Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: Aax5Z5y46OI2MBS3g/D8dvhUkxiFqCn2fRXf2cmmOB0=
Subject key identifier: A3:EA:BA:12:B2:7B:A6:59:84:4A:28:DC:87:7C:23:15:72:C3:69:D6
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 01A0CC3581075493CBE3729BD01A9AAFDF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 097B
Signing time: Wed 23 Sep 2026 03:00:53 +0000
Manifest this update: Wed 23 Sep 2026 03:00:53 +0000
Manifest next update: Thu 24 Sep 2026 03:00:53 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: 2AeZg4l0JEXSe/aC+moodjShSIft9qg0uAY6YYifkTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:81:07:54:93:cb:e3:72:9b:d0:1a:9a:af:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Sep 23 03:00:53 2026 GMT
Not After : Sep 24 03:00:53 2026 GMT
Subject: CN=a3eaba12b27ba659844a28dc877c231572c369d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:bd:05:b8:f9:9f:f4:15:23:8e:a2:40:ee:
c2:6b:15:89:1f:0b:53:96:23:b4:2e:d7:26:89:01:
55:fc:a7:b8:f7:07:96:11:e7:98:0a:49:bc:8b:37:
41:11:15:ba:d7:e6:d5:ce:ab:9e:6c:d8:4b:e4:da:
5f:d6:ec:7c:6d:46:24:a2:d1:33:a1:20:7a:73:14:
3b:61:07:a6:2d:d5:c4:15:57:89:e9:b2:84:83:10:
04:ac:15:4b:86:8b:2b:d3:4e:38:6f:fd:35:e5:8f:
8c:59:55:07:7d:87:39:57:b2:b3:08:ed:b9:15:21:
af:4a:02:02:8f:d0:f9:fd:3c:aa:ff:2c:f1:2b:db:
99:b2:a1:ac:33:4a:1c:bb:c6:1d:9d:d6:6b:11:41:
b3:6c:b3:d7:0d:1f:ac:de:7e:1a:62:c3:79:30:a8:
17:39:22:43:07:86:3f:76:cc:3c:4b:68:ce:26:5d:
93:e7:44:cb:58:5e:d4:97:a7:d2:ad:84:a3:a2:c4:
5b:5d:65:33:03:be:39:44:96:47:ee:81:c1:84:bb:
65:f7:d1:49:8d:5b:3a:4b:ae:ee:25:08:a6:05:5f:
07:ec:df:77:8a:82:51:8f:d1:c5:ab:88:7b:a0:fb:
1a:7d:5c:2a:32:fa:24:dd:4b:e5:ef:92:7a:98:7c:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:BA:12:B2:7B:A6:59:84:4A:28:DC:87:7C:23:15:72:C3:69:D6
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:47:3e:2f:23:2a:60:cc:17:1f:aa:78:6c:f3:cf:44:d5:
db:0f:77:17:61:fa:b8:73:a2:1b:3b:68:5d:3c:8e:e0:19:f8:
ec:35:8a:9c:ce:15:28:27:31:dd:bd:88:12:23:c2:8f:92:b2:
19:41:41:15:f6:f4:84:1c:64:2b:6f:87:fc:dd:ae:9e:e6:4a:
59:88:28:bb:49:fa:b6:ee:1c:92:f0:95:74:f7:48:bb:36:1b:
84:47:3d:66:47:67:71:62:f2:dc:9c:e9:26:c5:11:de:ee:b7:
f4:56:73:3b:49:ea:37:b1:16:b0:fb:c6:39:8d:4f:a8:3d:fe:
d8:8c:3e:3a:dd:14:45:99:fe:d8:5a:88:d4:5a:e5:42:6e:1f:
d6:e7:b5:b5:3f:20:7a:e2:86:47:82:32:1d:b1:b7:a4:67:93:
e6:cf:64:05:14:66:2a:5b:71:43:a8:09:ef:49:7e:31:cb:82:
30:7d:5b:38:0d:51:ed:50:45:66:18:d2:66:25:5e:30:b0:81:
0b:46:ae:b8:a2:2d:62:59:46:df:ec:74:e8:9a:a3:ce:ec:de:
b8:1a:32:e7:46:85:56:0a:97:b1:60:f7:8c:6c:3e:a7:cc:1a:
ef:c8:8e:5f:d4:b8:ed:f3:3a:b4:92:a3:0d:12:5e:17:35:50:
13:d8:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:54:49 2026 by rpki-client