Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: /XrcoLmaZhzfDmckdAhqL+GIsO6n3didATJgUEU18Z8=
Subject key identifier: 0C:4F:B3:FC:A6:70:14:92:15:A4:59:E1:BE:AC:30:AD:91:49:96:5E
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 019CAD59C15A097A3B5F94BF13A114BE0162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0DCB
Signing time: Mon 02 Mar 2026 07:01:06 +0000
Manifest this update: Mon 02 Mar 2026 07:01:06 +0000
Manifest next update: Tue 03 Mar 2026 07:01:06 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: EHLfRX0LXQYA3HUeLC8GEbaIjFAP0ISFOYF/OjVs5F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c1:5a:09:7a:3b:5f:94:bf:13:a1:14:be:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Mar 2 07:01:06 2026 GMT
Not After : Mar 3 07:01:06 2026 GMT
Subject: CN=0c4fb3fca670149215a459e1beac30ad9149965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:07:c7:24:35:8e:09:02:40:65:84:a3:f9:
f5:4c:fa:dc:3d:8b:bc:e6:a9:f3:11:30:fd:4d:e8:
37:6b:26:58:96:5d:04:4e:bc:06:5c:f6:63:18:0f:
7a:4a:41:64:24:6f:84:80:b2:e6:b7:1d:ff:a7:ac:
df:dd:50:b2:30:b2:09:40:f5:0b:c2:6d:5f:d0:c1:
0a:70:44:83:b2:4c:b5:a8:23:65:0f:5a:f6:4d:87:
a3:55:36:49:1a:ef:2b:9b:0f:a7:4c:79:7d:86:25:
db:98:f6:3b:74:97:71:82:32:00:92:de:93:f7:fc:
44:98:24:df:a6:c7:63:67:ad:7d:8b:d8:5b:42:11:
b3:3a:67:9d:d2:a7:47:5a:2a:b3:49:0f:08:18:d7:
fc:b4:a1:91:7b:b9:15:10:ff:18:c5:95:1b:d0:1e:
60:49:9b:df:25:62:44:ac:04:ee:8d:fd:7a:65:0c:
a5:0c:14:7f:69:2f:93:d6:8e:e4:01:9e:f8:0a:bd:
69:41:99:a4:33:82:d8:81:7e:29:41:fb:86:1a:09:
33:3a:62:aa:6b:25:01:14:30:d2:83:1d:0d:c8:95:
da:9a:b9:32:09:51:f5:bb:81:4d:76:cf:cc:1c:e2:
83:5d:c7:ca:db:50:a7:ba:4f:36:ba:f6:e1:7c:ef:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:B3:FC:A6:70:14:92:15:A4:59:E1:BE:AC:30:AD:91:49:96:5E
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b4:50:d6:49:d8:17:0a:02:2c:bb:fd:96:df:ad:5c:a9:03:
87:12:84:c4:f1:a9:38:c1:7b:e7:c0:0a:b9:d9:14:42:e7:cc:
fb:90:6b:d7:2f:74:93:a3:87:fe:52:82:42:d5:a9:39:c5:6c:
98:6e:82:2b:37:5a:39:65:4f:7d:fe:c1:e2:f0:5c:a5:f1:41:
86:74:0c:7d:b8:28:30:38:09:74:b3:05:1c:92:7f:4c:a3:1b:
ed:04:3f:c6:99:4d:b7:7f:7e:6c:ad:ca:93:91:fd:6e:f0:ec:
28:4c:aa:d3:00:31:9a:a6:39:99:f2:98:2a:e5:c8:4a:54:09:
2a:7c:80:f6:aa:97:3f:20:85:9d:bf:f1:57:c2:1d:f8:9e:be:
88:b5:1f:d7:da:71:5b:96:cd:be:64:56:8f:89:c9:bc:66:9f:
50:9e:bb:b7:61:8a:bf:1c:62:ca:fb:c9:db:01:85:b1:f2:16:
0d:6b:d5:d3:41:64:79:0f:bb:93:0b:8d:ca:cf:69:92:86:93:
53:40:44:04:42:47:dc:27:93:ae:08:7c:0e:fb:5c:79:46:42:
a9:1d:3b:ac:e4:5c:94:71:57:89:64:3f:e2:39:2e:05:98:89:
0f:b6:31:d2:60:df:fb:e9:e5:ca:a6:bb:d2:68:51:6b:31:e1:
9c:e4:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:37 2026 by rpki-client