
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: FLM/zvg2aTrhE0peSyepBaZ4E/mpzc5+n/9ywuBInB4=
Subject key identifier: 2F:97:A5:58:3A:22:AE:21:30:30:AA:DD:B0:F5:58:81:BE:6F:A1:45
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 019F9090D103696BCD607D696656BC9D3A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 195B
Signing time: Thu 23 Jul 2026 20:00:37 +0000
Manifest this update: Thu 23 Jul 2026 20:00:37 +0000
Manifest next update: Fri 24 Jul 2026 20:00:37 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: rJg6IYU/gBOx7UeuVQBGbRv0nVxGo1F8SI8Wssm/Qd8=)
2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d1:03:69:6b:cd:60:7d:69:66:56:bc:9d:3a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Jul 23 20:00:37 2026 GMT
Not After : Jul 24 20:00:37 2026 GMT
Subject: CN=2f97a5583a22ae213030aaddb0f55881be6fa145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:3a:45:eb:51:60:09:f0:e0:23:0f:28:1c:
9b:2d:0d:03:11:74:68:5f:28:0e:4a:e5:b5:9e:fd:
d3:87:3b:b0:bd:40:40:67:b5:49:f2:28:7e:4b:ab:
58:63:7e:b2:22:9b:98:e6:4c:86:fe:a4:52:aa:a7:
95:b5:5f:45:b6:f8:00:a6:77:0c:5d:4e:fc:3e:cd:
39:63:50:32:f2:7b:a4:2d:26:ff:65:67:c3:e7:38:
b2:3e:6f:39:78:17:ec:57:e9:cb:a4:7a:f9:60:7b:
dc:c3:61:3b:eb:37:b1:4c:1a:13:4e:26:bb:26:78:
a4:ea:10:5f:f9:3f:01:4a:5d:95:df:af:ed:e6:50:
2a:7a:27:ea:8d:b5:17:78:32:2e:65:b1:0b:83:1d:
86:8b:64:9b:f9:da:ff:90:a1:80:f6:ab:45:a8:d7:
46:34:0e:88:0d:13:5b:55:27:8a:58:5c:30:5b:94:
a7:65:cb:19:f2:83:ee:78:69:de:1f:fb:25:84:47:
29:b0:4f:00:38:b9:c1:7c:53:52:da:32:21:cd:77:
24:d7:8b:43:08:09:e7:53:70:6c:da:ab:4c:97:c4:
b7:bd:49:a3:c3:98:3a:42:8e:e8:09:d4:f7:e5:a4:
9d:f8:e7:a1:af:e7:9c:1d:d9:82:6a:67:7c:07:af:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:A5:58:3A:22:AE:21:30:30:AA:DD:B0:F5:58:81:BE:6F:A1:45
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:14:76:ef:a8:42:1b:1d:5b:c6:64:f8:b2:0b:5f:f6:5d:92:
f9:14:0f:ca:ae:9b:2f:a0:77:04:c6:ef:de:7e:97:bf:44:03:
ba:a8:34:25:f1:27:8c:c0:4d:c8:be:91:f9:8a:c8:a1:12:ab:
37:dc:ac:07:3b:1f:63:b6:dc:49:77:a5:57:28:c3:a4:ab:d6:
86:e6:5d:24:b9:3b:2f:95:34:50:88:7f:97:b8:9f:b1:c5:00:
7b:a3:86:a2:0c:d6:39:5f:14:af:a5:0a:c4:67:2d:1f:1e:a8:
91:11:29:c1:a9:c4:40:35:8f:7c:0f:80:5e:25:8f:90:6c:fc:
9d:0b:90:7c:61:09:4e:da:9d:21:80:a4:1c:32:70:52:1d:14:
ac:ac:79:4f:6e:55:7b:60:ab:1b:27:ae:69:5f:05:9e:20:78:
7f:5c:8b:88:da:46:58:28:59:2d:04:d5:bf:f3:a0:ba:cc:83:
49:a9:41:d7:e1:23:b5:6f:1e:43:ef:48:3b:44:44:f4:c3:16:
95:75:15:0d:1e:f8:ca:08:61:53:bf:f8:fd:d7:2b:2f:fc:a8:
1e:16:6b:e0:17:6e:32:70:91:7a:33:d1:fc:36:1a:6a:17:16:
dd:ff:52:95:3b:3e:91:68:57:5b:1d:d7:c3:4c:1a:4d:ae:a2:
3b:ab:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:22 2026 by rpki-client