Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: TwHgflKCZ9HGwqraV/B7F14DRPsSQDWB6SCc8HBaQXg=
Subject key identifier: CE:AD:1F:81:5C:34:9A:A7:DB:95:51:A0:B9:BF:42:9B:B4:08:02:9C
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019D2AE020586830A0084BEA38CDE57151CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0E0C
Signing time: Thu 26 Mar 2026 16:00:24 +0000
Manifest this update: Thu 26 Mar 2026 16:00:24 +0000
Manifest next update: Fri 27 Mar 2026 16:00:24 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: n8EDrgkon02ZapD+6JlYd3TpjISpUHIvN1iyiHAxrzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:20:58:68:30:a0:08:4b:ea:38:cd:e5:71:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Mar 26 16:00:24 2026 GMT
Not After : Mar 27 16:00:24 2026 GMT
Subject: CN=cead1f815c349aa7db9551a0b9bf429bb408029c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:94:f4:c3:3d:fb:15:62:17:aa:ed:1a:5a:
61:29:0b:b3:0a:a4:c2:3d:70:48:fd:f4:ae:25:85:
6e:07:2f:ef:13:05:38:d5:0b:0a:44:bd:08:10:11:
93:a6:86:37:29:05:f0:03:85:d2:19:d4:a7:e3:76:
c5:bd:d2:3b:96:9e:0b:ad:3b:95:ae:1e:cd:d7:46:
f9:91:af:84:ae:60:b4:b0:cf:c5:f4:38:9e:0d:6a:
95:f8:78:6f:90:cd:55:d5:53:04:89:01:72:61:a2:
f8:18:76:f2:5d:72:68:6f:ad:bb:d6:13:6b:43:e0:
6b:d3:b0:a0:40:df:f3:69:fe:c1:b1:15:d0:03:3e:
67:99:04:42:76:04:c5:7d:c9:19:f9:87:ba:f8:16:
fc:b3:ae:12:2d:c1:10:bc:0d:e6:a7:b5:c7:df:d6:
17:e4:17:29:0e:7c:4e:6a:ee:41:21:85:b3:fb:4e:
b5:0c:64:25:1a:57:28:77:45:40:05:ed:44:46:1b:
dd:80:c3:cf:20:a1:db:04:f7:81:61:2f:34:4a:10:
f3:a9:e5:8f:ab:ad:1e:f3:43:9c:b7:03:ad:3b:62:
29:99:8c:c8:25:f2:38:9d:bd:53:eb:46:24:7d:76:
a5:52:ed:42:4e:ea:30:2b:46:f0:c2:8d:13:b3:56:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:1F:81:5C:34:9A:A7:DB:95:51:A0:B9:BF:42:9B:B4:08:02:9C
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:27:36:63:3a:9e:cd:ef:4c:83:6b:02:7e:57:c8:c2:77:
d3:bd:3a:31:a0:99:eb:d8:14:92:44:b0:56:b4:d0:94:9b:c9:
1e:af:b9:c9:57:4e:29:68:2b:e2:6e:dc:66:ac:b8:0d:b3:2b:
a5:8c:61:c1:cf:8c:9d:e3:f2:26:da:9e:cf:fe:ca:b6:16:61:
39:72:fa:b3:8f:0a:e1:62:f5:96:98:b2:8c:c8:f9:70:d2:d7:
f7:ec:80:e3:23:06:e3:6e:f4:e7:d7:23:d9:8e:b0:2e:fd:ac:
73:e7:5e:73:a1:dc:da:54:5d:f8:40:69:e8:d3:9c:39:71:62:
5b:a9:54:7a:00:08:1d:bd:6d:4b:e6:68:a7:52:06:03:79:74:
36:78:1f:b0:3c:3e:17:fe:99:33:7a:6b:0e:6f:ba:49:fa:74:
f0:b4:c1:b2:5d:b6:43:86:8e:74:27:dc:17:b0:89:87:7e:c3:
b1:f0:5d:0c:2a:0c:24:5d:42:1d:8c:3c:c5:e2:60:52:bc:47:
28:02:e3:c1:a1:2d:21:13:07:3c:1c:0a:f7:fd:79:dd:59:8c:
d7:3e:c1:fe:ab:31:b6:0a:32:41:81:54:67:1f:35:17:54:da:
aa:53:76:3b:3d:14:7f:03:9c:58:52:e7:81:dc:de:8a:5c:b7:
f5:19:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:07 2026 by rpki-client