Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: 0eRYZcC8vHce69oYBpElIykI3hBq6RdNfILqN5lgm8I=
Subject key identifier: B3:7B:B6:9D:C8:C9:7D:E1:0A:40:17:6B:D4:AD:3B:32:E5:94:9D:C5
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019D9EBF3874891DC069388E0410FFC82717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0E48
Signing time: Sat 18 Apr 2026 04:00:25 +0000
Manifest this update: Sat 18 Apr 2026 04:00:25 +0000
Manifest next update: Sun 19 Apr 2026 04:00:25 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: WtwpNl8iRFmimEgBvCTY/YFL1bw8+tvVNb22q6bE3oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:38:74:89:1d:c0:69:38:8e:04:10:ff:c8:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Apr 18 04:00:25 2026 GMT
Not After : Apr 19 04:00:25 2026 GMT
Subject: CN=b37bb69dc8c97de10a40176bd4ad3b32e5949dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:f0:19:d2:76:70:48:17:d9:ff:d6:1a:6c:
a0:40:5b:63:dd:08:f4:37:5d:21:85:18:8a:d5:ea:
59:e1:a0:fe:a2:c1:7a:43:a8:f6:e5:dd:2f:1d:18:
ac:83:41:12:2d:18:7c:18:31:de:fd:34:9e:c1:fd:
cc:a0:c7:e8:88:50:37:23:89:1a:ce:49:15:2c:70:
5f:e1:cb:c5:8f:73:f3:3c:68:d0:27:07:1c:fb:dc:
21:af:bc:f3:e0:2e:da:22:65:bb:26:2f:9b:02:12:
91:21:e4:c0:9b:c7:4e:ce:58:2f:c2:80:c6:4c:15:
8e:0a:d6:6b:1b:24:c2:71:9c:b8:3d:57:2f:a2:c9:
1f:b6:06:1e:8e:95:d9:e6:23:b0:b7:aa:10:a2:6f:
bb:e7:b1:04:c0:5f:b0:5f:82:e6:d4:c6:45:24:b3:
ae:86:d6:4f:7d:37:42:35:2c:07:1e:ca:17:df:08:
34:c1:c7:e9:ee:d3:87:16:ea:b5:21:61:9e:51:78:
43:b7:95:84:00:a0:95:99:8e:5d:44:4a:2d:5e:f5:
4d:96:79:6b:4d:62:17:69:c4:72:26:f1:1c:e9:2a:
46:4f:9d:7f:94:bb:e8:3f:1f:d8:50:06:5f:08:f9:
d4:db:95:63:9b:74:99:49:aa:29:e6:81:f0:a3:54:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:B6:9D:C8:C9:7D:E1:0A:40:17:6B:D4:AD:3B:32:E5:94:9D:C5
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:81:d2:2d:11:29:61:84:ac:1c:a0:ab:35:58:c6:5c:ce:
fb:ec:c6:46:64:30:9d:7f:1f:5c:1b:82:e5:6d:0c:8c:1d:0b:
8f:49:b6:5e:b0:5f:a0:71:56:fe:e9:e8:87:17:3a:fb:80:9c:
88:7d:42:dd:0c:d2:ec:39:bc:55:98:8e:97:32:7c:d7:b8:d2:
6f:fd:53:b6:87:64:86:d6:39:57:ed:a2:7b:6d:ce:ee:2d:d3:
e9:db:64:a9:7a:ef:9f:72:32:0a:a7:ba:f8:8f:37:82:79:da:
75:a7:dd:34:a4:7e:25:2e:cb:d1:f5:53:2e:23:50:f6:e5:a9:
70:b3:6b:16:b5:0f:53:f9:f8:1d:6d:cf:cd:5a:85:f5:06:45:
69:2b:78:33:b3:19:f1:d2:ae:f0:1e:b9:90:9a:00:7d:8a:38:
31:bf:75:e4:94:6b:52:71:10:0e:cd:be:de:e2:5a:cb:a9:48:
08:1f:e1:cf:81:b1:2e:da:ac:92:df:59:bb:31:47:90:8b:15:
60:46:be:1b:3d:9f:0b:64:b9:8e:2a:b5:6f:97:25:f5:d4:3a:
84:fc:82:04:66:b9:5e:e0:7f:1d:a1:4c:74:97:b9:ca:3f:b8:
03:c2:79:7b:60:eb:5d:fe:cf:f6:79:61:47:bb:7d:ba:3a:56:
52:7d:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:37 2026 by rpki-client