40:c1:91:ad:8f:4b:a1:cf:
ba:2b:40:da:5c:11:8c:24:9d:2a:e8:a0:03:3a:e5:
0a:0e:51:e5:56:80:aa:30:eb:72:9b:e3:87:01:f6:
58:93:9d:57:54:95:a7:66:1d:61:a2:6b:9a:e0:80:
9d:ca:20:d9:16:2d:2b:14:d8:e8:d6:2f:0f:65:19:
0c:ea:53:06:a3:66:6a:d5:87:88:d0:2c:36:7a:07:
30:e7:00:b3:29:1a:8a:bf:e8:77:e0:0e:12:ad:9b:
05:c0:07:31:4c:56:99:9e:22:c5:4c:1d:7f:85:17:
65:8d:9b:da:f2:0f:9c:ba:95:ca:f4:30:b7:7b:24:
0f:91:8b:a7:59:bc:cf:30:03:cf:cf:b8:ab:79:0a:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:46:AB:4F:A2:CD:B7:60:9D:A7:F3:8D:98:78:E3:D8:18:25:EE
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:99:02:d5:4e:9e:a1:88:a6:39:93:59:b9:71:a2:6b:b3:13:
b1:cf:62:a8:33:9e:ab:75:96:2e:dc:dc:9b:fa:88:54:fa:53:
dd:77:f5:69:16:d4:58:93:14:53:61:f6:ba:ed:e2:92:a5:ed:
a6:58:f7:05:2f:c1:c1:f3:75:10:d1:95:9a:c8:3a:dc:7d:17:
11:2c:18:bc:7a:9c:20:9e:bb:fb:fd:da:d3:95:78:7f:bc:32:
65:37:bc:86:2b:20:a0:cb:e2:88:c4:67:06:52:f4:94:7d:2c:
47:c3:25:05:2e:b2:e2:eb:59:df:b5:8f:68:54:84:af:51:a7:
40:bb:f0:10:9f:e8:72:ab:d3:a0:41:dc:0a:c3:40:1d:f3:62:
66:0a:03:0d:be:7c:f4:bd:e4:f9:53:b4:eb:92:e0:9f:46:5f:
f3:66:a4:9d:72:ec:0c:fb:6e:6e:aa:37:89:c3:76:38:d7:da:
c3:c3:68:86:3e:20:81:cc:4c:a1:07:20:2d:06:bb:ff:c2:2b:
5e:ee:e7:b0:2c:de:6b:62:8b:e4:11:84:45:fa:7d:1e:20:18:
e0:5c:83:e3:a7:21:e3:db:b1:e7:1c:84:d5:63:17:35:dd:c7:
f8:4d:be:69:79:f8:0a:7d:46:7e:00:a2:ef:b5:cf:2c:92:50:
17:9e:22:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNgtk02wJKZIPiBC5Yx/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMjYxZGVlNmQ1NGRkNTM2ZWY3MDBmMmQ5ZDgxOTdjODYw
OTM5NjYwHhcNMjYwNTEyMjIwMTU4WhcNMjYwNTEzMjIwMTU4WjAzMTEwLwYDVQQD
EygwOWQ1NDZhYjRmYTJjZGI3NjA5ZGE3ZjM4ZDk4NzhlM2Q4MTgyNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N+FXbm92Lai5JanTlvKihVm5/t8
nkDI9s9AvhECKcbFRNnawHGwsjvN8i6NZY2Stn/5fztfWJ+jH3eP8hZ04/KMMroW
Zem3lGD2PridT76ldGXFa65qu1MxG6ZsEFbukuRdEc1IDPBXjDU7hf0vQMGRrY9L
oc+6K0DaXBGMJJ0q6KADOuUKDlHlVoCqMOtym+OHAfZYk51XVJWnZh1homua4ICd
yiDZFi0rFNjo1i8PZRkM6lMGo2Zq1YeI0Cw2egcw5wCzKRqKv+h34A4SrZsFwAcx
TFaZniLFTB1/hRdljZva8g+cupXK9DC3eyQPkYunWbzPMAPPz7ireQoJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnVRqtPos23YJ2n842YeOPYGCXuMB8GA1UdIwQY
MBaAFNImHe5tVN1TbvcA8tnYGXyGCTlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgt
NmYwZjQ2ZjRkNGI0LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgtNmYwZjQ2ZjRkNGI0
LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpkC1U6e
oYimOZNZuXGia7MTsc9iqDOeq3WWLtzcm/qIVPpT3Xf1aRbUWJMUU2H2uu3ikqXt
plj3BS/BwfN1ENGVmsg63H0XESwYvHqcIJ67+/3a05V4f7wyZTe8hisgoMviiMRn
BlL0lH0sR8MlBS6y4utZ37WPaFSEr1GnQLvwEJ/ocqvToEHcCsNAHfNiZgoDDb58
9L3k+VO065Lgn0Zf82aknXLsDPtubqo3icN2ONfaw8Nohj4ggcxMoQcgLQa7/8Ir
Xu7nsCzea2KL5BGERfp9HiAY4FyD46ch49ux5xyE1WMXNd3H+E2+aXn4Cn1GfgCi
77XPLJJQF54iLg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:52:54 2026 by rpki-client