Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json)
Hash identifier: kQy7G4avm0uzxqZRcJg6OokeGF+wXYKgk2ESZKYEOiQ=
Subject key identifier: 0A:32:D8:3F:5D:45:0B:61:1D:C8:44:03:60:09:5A:45:47:3B:B6:37
Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Certificate serial: 019CAB6BAE90E6152C666DBC8F68E20E5F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
Manifest number: 1759
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: k6YlHubWUqCmTCzWTmChy2qq1gteKp1EBcAGNjrqDrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ae:90:e6:15:2c:66:6d:bc:8f:68:e2:0e:5f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=0a32d83f5d450b611dc8440360095a45473bb637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:1e:42:0e:c7:b8:72:a8:08:d5:76:5a:00:
3c:05:1a:6e:04:9e:ee:04:2c:1e:ca:3a:1a:b7:2b:
3f:9a:dc:5d:5f:43:21:ce:04:48:0e:4c:72:37:f4:
85:ec:df:49:d7:c0:16:3c:a7:1d:75:81:32:59:f8:
cb:1f:91:81:65:a0:aa:61:2c:a1:e0:66:85:f1:36:
a3:35:02:6d:7d:7d:f5:8d:48:1b:f0:02:7f:3a:1c:
cc:d1:60:72:10:da:4b:20:cf:9d:aa:a7:6d:23:95:
16:e2:06:52:a4:2a:c7:84:c3:5b:23:50:9c:1f:7e:
8e:53:c9:58:68:17:04:10:68:80:b4:67:62:88:8e:
f7:11:93:ac:64:ec:55:9c:c5:c4:8c:2b:01:5e:95:
fb:7f:44:28:3d:d2:48:f7:98:78:f1:dd:fe:9f:82:
b1:89:48:50:d1:85:c1:14:59:35:9f:eb:88:00:64:
e7:10:80:32:10:fd:3b:0a:b2:af:86:c9:79:65:ab:
4f:49:90:79:2f:02:a6:5d:32:b1:31:4c:9d:37:79:
7d:a7:3d:79:04:c1:f1:5a:35:6c:70:ba:19:fc:33:
cf:08:f4:7d:5f:4c:75:cf:33:bd:2e:fe:8c:ed:ce:
7b:b7:60:7f:8f:6a:6a:90:30:e5:31:98:3c:e2:2e:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:D8:3F:5D:45:0B:61:1D:C8:44:03:60:09:5A:45:47:3B:B6:37
X509v3 Authority Key Identifier:
keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:11:d8:38:68:17:cd:66:ec:c0:1a:ab:02:d2:ba:bf:78:bf:
75:8e:c6:6a:8f:d7:7e:82:e4:bd:05:0d:2a:c4:88:06:2d:0a:
46:a7:14:4c:b3:af:bb:bc:38:b0:42:e2:e5:bb:86:ca:9b:b2:
78:12:42:f2:08:98:f2:f5:b5:00:59:c0:ff:e5:53:e0:20:21:
09:18:41:1e:22:48:db:4c:4d:22:e1:af:fe:07:49:bc:c6:fb:
9b:85:ea:a8:5b:ad:7a:b6:35:68:67:b0:5d:9d:46:b3:f9:af:
32:09:e6:30:55:3c:e7:e8:db:3b:e8:f1:05:92:cb:4e:c3:59:
5a:23:66:a5:33:ce:4d:51:a5:3b:38:62:48:46:4f:6d:0d:d5:
5b:a6:54:e7:fb:d5:6c:13:4c:dc:1d:48:f1:c1:4d:88:53:0e:
b6:34:23:89:a0:ed:63:40:65:b1:f1:67:ff:81:f7:8f:77:1a:
8c:66:78:5b:45:b1:d8:9d:a4:55:f0:fb:bd:7a:9a:bc:16:03:
33:24:a7:b6:cd:b4:64:4d:32:92:af:6d:35:6c:78:7f:13:bd:
f9:5a:02:c9:f9:94:d5:59:8e:7c:29:9d:67:98:c2:5b:5d:ce:
da:e8:e6:0a:fe:81:ae:cc:e7:e8:c8:ea:76:5f:ab:3a:79:c8:
3f:44:c5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra66Q5hUsZm28j2jiDl8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Mjg4NWVmMjZkZTZkM2IyMjYwYWI2M2QyYzVjYTBmODYz
N2RmMDMwHhcNMjYwMzAxMjIwMTI2WhcNMjYwMzAyMjIwMTI2WjAzMTEwLwYDVQQD
EygwYTMyZDgzZjVkNDUwYjYxMWRjODQ0MDM2MDA5NWE0NTQ3M2JiNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruAeQg7HuHKoCNV2WgA8BRpuBJ7u
BCweyjoatys/mtxdX0MhzgRIDkxyN/SF7N9J18AWPKcddYEyWfjLH5GBZaCqYSyh
4GaF8TajNQJtfX31jUgb8AJ/OhzM0WByENpLIM+dqqdtI5UW4gZSpCrHhMNbI1Cc
H36OU8lYaBcEEGiAtGdiiI73EZOsZOxVnMXEjCsBXpX7f0QoPdJI95h48d3+n4Kx
iUhQ0YXBFFk1n+uIAGTnEIAyEP07CrKvhsl5ZatPSZB5LwKmXTKxMUydN3l9pz15
BMHxWjVscLoZ/DPPCPR9X0x1zzO9Lv6M7c57t2B/j2pqkDDlMZg84i6PnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoy2D9dRQthHchEA2AJWkVHO7Y3MB8GA1UdIwQY
MBaAFKcohe8m3m07ImCrY9LFyg+GN98DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAt
MGU3MTgwZjk4NzRkLzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAtMGU3MTgwZjk4NzRk
LzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhHYOGgX
zWbswBqrAtK6v3i/dY7Gao/XfoLkvQUNKsSIBi0KRqcUTLOvu7w4sELi5buGypuy
eBJC8giY8vW1AFnA/+VT4CAhCRhBHiJI20xNIuGv/gdJvMb7m4XqqFuterY1aGew
XZ1Gs/mvMgnmMFU85+jbO+jxBZLLTsNZWiNmpTPOTVGlOzhiSEZPbQ3VW6ZU5/vV
bBNM3B1I8cFNiFMOtjQjiaDtY0BlsfFn/4H3j3cajGZ4W0Wx2J2kVfD7vXqavBYD
MySnts20ZE0ykq9tNWx4fxO9+VoCyfmU1VmOfCmdZ5jCW13O2ujmCv6Brszn6Mjq
dl+rOnnIP0TF5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:15 2026 by rpki-client