Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: WVAQ516xJBgrl7V79MDqukOMPxImxd8NP64pb8kcoTo=
Subject key identifier: CF:15:08:41:F6:31:64:F6:68:A5:B0:C5:2F:C1:80:69:A6:71:57:F9
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 019D28F33DEF00EB278FCF6FD5605FF3D82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: /fWhtcadPa0sHtk2GK0IiKKGSIrdnC5gcfP72nmrTR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3d:ef:00:eb:27:8f:cf:6f:d5:60:5f:f3:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=cf150841f63164f668a5b0c52fc18069a67157f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:31:1e:09:75:10:b2:c5:e7:57:6b:60:9e:
66:51:ba:a0:7e:5d:84:0e:69:a6:f8:40:e5:da:ba:
2a:dc:70:c9:82:1c:d9:d9:b1:a3:16:58:b3:46:65:
ee:d7:f3:bf:22:e2:ee:c9:0b:2d:92:e2:34:91:41:
9f:9f:e5:c3:3a:25:b6:50:71:de:0c:75:3c:c0:d8:
14:53:7f:02:31:98:ad:35:49:67:fc:12:2e:bd:7f:
27:0e:b7:2a:81:02:f0:96:33:df:1c:01:38:8f:25:
4b:22:13:61:21:e4:53:66:21:d1:c1:b4:b1:06:ef:
c1:aa:7e:05:e2:15:d2:f4:e4:0c:1e:c7:7d:5e:9b:
8d:69:ee:9e:cf:2d:4f:bd:a4:86:87:3d:e1:fd:a0:
6e:56:5f:2c:be:6d:65:1b:60:2a:13:41:e6:e1:a3:
32:d1:aa:75:29:04:5c:e4:b8:47:c4:30:42:5d:80:
4e:ce:4d:ab:94:00:ea:0c:4d:80:85:c3:fd:e5:cb:
c1:fb:74:1f:84:ae:1a:25:d6:7b:1f:89:1d:c2:26:
f2:91:8f:d2:b5:ac:55:af:05:f5:6a:9c:e7:78:b1:
3b:ef:9c:4c:06:f9:eb:46:dc:bc:af:27:98:26:51:
05:ee:0b:0b:b8:8a:18:e0:e3:d1:2d:24:bc:b7:e9:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:08:41:F6:31:64:F6:68:A5:B0:C5:2F:C1:80:69:A6:71:57:F9
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:39:da:85:e5:cb:a3:f7:bc:c3:09:b3:48:49:e8:82:a6:91:
41:99:64:87:27:73:8f:28:e4:ca:18:20:f9:b8:54:7e:9a:0e:
74:e1:b4:45:0a:fb:95:05:87:44:9e:d8:42:36:71:00:37:cd:
76:e0:f0:f2:83:04:53:4f:ac:29:f2:55:ba:7b:f6:5d:72:6d:
54:3d:62:e0:72:43:dc:7f:95:f0:7e:bc:b0:4c:f2:f3:81:65:
2a:28:fa:24:22:bb:cd:50:23:b9:e9:a0:00:94:82:82:70:a2:
4c:bf:a5:14:61:09:98:c0:0c:2e:63:32:af:03:2e:3f:cc:1a:
18:fd:1f:11:c2:43:49:cb:a0:1c:3e:7a:64:aa:fd:1e:54:22:
a0:65:28:93:4d:2e:d0:bb:d6:39:5e:ed:fe:f0:ee:84:d1:e0:
97:b5:12:34:0f:33:f1:bb:0b:3f:32:41:33:43:a6:0b:e5:5c:
ff:9d:43:7c:d8:89:d1:a8:d2:3b:ca:fd:29:73:97:48:20:6a:
87:6a:a0:12:b8:31:45:83:da:6f:d6:97:ec:05:06:19:34:2c:
ce:53:36:28:0a:2c:84:82:91:b1:0d:e0:a0:57:76:80:35:1f:
87:ef:7f:fa:d6:5b:bd:26:df:3f:07:d8:ca:6b:23:06:33:52:
bf:54:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:01 2026 by rpki-client