Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: Ki3Oxa6yHZbCZiCXLzRO7Wk15zFPl7tgIjTTTmNwHd4=
Subject key identifier: 43:DF:ED:41:10:AA:92:79:C3:5E:3B:9D:B6:EE:B5:66:55:46:C0:29
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 01A11AF51E7FABD95A597335272E53CB95F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 1016
Signing time: Thu 08 Oct 2026 10:00:34 +0000
Manifest this update: Thu 08 Oct 2026 10:00:34 +0000
Manifest next update: Fri 09 Oct 2026 10:00:34 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: bUl83x3/RUJ0vX+1/IfwMKiZfArMnZ3f2a57WI7EHwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:1e:7f:ab:d9:5a:59:73:35:27:2e:53:cb:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Oct 8 10:00:34 2026 GMT
Not After : Oct 9 10:00:34 2026 GMT
Subject: CN=43dfed4110aa9279c35e3b9db6eeb5665546c029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9a:e3:af:ae:aa:01:51:89:28:2c:c2:3e:ec:
1d:b4:0e:ef:d1:2a:1b:1d:38:55:5f:8b:d5:35:3b:
21:23:e6:b4:db:e4:c2:bd:25:4b:1f:bf:ff:7d:8d:
86:b2:08:07:35:a2:a8:20:9b:bc:1b:63:e3:63:55:
0c:3f:bb:38:ae:a5:dd:7f:60:a7:bb:e4:63:bb:06:
45:6b:1d:f4:ac:e9:3f:33:f8:51:54:45:3e:af:6a:
09:49:a0:44:7b:e6:af:9f:47:94:ba:d2:98:b7:0b:
c8:b1:0b:65:44:73:2d:36:5c:c7:ee:b8:04:8d:50:
c4:36:be:a4:b8:3d:42:64:95:eb:7a:fa:15:8b:4f:
9c:86:48:32:8e:f8:5b:10:f7:70:10:59:32:f3:13:
a1:8d:97:c7:a0:ff:36:0b:db:98:c1:86:95:8b:03:
f2:b3:de:e1:aa:ba:ca:83:38:39:a2:35:bb:2a:3a:
34:02:9e:19:33:aa:8b:32:0c:a7:b6:8b:17:55:97:
9f:61:ba:76:c6:7d:1e:df:e0:98:8c:e3:d6:70:32:
66:6f:ac:eb:b2:09:f0:54:eb:c1:19:d6:ab:30:2a:
fd:3d:09:b1:7c:31:43:53:52:50:5a:cb:1c:e6:69:
41:9a:db:5d:58:4e:e1:3d:7f:dd:58:34:51:e2:09:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:ED:41:10:AA:92:79:C3:5E:3B:9D:B6:EE:B5:66:55:46:C0:29
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:db:7d:c7:4f:b5:0e:43:5a:ac:3d:36:47:1b:fb:d6:91:
67:70:af:d4:0b:5a:68:eb:e0:37:8f:e9:b0:62:bf:04:08:5d:
14:2c:8a:7d:49:a2:9b:1f:3e:84:13:6e:a5:77:74:f5:ac:d1:
b8:07:1d:7e:c9:6d:a9:37:f9:a2:2d:db:cc:da:83:0d:32:0c:
78:ab:9a:24:61:73:55:06:df:81:aa:00:b2:62:94:99:fb:e6:
87:99:d5:ac:d5:f7:37:cd:ec:70:63:16:ed:72:01:79:46:20:
18:e9:07:f8:b2:d8:33:83:34:13:aa:c1:c9:d9:77:1d:60:33:
92:9d:a3:24:20:46:b2:65:85:ed:e3:f4:d7:b6:87:3f:1f:3a:
ba:c4:a0:f6:11:2a:fd:dc:26:b8:f2:22:3d:03:de:35:8f:c8:
0a:82:64:a0:ab:ee:aa:4d:85:a7:ca:f7:2d:1e:5a:76:4d:40:
c0:a7:2f:13:ba:28:00:34:6a:a4:f6:cf:a3:14:fb:9d:ed:49:
17:bc:07:b9:ce:08:87:3f:00:6d:a3:03:94:4c:0f:1a:9e:d2:
a6:8a:8d:93:27:d7:66:e4:0f:a3:86:5a:92:23:61:81:50:d6:
e7:cf:d3:e2:de:d4:fd:1c:71:d3:42:78:5f:aa:b8:67:47:94:
c8:9d:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:56:35 2026 by rpki-client