Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier: aM5ZYXY9VuxMWcXWag6v56+5lRpDGrjKG7KcmktFEXc=
Subject key identifier: 12:09:2E:F0:C1:0A:51:A6:E9:60:B0:6D:76:DA:80:2A:25:B2:FF:CB
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial: 019CA9EB334951AF873BA6F29A1006C00EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number: 0757
Signing time: Sun 01 Mar 2026 15:01:29 +0000
Manifest this update: Sun 01 Mar 2026 15:01:29 +0000
Manifest next update: Mon 02 Mar 2026 15:01:29 +0000
Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: pDsB8fSa1YNdyQBMFGs4/XcuegxMITHwme1hRhMjALw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:33:49:51:af:87:3b:a6:f2:9a:10:06:c0:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Validity
Not Before: Mar 1 15:01:29 2026 GMT
Not After : Mar 2 15:01:29 2026 GMT
Subject: CN=12092ef0c10a51a6e960b06d76da802a25b2ffcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:18:c4:4c:3b:c4:2a:46:d7:3f:7c:74:19:
64:e1:7a:15:40:a0:52:8c:d9:5a:4d:2b:e3:9d:ef:
83:13:24:98:b5:3b:cc:4a:d5:5f:2e:0a:a9:18:84:
04:35:34:4e:9a:eb:4c:79:6f:45:83:45:e2:15:91:
97:51:76:61:ed:69:4a:01:e8:e9:ee:00:52:95:3d:
c4:ec:bb:2a:65:45:09:4d:31:0b:7c:49:b1:50:aa:
03:3b:4d:cc:ba:59:86:5f:2a:44:01:7c:b3:94:d2:
bf:0c:c6:9e:1f:0a:bf:da:0e:2a:f5:f3:22:ef:0b:
9c:4b:0a:dc:e4:bc:99:23:37:36:da:bd:83:19:84:
85:09:cf:82:65:cd:40:28:6e:eb:29:58:92:a0:df:
04:cb:d9:0f:d7:41:65:6f:d9:3b:8f:26:2f:d7:6b:
1b:e0:3f:0d:f1:ae:2d:cc:d6:ac:ad:20:22:df:4d:
37:bb:20:a1:03:6d:61:b9:07:8a:38:bf:c5:da:71:
18:a4:a1:19:13:7b:88:c0:27:bd:03:c2:ac:3c:0c:
eb:99:fc:bf:5d:04:c0:a1:fb:0a:2a:23:f2:9c:df:
b2:ef:47:0c:95:42:67:0a:1b:0c:69:39:2a:5f:40:
4d:88:db:00:d2:7c:f3:be:1a:20:3f:96:15:79:ea:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:2E:F0:C1:0A:51:A6:E9:60:B0:6D:76:DA:80:2A:25:B2:FF:CB
X509v3 Authority Key Identifier:
keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:34:d7:2f:89:00:b4:c0:14:f7:8a:7d:0b:29:ac:2e:c2:
af:69:fe:0a:3a:59:37:e7:7c:9c:e1:5d:10:bd:58:63:ed:c2:
68:2c:a3:34:75:66:65:8a:ee:fc:56:65:6c:e4:07:ef:36:53:
31:73:97:60:97:6d:66:04:b5:aa:28:af:50:0e:32:56:11:b7:
4d:c8:4e:52:2f:31:1a:56:f1:cb:dc:42:ca:30:f4:57:5f:02:
41:7d:19:78:6e:98:b3:16:54:bd:6e:d2:d6:ab:a5:d2:73:7b:
b0:3b:81:f8:2b:e9:83:f5:1c:2e:5a:ca:65:3d:6f:cb:10:29:
b2:28:41:bc:7b:d4:37:dd:35:f3:cf:4b:0c:92:13:6d:47:0a:
4e:f2:71:f2:79:69:bd:2e:a4:4b:91:e2:99:57:aa:4b:ac:8d:
aa:32:8c:51:b0:33:2a:64:00:b7:e7:7a:72:d5:f7:7a:23:a2:
f2:50:58:c7:bc:ca:1b:83:8d:91:d6:b7:f3:be:df:44:42:82:
26:83:ad:af:bc:c3:c7:df:e5:d4:6d:d7:03:35:e4:9d:b2:7b:
52:db:f9:d3:8f:4b:30:59:bf:fa:6c:8d:bc:f1:9a:8f:d6:9f:
18:2d:fd:e1:50:7e:e1:35:97:66:61:b1:d2:ba:cb:c3:ad:1b:
b1:03:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:05 2026 by rpki-client