Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: DyPJEzLDmOWi4JlBKu/EKaWXRYrYBfbgHK98fQEJKXE=
Subject key identifier: 76:A6:26:13:25:89:D6:29:EC:1F:9C:D7:48:7A:BB:7F:09:22:39:10
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019D28168980DD5A21CC4738CBB511DBFD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 15B2
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: QKrQmYq1CN1DqRJOcTZnXVqdpasLH+p2yhT525ptLJE=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:89:80:dd:5a:21:cc:47:38:cb:b5:11:db:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=76a626132589d629ec1f9cd7487abb7f09223910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:4f:81:96:ad:06:59:1c:72:2e:a6:d8:c0:
6e:ca:d4:88:82:af:a3:4b:3b:e8:5a:7b:85:22:64:
d4:c0:a5:e3:92:15:2e:bd:57:8a:48:ba:5d:09:de:
2a:34:96:fc:0b:43:79:be:39:fa:01:76:ff:a6:54:
bd:74:ab:12:e4:1f:08:0a:64:5d:3e:67:6e:04:87:
b8:73:36:51:3b:fa:b5:26:cc:b2:8b:ce:f1:b4:6d:
16:36:9d:5c:ab:65:a5:09:90:5a:f4:93:3f:e2:43:
7f:b9:80:9e:45:04:56:1f:a7:3d:28:e3:c5:9c:51:
c9:3f:73:5d:1b:b2:1b:48:67:37:67:6a:f6:65:09:
a4:91:da:ec:2c:cf:f9:51:3d:8f:c6:79:a8:b4:de:
00:a8:bf:ed:0c:f3:c6:95:93:39:23:df:d0:60:a2:
29:6a:9b:ba:02:f4:df:d2:c9:ff:65:f3:31:7f:54:
c3:9f:ed:5c:e3:0b:8a:a9:4b:99:b5:c7:da:92:3f:
53:86:cd:97:ab:23:c6:12:3d:02:1e:29:da:f1:fc:
ab:7a:50:d6:2b:16:76:99:73:b3:cc:af:04:86:ce:
94:eb:b7:94:48:01:09:5c:1f:20:6a:82:5f:99:09:
ea:97:f1:9f:29:84:55:c7:47:5f:e7:9f:3a:6e:d9:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:26:13:25:89:D6:29:EC:1F:9C:D7:48:7A:BB:7F:09:22:39:10
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:7e:bc:46:3d:d0:66:1a:80:2a:0a:99:29:93:24:16:82:
3d:38:b3:c7:6b:74:29:58:5e:05:80:a1:43:2f:eb:a0:8e:74:
2a:7e:78:37:b5:8e:49:14:2b:99:fa:93:73:0e:fd:ef:f1:d2:
c5:32:ba:ce:48:d1:48:82:71:3e:73:03:2d:c1:37:49:02:58:
7c:b1:4d:e0:23:17:a5:e1:43:6d:a4:92:7b:8f:9a:81:e9:6b:
ea:55:58:95:ba:10:dd:4e:34:2e:21:86:c6:17:b5:fd:53:63:
d0:18:60:65:6e:7e:9b:20:a4:4e:fb:94:64:49:d9:31:a4:4a:
5c:56:4f:6e:89:b3:df:e6:aa:61:3b:12:89:79:82:3a:9a:d8:
d3:ad:32:f7:0f:e1:f6:62:a2:eb:a6:65:84:45:d4:d7:8f:c0:
e5:8a:ce:29:11:c3:a4:2b:99:60:d9:ee:c4:ec:85:09:58:0c:
a9:6d:ba:6a:5e:b1:10:5b:e9:a2:f9:cb:d5:85:8f:42:94:fc:
5f:36:90:13:f6:27:9b:8d:bf:c5:cf:a5:c7:1d:8e:35:90:79:
57:bf:84:dd:8d:4a:b9:a4:05:82:32:18:7e:53:cf:5d:98:d0:
48:32:b6:16:6a:4c:ad:2d:86:ee:a9:0e:5d:eb:76:0f:ca:42:
07:91:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:41 2026 by rpki-client