
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: sX5gIQCmLhzlwR4haftysmT/ZPOd8ro/D/tJoFX4mEI=
Subject key identifier: 00:1E:93:CB:A0:48:DC:AA:84:D7:D6:70:EB:25:26:D3:DE:D9:57:EB
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 01A0C9D957ED216914D3FAAAE8953FD8FA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1672
Signing time: Tue 22 Sep 2026 16:00:59 +0000
Manifest this update: Tue 22 Sep 2026 16:00:59 +0000
Manifest next update: Wed 23 Sep 2026 16:00:59 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: bWSqHsETF40V63kO3KwvqDym0QxlrmypjGIodFOle/g=)
2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:57:ed:21:69:14:d3:fa:aa:e8:95:3f:d8:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Sep 22 16:00:59 2026 GMT
Not After : Sep 23 16:00:59 2026 GMT
Subject: CN=001e93cba048dcaa84d7d670eb2526d3ded957eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:a5:49:a9:94:71:38:1e:14:bf:e8:dc:5a:
87:64:8e:66:cc:19:9f:90:34:ba:0c:22:a9:f2:e8:
dd:0f:94:de:6a:b8:d2:d6:9b:ea:ff:f2:9a:9b:39:
22:b1:e7:a5:ce:a6:fa:45:fa:7e:d4:0e:23:4f:f1:
bd:69:36:24:4d:7c:44:e9:9a:16:7f:92:c8:c6:e2:
cb:4d:d7:81:e2:98:9f:55:be:b4:d4:f0:30:13:56:
e8:dd:59:c2:01:8e:6c:0c:1b:44:78:5d:eb:00:97:
6b:27:f0:ae:15:07:ad:96:a0:ac:f9:4a:c3:e4:e0:
e2:55:b7:ff:96:84:c5:01:93:25:ff:09:9c:db:0a:
72:09:88:f3:f2:00:4c:48:48:fb:18:d7:0f:36:33:
07:0b:be:8e:a6:8e:ec:be:6f:69:48:74:c4:8d:b5:
d5:99:0b:73:b1:19:90:eb:a0:8b:bd:31:9b:b5:84:
2f:a2:a3:16:53:df:d6:4a:19:79:f2:c4:4c:01:92:
64:ab:f3:00:58:2f:69:df:22:f4:bf:8e:7d:94:61:
fe:a7:31:05:73:41:1d:69:ab:96:e6:55:4e:9b:e9:
52:7c:f4:05:4a:3a:8b:81:d0:7d:74:e3:e4:74:ed:
18:2d:7e:12:1e:58:f8:4d:aa:b3:0f:f9:92:89:41:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:93:CB:A0:48:DC:AA:84:D7:D6:70:EB:25:26:D3:DE:D9:57:EB
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:64:9d:61:77:43:ce:01:f4:ba:b5:a1:c1:1a:3e:84:38:51:
dd:ea:48:cd:87:40:da:0a:59:65:43:96:09:6f:53:17:b0:97:
e4:16:5f:31:87:7b:5d:59:8a:37:48:f9:9e:33:9a:1f:a0:dd:
77:fd:a6:7d:4b:c7:8d:de:74:ac:5a:de:bd:87:77:ba:01:7e:
db:53:3f:c9:59:e9:ca:be:7a:5f:0f:08:8c:81:b8:ec:a6:df:
77:b7:c8:eb:f1:ad:f0:a2:61:bb:ef:93:0d:55:37:67:bf:5a:
b7:65:e8:02:e4:89:35:7f:29:04:08:12:20:c6:4e:97:c0:20:
0e:2d:48:4d:b2:d6:97:76:c2:7e:6d:c2:7b:72:5c:d1:1a:d0:
dd:b5:31:f9:e3:52:a4:3d:99:ae:31:e6:62:69:76:25:a2:1c:
23:9b:9e:86:3b:df:f9:09:9c:7d:8a:7a:9a:89:93:c8:38:5d:
13:e6:c4:87:0d:06:c4:c1:50:20:50:99:ef:8b:4a:dc:c2:ac:
44:83:79:a2:e8:95:38:18:57:91:6f:94:4e:70:40:dc:8e:ae:
2c:01:34:bf:33:5d:ca:98:57:eb:eb:c6:b6:5b:6a:4d:67:2d:
da:60:93:5d:c4:51:f0:9e:99:ef:b9:76:5e:8f:5b:64:95:ba:
0e:ca:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:26:58 2026 by rpki-client