Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: zHz/bixDwqv2qPVy0gyuU/Nu9Oo2/47vWn2QU8E5SAQ=
Subject key identifier: 92:13:14:1C:32:39:43:FB:0B:0E:AC:79:BB:72:56:C6:B7:D2:18:73
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01A0F75697CC3A11B5B333960B5E089F39C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 17AB
Signing time: Thu 01 Oct 2026 12:00:42 +0000
Manifest this update: Thu 01 Oct 2026 12:00:42 +0000
Manifest next update: Fri 02 Oct 2026 12:00:42 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: Kt06r7tP2jijH7rqasD4tUbyjU4fsnAOt3Akczt6VZo=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:56:97:cc:3a:11:b5:b3:33:96:0b:5e:08:9f:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Oct 1 12:00:42 2026 GMT
Not After : Oct 2 12:00:42 2026 GMT
Subject: CN=9213141c323943fb0b0eac79bb7256c6b7d21873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:fd:ec:0c:0c:05:91:9c:ff:ee:19:7d:fa:
09:89:bc:b7:02:dd:28:25:c4:09:b1:74:42:e2:56:
a4:85:31:c7:95:06:c4:7b:06:ee:cc:0a:e9:4a:24:
b5:78:cc:d9:49:47:1a:ec:14:75:54:95:86:fc:8d:
32:88:81:a9:61:e0:13:7f:c8:c7:68:2e:4c:c1:9c:
ce:af:d4:50:bb:92:62:9b:0b:f7:ee:37:80:23:3f:
ef:8e:6a:13:96:d1:52:58:e0:87:e7:3b:4d:ee:06:
1a:2f:f1:44:54:55:c9:c6:36:28:9f:8d:47:fc:e1:
da:22:4a:f9:61:7b:a7:2d:ff:dc:02:b6:6f:6e:2f:
53:9f:3e:4f:49:30:be:83:c4:81:aa:25:58:24:f6:
06:73:85:d9:08:37:cc:8d:43:bf:b9:fe:9d:b2:a7:
09:cc:2a:7e:4e:ce:16:f9:d8:66:57:a7:a1:53:0a:
4e:9b:63:61:16:48:48:a6:8e:df:ee:3e:6f:06:7f:
f9:e5:8e:5d:25:34:8f:12:69:6a:9c:9f:80:2e:29:
7f:1e:da:f1:ec:b7:ab:6b:2f:d6:b5:ac:93:71:7b:
85:09:ec:b1:9a:d6:cf:87:63:4b:bd:0d:67:52:b2:
18:d0:3b:23:25:ba:4b:07:ae:f4:a4:e4:75:47:b0:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:14:1C:32:39:43:FB:0B:0E:AC:79:BB:72:56:C6:B7:D2:18:73
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:5e:fd:49:c4:2c:76:a2:49:4c:3d:65:d8:34:fb:ed:66:
08:54:25:ab:b2:6b:1c:90:a7:09:94:db:70:94:a7:ee:f9:44:
03:60:5c:03:25:8c:31:5f:ad:da:02:ef:f1:45:33:e2:54:79:
6a:ee:2c:ca:4b:32:89:1b:cd:b7:d7:28:04:e9:43:3a:a8:30:
18:52:20:26:f9:7e:be:e6:b9:18:ea:e8:93:25:5a:d0:0b:27:
2d:55:c1:8b:4d:b5:a9:4f:67:d3:ce:3d:16:07:c0:37:e4:e7:
0a:bc:cb:75:a4:a4:fc:d3:3e:e1:0b:21:83:68:78:84:06:c7:
ca:59:27:dd:43:30:0e:70:41:26:e6:f9:de:e9:a2:11:3c:81:
fb:d8:49:d3:52:52:ea:d9:af:26:50:db:02:5d:3b:b1:6e:c0:
46:7b:42:9c:1b:40:f6:d5:de:27:75:b6:f8:56:28:dd:5b:07:
70:7f:c9:1d:e7:ef:e7:c1:35:b9:f3:e0:fb:02:1f:88:ab:3d:
bd:2c:d6:33:b0:9f:bc:75:e0:cd:3a:30:9e:99:e7:cf:bb:f3:
df:fc:bf:63:a2:d4:b8:53:78:3d:17:3e:4b:a6:34:fb:5c:f1:
c5:d3:74:4e:2d:d0:a9:6e:55:b5:4f:8c:12:8d:90:0b:b4:3c:
ba:75:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:20:00 2026 by rpki-client