Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: Dc4BcI1+NSe7M7jXQJoxDbaOcl19MzicDeHV3jrO/OQ=
Subject key identifier: CF:D1:E3:C6:F9:55:55:A8:E1:E8:8D:8A:B1:C9:67:D5:05:5D:C3:F3
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 019D2A04D38FBB5D034C98ECA2895D000F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 11C9
Signing time: Thu 26 Mar 2026 12:00:52 +0000
Manifest this update: Thu 26 Mar 2026 12:00:52 +0000
Manifest next update: Fri 27 Mar 2026 12:00:52 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: dzvj0bpt2704rRSCOXJsWZ5Y71tlE69sbCDiZn664D0=)
2: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (hash: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d3:8f:bb:5d:03:4c:98:ec:a2:89:5d:00:0f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Mar 26 12:00:52 2026 GMT
Not After : Mar 27 12:00:52 2026 GMT
Subject: CN=cfd1e3c6f95555a8e1e88d8ab1c967d5055dc3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:8e:5f:73:41:fb:75:2e:bd:30:79:26:02:
3a:34:ab:f2:fd:4c:4d:45:91:dc:c8:da:82:74:78:
e3:09:a7:98:5a:ec:5f:35:61:cf:59:10:d7:b1:2e:
da:86:87:5e:53:5a:86:15:0a:ed:13:8d:f2:55:14:
1f:c2:34:a6:bd:d1:07:d9:7d:04:1d:5e:a1:34:67:
6e:de:ce:c4:b3:33:45:bb:25:12:52:4d:a4:f8:96:
96:47:ee:06:0a:48:de:fb:8c:83:d6:7c:ba:b3:22:
41:fd:d3:2b:a7:72:13:e4:1e:dd:75:9d:89:4e:d6:
fe:48:f5:8d:71:a1:a5:2c:4d:80:99:3f:bf:44:32:
42:db:d1:af:57:e6:80:10:ed:d0:bb:8b:05:53:bd:
86:78:e6:83:7f:79:47:44:5d:4f:1d:4b:84:55:66:
41:2b:04:6d:97:1f:ce:a3:30:af:0d:c4:6e:18:9b:
b9:a0:a6:c8:e1:ad:0f:9c:b4:36:37:7b:55:2b:ce:
89:4f:4b:21:b8:9e:3e:ac:a8:3c:6d:4d:3c:09:79:
9e:b1:2e:04:08:5c:c8:4b:f6:11:87:03:20:0c:9d:
45:d1:7e:26:20:48:b6:54:9a:9c:59:7f:84:4c:e7:
91:6f:57:d2:48:b8:77:49:3f:5b:f7:62:6e:54:2c:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:E3:C6:F9:55:55:A8:E1:E8:8D:8A:B1:C9:67:D5:05:5D:C3:F3
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:39:07:b1:17:6b:b6:f1:69:c7:cf:ee:32:4c:f2:8f:ee:b9:
aa:c2:ce:04:15:3e:35:8e:8c:5e:7c:58:0e:37:92:87:88:1d:
e4:85:8b:cd:6a:1a:05:01:cc:8e:fd:32:ea:4c:2d:a3:6b:50:
f5:b1:37:6f:c9:01:d3:c8:11:ef:03:94:a8:b9:b0:6b:39:85:
25:ba:cf:9d:c9:aa:cf:5b:2e:c6:d6:78:f4:ff:25:1c:45:42:
58:67:4f:00:22:15:ab:0f:59:f2:b9:14:9a:ac:08:53:98:56:
10:bf:66:d2:fd:d9:c8:90:1c:94:c5:41:d0:2e:ca:23:b3:50:
be:9d:0d:b7:b8:96:cc:71:0d:72:af:ff:df:80:7c:b7:b9:26:
b2:4c:0c:46:f3:76:44:c2:03:b9:da:4b:db:79:20:90:86:b8:
4d:aa:29:76:74:91:88:82:42:07:75:34:e9:db:f1:36:84:65:
79:37:58:d9:0b:bd:25:52:be:26:27:43:dc:2e:b9:42:6e:5f:
83:4c:41:ce:76:4a:97:0e:99:55:67:66:7e:58:3f:37:e7:5a:
6f:d7:1c:5c:4c:fb:b8:48:aa:f5:b7:cd:61:2c:96:99:34:59:
bd:6b:7b:f5:96:1b:4d:cd:25:f8:16:9a:ed:33:ef:80:7e:62:
a9:b9:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:12 2026 by rpki-client