Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: KxQggK7nllFUkwMDJz1vGBGp/JgnXlFy8ntjd7YYUZ8=
Subject key identifier: AF:E0:50:EF:0F:FE:FA:C5:69:11:60:F5:A9:01:7E:E2:4F:1D:2B:5D
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019D2A3BED0C87385E592BFDB16757025FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 1372
Signing time: Thu 26 Mar 2026 13:01:03 +0000
Manifest this update: Thu 26 Mar 2026 13:01:03 +0000
Manifest next update: Fri 27 Mar 2026 13:01:03 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: uZ0tkHMqyjY4vXUdb3gaunOHAj2lUQBuHWDJSuDmSO0=)
2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ed:0c:87:38:5e:59:2b:fd:b1:67:57:02:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Mar 26 13:01:03 2026 GMT
Not After : Mar 27 13:01:03 2026 GMT
Subject: CN=afe050ef0ffefac5691160f5a9017ee24f1d2b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:90:94:06:fc:48:55:e0:0d:dd:45:0b:9b:
db:91:9e:c9:16:61:0d:ae:ed:7f:6e:4f:28:5a:35:
eb:98:0c:56:2b:8e:a8:95:93:cb:05:35:91:a3:50:
55:38:e4:03:8a:ca:8a:7b:2b:b1:c1:13:9d:08:bb:
6e:fc:54:01:08:b7:6e:dc:01:26:d4:78:23:c7:a4:
3e:7a:2c:83:a5:eb:a1:06:b8:85:22:dd:7b:8b:b0:
f8:e6:8d:dd:43:57:df:4d:7b:15:42:48:65:62:e5:
9c:7d:0a:fd:83:96:49:0e:95:9e:69:ac:f9:68:20:
9e:97:4e:cc:8e:45:6d:2e:94:75:26:4f:4b:bf:66:
c2:ea:bb:0f:79:67:4a:46:f5:bc:8c:7d:f1:d1:04:
d7:97:bd:e0:ca:70:6b:ed:b5:03:07:5a:3d:d3:24:
1e:85:f8:07:b8:a8:6d:64:c1:86:9a:5e:36:6b:a0:
3b:b0:b8:cf:af:0d:b1:c7:a8:83:5c:2a:05:77:a9:
c6:33:28:99:ad:c5:9d:14:e1:59:b7:0d:65:cb:7c:
aa:61:f2:20:f8:b0:ad:87:c5:b4:fd:f6:cd:9d:0c:
dd:95:98:c0:f4:3e:55:1f:55:7a:94:2c:4b:e6:28:
c8:df:57:95:17:44:ad:70:cb:4f:1e:be:8b:74:7f:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E0:50:EF:0F:FE:FA:C5:69:11:60:F5:A9:01:7E:E2:4F:1D:2B:5D
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:16:4f:1b:60:e6:89:bc:2a:99:13:bb:90:a9:3b:37:52:
ed:8c:3a:89:07:c2:72:54:b9:0a:b2:8b:29:f2:52:6d:20:b9:
16:bd:d9:f3:23:4f:2a:ad:7b:0d:da:68:f8:f7:7c:bb:e7:29:
c2:f4:b8:db:47:52:54:a8:fa:86:9d:5c:15:56:38:b3:ac:d2:
44:1c:24:53:fb:28:df:22:1d:47:08:a2:f6:6b:a6:70:20:5e:
33:de:d3:8d:4f:3b:91:9a:ae:0f:db:58:27:22:63:53:d2:89:
a0:56:6d:29:82:a7:d1:b8:95:8f:4f:e4:33:21:80:04:aa:7f:
5a:d8:b5:ac:ed:52:39:43:9e:77:6a:03:0f:30:53:fa:ca:61:
29:c9:c4:50:1a:22:28:bf:32:18:64:88:a8:74:d3:7d:54:9a:
51:8d:94:77:ed:ad:e8:8d:49:12:2a:a5:87:5f:d7:e5:3b:0b:
3d:8a:1c:cf:39:4d:18:f7:6b:7b:58:f3:36:9c:9f:7c:d9:be:
6a:db:e1:7f:92:9e:33:2d:2d:da:24:9b:10:a4:6f:1d:a9:96:
1d:cc:0f:40:3f:44:88:39:c3:4c:8a:50:70:90:ea:ad:d7:29:
c1:07:0e:6a:97:8d:0c:b8:bb:71:54:61:c5:bf:da:15:f3:8e:
34:61:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:44 2026 by rpki-client