Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: w3FHrmwO0X8oczVO16Y+1CtOPwDbMlF9eU7YkMHiM+0=
Subject key identifier: 1B:D0:42:03:57:55:94:E1:19:DB:B6:FA:7F:D1:67:81:DB:38:42:91
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019D2997185E3D16EEAFC1F1E1C2EFED820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 17B8
Signing time: Thu 26 Mar 2026 10:01:01 +0000
Manifest this update: Thu 26 Mar 2026 10:01:01 +0000
Manifest next update: Fri 27 Mar 2026 10:01:01 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: WiyySXWixJLYz6PmxfvXe0vfOZNjRgnj9ufxz6WimFw=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:18:5e:3d:16:ee:af:c1:f1:e1:c2:ef:ed:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Mar 26 10:01:01 2026 GMT
Not After : Mar 27 10:01:01 2026 GMT
Subject: CN=1bd04203575594e119dbb6fa7fd16781db384291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:50:2c:4a:e3:d0:17:5f:68:d7:78:ed:ab:
a3:e4:d9:e0:17:2d:6d:37:50:96:2f:e6:1f:78:e1:
db:9c:79:10:e1:7b:a6:f5:61:aa:e9:be:cb:0a:24:
46:c6:c5:42:25:1b:dd:71:fc:97:59:35:66:fb:35:
85:f5:82:20:bf:3b:4a:26:08:3b:13:11:e5:a4:d9:
f7:7a:24:49:ad:82:3b:26:1d:2e:3f:d4:2b:fd:2c:
85:50:9b:4d:4b:14:aa:61:74:c8:f5:2b:d1:58:37:
9b:45:85:f3:b0:87:27:1b:ba:cc:61:e2:42:e4:f7:
04:7e:67:97:85:26:f4:38:62:48:58:65:5d:eb:0f:
fd:81:6d:39:14:92:24:71:32:fe:de:6d:10:40:7c:
b1:14:e1:ba:f2:a4:3f:8a:ad:ac:54:a9:01:f8:aa:
cd:97:57:e3:87:8f:a5:99:92:f9:5d:44:41:9e:31:
19:65:ad:87:df:d9:bc:92:46:68:8a:10:bb:99:28:
22:c2:ce:7f:2c:93:4a:02:ae:ee:66:5b:7f:1b:77:
55:a7:b8:e6:1c:e9:45:6c:4a:a4:c0:4c:ef:78:27:
67:42:90:11:0d:51:4d:f9:de:e6:0e:00:82:04:71:
f2:5a:4a:e0:a8:47:0b:b4:12:c0:c0:94:e0:a5:f4:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:42:03:57:55:94:E1:19:DB:B6:FA:7F:D1:67:81:DB:38:42:91
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:d0:61:3e:71:09:61:8e:64:76:d3:bd:a2:22:90:e6:1a:
0a:9c:c4:d0:bc:bc:9c:c7:65:3e:54:38:26:1f:f1:59:a8:27:
7f:a1:da:20:55:f2:2e:ea:bd:45:b1:12:24:ad:23:5a:5a:a7:
dd:72:54:99:00:30:7d:17:03:8a:49:98:1d:2a:43:30:90:bb:
96:b0:de:4c:b7:bc:24:25:f9:9d:38:00:08:47:40:b0:f1:5a:
50:65:57:8f:54:d4:b7:99:e3:e9:42:40:5c:98:7f:fa:2d:92:
a2:f6:09:ee:64:18:db:c3:dc:41:c6:a5:cc:ac:e4:9f:94:cf:
b8:ac:c4:76:d8:cf:be:f6:3b:bb:67:41:55:a4:83:57:18:e1:
bd:f8:f3:2c:2e:34:57:d4:b7:04:50:6c:d7:3f:37:0b:e2:34:
ce:2b:9b:a7:7d:2c:2d:8a:8f:59:cb:e6:24:8b:78:88:4b:42:
67:88:0b:36:88:72:d6:c7:ec:1e:77:d3:51:37:0a:09:81:7f:
4f:ca:3e:a1:83:5f:2d:a8:36:62:81:06:71:6c:1b:63:4d:84:
9a:8a:29:0a:c6:86:dd:f6:da:cc:85:d6:af:63:04:c0:f9:af:
31:22:f9:ec:92:a1:bc:f4:18:ca:ad:01:f1:9c:92:d3:0c:ba:
0a:93:ef:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxhePRbur8Hx4cLv7YILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz
NjY3NzMwHhcNMjYwMzI2MTAwMTAxWhcNMjYwMzI3MTAwMTAxWjAzMTEwLwYDVQQD
EygxYmQwNDIwMzU3NTU5NGUxMTlkYmI2ZmE3ZmQxNjc4MWRiMzg0MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O9QLErj0BdfaNd47auj5NngFy1t
N1CWL+YfeOHbnHkQ4Xum9WGq6b7LCiRGxsVCJRvdcfyXWTVm+zWF9YIgvztKJgg7
ExHlpNn3eiRJrYI7Jh0uP9Qr/SyFUJtNSxSqYXTI9SvRWDebRYXzsIcnG7rMYeJC
5PcEfmeXhSb0OGJIWGVd6w/9gW05FJIkcTL+3m0QQHyxFOG68qQ/iq2sVKkB+KrN
l1fjh4+lmZL5XURBnjEZZa2H39m8kkZoihC7mSgiws5/LJNKAq7uZlt/G3dVp7jm
HOlFbEqkwEzveCdnQpARDVFN+d7mDgCCBHHyWkrgqEcLtBLAwJTgpfRoIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvQQgNXVZThGdu2+n/RZ4HbOEKRMB8GA1UdIwQY
MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt
MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh
LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHvQYT5x
CWGOZHbTvaIikOYaCpzE0Ly8nMdlPlQ4Jh/xWagnf6HaIFXyLuq9RbESJK0jWlqn
3XJUmQAwfRcDikmYHSpDMJC7lrDeTLe8JCX5nTgACEdAsPFaUGVXj1TUt5nj6UJA
XJh/+i2SovYJ7mQY28PcQcalzKzkn5TPuKzEdtjPvvY7u2dBVaSDVxjhvfjzLC40
V9S3BFBs1z83C+I0ziubp30sLYqPWcvmJIt4iEtCZ4gLNohy1sfsHnfTUTcKCYF/
T8o+oYNfLag2YoEGcWwbY02EmoopCsaG3fbazIXWr2MEwPmvMSL57JKhvPQYyq0B
8ZyS0wy6CpPvwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:54 2026 by rpki-client