Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: hASvBfO7LtdhjXPJgP3uA88IayODXw0apHrS5p4hVhc=
Subject key identifier: 71:22:8D:78:B7:1C:52:2B:EE:A8:F6:12:9A:25:53:C0:FF:8E:4D:A4
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 01A12165DF3663DB24B4E84E807B6CD5CC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 19C6
Signing time: Fri 09 Oct 2026 16:01:26 +0000
Manifest this update: Fri 09 Oct 2026 16:01:26 +0000
Manifest next update: Sat 10 Oct 2026 16:01:26 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: ltuZvvWUtGIsRl1hEDEMTfv3EN699LK/7aHTLKUgS2Y=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:df:36:63:db:24:b4:e8:4e:80:7b:6c:d5:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Oct 9 16:01:26 2026 GMT
Not After : Oct 10 16:01:26 2026 GMT
Subject: CN=71228d78b71c522beea8f6129a2553c0ff8e4da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:d8:90:6b:13:06:cb:7c:31:40:e2:2f:4e:
a4:9d:9e:4a:4a:46:0e:cd:b2:eb:af:9a:7f:43:ce:
e5:8d:e6:6b:d7:b3:ad:a5:64:b8:93:85:9c:50:00:
7a:27:0b:6b:7d:f2:44:32:cf:31:f3:66:26:70:9f:
55:bf:cb:d0:e1:87:3a:de:69:6a:9c:86:4a:f2:94:
a9:61:98:bc:ef:41:ce:ad:9c:77:42:a1:db:ff:a8:
b8:73:99:6c:fb:d8:25:34:9c:ef:d3:34:fd:e8:26:
f7:92:f8:05:38:5c:2a:29:30:cb:a9:be:4e:2d:74:
64:6d:6f:22:a1:ce:2e:a2:1e:fc:aa:09:9f:86:44:
3f:36:64:73:c2:d5:b1:f3:00:5a:d0:e1:89:3e:d5:
37:82:82:9b:25:b6:d6:e7:9b:09:ac:09:49:4f:5e:
bb:fc:36:34:75:66:b8:28:3a:ee:bf:a9:92:4f:97:
a9:99:ce:b2:dd:f3:3a:e5:25:db:b9:53:05:5d:59:
d6:e1:59:fe:88:42:9e:b7:d2:2c:8b:3b:8f:e9:2f:
48:68:92:c6:0d:e3:76:ff:83:24:9a:4a:e0:4c:5a:
57:83:ff:13:29:7a:3d:10:fc:9a:4e:a9:f6:a8:fa:
b0:77:57:29:b7:8c:72:75:83:3d:9a:09:7e:d5:43:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:8D:78:B7:1C:52:2B:EE:A8:F6:12:9A:25:53:C0:FF:8E:4D:A4
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:09:f8:fc:b8:3c:bd:a5:b4:89:44:dc:d6:45:bd:66:8a:70:
5d:5e:e0:0e:51:da:e0:70:ca:26:be:2a:55:60:61:76:b9:7c:
0a:dd:92:95:0a:6e:ab:84:bc:18:6b:5a:3a:af:06:d4:f3:29:
a5:0b:21:7d:d9:d3:a5:0e:c7:46:7a:04:96:09:e2:48:3a:94:
16:01:cf:79:e6:72:7c:d8:00:53:fa:89:92:a7:23:6f:2f:8b:
30:ae:ab:24:fd:8c:1e:2c:42:74:7d:c3:51:59:6a:9b:8f:0c:
e8:25:47:ac:c4:67:7b:d0:0d:f8:29:7d:50:eb:8c:bc:95:e0:
d0:35:ef:ab:d4:0c:81:7e:ad:11:ec:e5:82:46:1f:27:50:8e:
f8:7a:4f:34:af:1c:81:79:d0:7e:ac:58:78:91:bd:93:59:14:
87:65:39:f4:a4:75:b1:32:6e:65:e7:f2:d4:7a:a3:ca:b3:a2:
54:6e:a2:df:cd:ad:0e:28:31:4b:72:c7:48:ee:52:d4:4d:51:
5d:5c:d8:4b:21:b2:c9:1f:fb:eb:4f:f1:6c:5e:7d:17:6d:5d:
85:0e:ea:97:16:5b:b6:55:c7:a2:ba:1e:5e:69:6d:41:c5:5f:
81:88:07:8d:90:78:d3:80:b0:0d:e7:a3:9b:f4:b9:79:0b:42:
4d:19:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:47:25 2026 by rpki-client