Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: RHX9MO9e4IyZeSy8tD3LIXe/rWYOCDo95BILrwJ4Tj4=
Subject key identifier: 99:5E:F8:DD:A9:FB:D3:56:8A:E8:4B:A3:FA:3C:FD:D8:06:EB:5A:35
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019D9B5073B29C1AC97C6640EAF95AA98B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 07D4
Signing time: Fri 17 Apr 2026 12:00:33 +0000
Manifest this update: Fri 17 Apr 2026 12:00:33 +0000
Manifest next update: Sat 18 Apr 2026 12:00:33 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: 1ZWmeqPTKaxWsvoWuPYylAQn7hw+ZNn96bOi/XDx168=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:73:b2:9c:1a:c9:7c:66:40:ea:f9:5a:a9:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Apr 17 12:00:33 2026 GMT
Not After : Apr 18 12:00:33 2026 GMT
Subject: CN=995ef8dda9fbd3568ae84ba3fa3cfdd806eb5a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:c5:29:91:87:d9:05:24:07:ed:0f:f2:d2:
9f:17:9d:1f:76:f3:49:6c:0a:48:6e:d5:41:7b:27:
ea:25:43:7a:dd:58:b1:e1:45:08:b1:e7:67:6a:65:
de:58:2d:33:7d:98:93:80:3c:06:29:3d:ca:55:07:
81:cd:2a:0c:ab:b0:8c:e1:4a:c4:aa:08:4c:44:8b:
5a:3e:a0:ff:ca:78:05:de:e0:ef:55:5c:d3:bf:13:
c3:44:20:7c:f3:28:67:d0:5f:b5:63:c6:3a:f8:61:
e1:5a:62:d9:a1:ac:68:38:66:2e:1b:84:11:e3:8b:
f1:a8:81:0b:b0:f5:29:12:48:3d:f7:a2:87:f0:29:
c7:08:74:c2:05:7a:91:91:95:f9:1a:ed:68:71:1c:
b5:04:67:97:71:bc:99:a5:e1:75:12:68:c8:71:10:
08:bf:4c:f1:99:c5:b5:70:9d:51:55:8e:bc:08:fa:
ed:d7:d8:e3:da:6c:46:dd:c9:7a:69:c4:26:73:84:
27:b6:b6:34:e2:29:0a:6f:29:56:cc:40:bc:34:6e:
96:fe:bf:0b:ee:05:65:06:33:f7:35:d7:62:b1:0e:
d2:98:b0:58:f1:44:df:3c:32:45:ac:69:42:04:0b:
10:0f:35:4d:35:fb:39:99:1d:8a:f3:31:4d:36:54:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:F8:DD:A9:FB:D3:56:8A:E8:4B:A3:FA:3C:FD:D8:06:EB:5A:35
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9c:4c:ee:6e:ba:03:df:da:10:2d:f5:da:dc:0e:5b:13:d1:
00:85:33:06:2d:99:3b:e5:12:eb:fe:e9:ff:d4:31:6d:f0:40:
e8:5d:82:85:25:71:18:72:60:a7:39:e3:40:f0:70:cb:0b:b9:
84:f8:4c:72:6e:6b:fc:ed:1c:51:2e:dc:9b:1b:90:18:fe:07:
57:1f:d0:cb:3d:a6:6e:60:2e:9b:01:c2:19:b8:e7:64:70:01:
b4:0c:00:78:8a:e8:91:19:a9:06:f3:4b:4a:1d:a1:b2:15:58:
95:87:67:67:4b:28:45:bf:ea:a1:a4:86:85:c2:02:96:8f:29:
3b:97:b4:85:8e:84:07:a8:f3:f6:bc:df:96:d0:5d:44:82:94:
5b:9a:56:95:14:20:b7:d6:e7:3d:aa:9f:2a:e1:ca:36:e1:5c:
3b:5c:09:51:6a:8c:e2:92:41:21:2d:4b:f4:52:15:65:a8:a7:
44:84:39:65:53:3b:04:f9:c4:1a:f3:33:14:72:ce:81:a8:63:
60:a5:dd:d4:b2:cc:3d:9a:e1:fc:11:22:5d:3e:18:b3:f4:08:
49:7b:9a:f8:65:58:90:18:33:b8:fc:cd:c9:40:fc:2c:35:3b:
d1:b8:c6:d5:74:ea:52:6b:a7:6f:7d:94:f1:31:c8:99:33:a6:
0b:a5:18:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:48 2026 by rpki-client