Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: zDTY+ZIPZWc/6k7GHT/TUIuKy1Hc4QbIfJgN5odNUVE=
Subject key identifier: 39:15:14:1F:8D:82:13:34:BD:26:BA:20:91:B5:27:41:01:28:88:4A
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 019F90FF94C6D44136CB635B40B2432A963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 1955
Signing time: Thu 23 Jul 2026 22:01:36 +0000
Manifest this update: Thu 23 Jul 2026 22:01:36 +0000
Manifest next update: Fri 24 Jul 2026 22:01:36 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: F9XWA9Qd12ctFO4AQZkScK9dxjngyTKVgBcAr+SJ3OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:94:c6:d4:41:36:cb:63:5b:40:b2:43:2a:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Jul 23 22:01:36 2026 GMT
Not After : Jul 24 22:01:36 2026 GMT
Subject: CN=3915141f8d821334bd26ba2091b527410128884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:ef:f5:22:37:5f:31:13:0d:a3:21:9d:91:
72:9b:67:d4:09:d7:86:54:83:e0:fe:fb:86:e5:c1:
f6:68:de:0f:e5:ae:96:b7:c7:2a:5d:eb:d1:6c:01:
f2:7b:a6:d1:99:cb:63:ed:2c:3f:d7:ce:81:e8:c7:
2f:45:16:5f:cd:0a:d5:bc:ef:c3:ba:ea:64:83:0d:
45:f2:33:71:bf:a2:65:76:df:70:a3:df:8f:fd:4c:
f5:25:de:15:b3:48:57:e1:37:7f:e5:0f:f4:ba:cc:
d8:fa:6e:b2:7f:23:e2:bc:b7:5f:b3:ac:d5:d7:97:
b7:15:27:2d:5e:c8:84:65:d6:82:d6:fd:d6:b7:40:
32:be:a1:70:36:e3:4a:fd:14:9a:9b:08:e9:a2:35:
d7:7c:71:fd:4f:92:d2:e5:4e:5e:f4:41:93:a7:d8:
3f:81:f4:ee:71:be:21:2a:73:0e:66:64:d2:e8:6f:
81:1d:af:ae:ab:6d:c4:d3:20:0f:08:10:29:e0:80:
09:8c:e1:ad:9a:8e:05:80:5f:69:55:9e:dc:d8:6d:
bc:82:d9:05:76:21:c5:60:5e:4f:2c:66:e2:fc:52:
8e:1f:ed:a2:67:a8:06:8e:34:53:c5:02:65:9a:16:
bd:d4:69:78:23:26:f4:0a:d0:73:13:07:66:5f:da:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:14:1F:8D:82:13:34:BD:26:BA:20:91:B5:27:41:01:28:88:4A
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:61:fd:1b:e2:5a:5d:69:8f:b3:57:c0:6d:bc:69:ff:f7:
3e:13:35:2e:0c:01:5a:87:a9:0c:8b:f9:0e:75:ab:d6:03:b7:
5c:7b:16:03:f0:58:f7:21:7d:03:66:33:1f:3d:5e:1b:e8:44:
f5:ef:02:c8:f7:34:e6:02:ed:e8:ab:fe:5d:2d:00:66:d2:04:
00:bb:99:68:a7:43:e2:26:62:79:7d:f7:cf:f7:5a:bf:38:d1:
01:ea:fd:97:c1:b9:b1:33:9b:24:70:ea:0e:cd:d5:71:b3:79:
e7:60:4a:11:b6:ea:d4:c5:8f:16:83:d0:fa:cb:db:5c:ba:e3:
d6:db:53:6c:e7:9a:4d:23:90:03:89:32:79:91:5e:6a:9f:5d:
98:6d:b0:ea:47:34:6b:ab:6a:a5:3a:19:19:6c:99:4d:38:55:
9c:c0:04:77:8a:60:e8:a0:4b:c7:b7:00:26:71:0b:da:9b:fa:
d0:14:cf:b1:61:66:e8:f6:7e:d0:f2:0e:2b:fa:5c:35:c8:5c:
01:2c:66:e4:a1:ab:97:c1:36:a2:49:ab:4e:fe:c8:c8:d5:40:
0e:6c:4e:48:b6:2d:80:d5:6c:76:4f:74:8d:e5:5f:3c:52:31:
3d:c4:66:7e:9f:53:eb:f8:ff:71:13:ea:6e:8c:34:c5:08:9c:
7e:90:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:55 2026 by rpki-client