Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: qq2vzElIJoOWvTn7tyufpwoNTWnxr+5Kk3GAZUhL0mI=
Subject key identifier: E0:3A:58:92:F7:F9:44:A3:38:74:30:63:B8:48:C0:F5:C4:14:F4:19
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019D27046A88A9F337F258321F40F1C1B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1490
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: G4izIBd6u0pAhFoipTOLc6uazMX+kfiRBYE6rYefkZc=)
2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6a:88:a9:f3:37:f2:58:32:1f:40:f1:c1:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=e03a5892f7f944a338743063b848c0f5c414f419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:92:f6:78:b3:89:9d:fd:09:ca:00:b5:79:
d6:3e:a0:ad:66:4b:2c:d5:cd:d6:6d:5b:33:ae:04:
26:73:10:d5:ed:13:05:af:25:a6:7a:dd:97:62:86:
e6:67:18:9a:7c:85:78:14:8f:af:4d:59:2e:fd:81:
63:3d:8a:49:92:08:83:a1:11:7c:74:ce:eb:02:17:
41:cc:dc:ba:2b:93:ef:3e:f1:14:5d:24:00:3f:39:
d7:cd:ce:4c:5d:df:de:a5:4e:4a:e4:9b:0b:27:4d:
d8:b2:19:c0:c6:7d:7b:34:18:53:74:c8:ea:13:18:
40:61:4c:18:8d:6b:89:69:a6:07:3b:08:ba:2f:db:
4a:2a:00:24:0f:2c:2a:7b:33:cd:61:9a:e0:e6:ac:
18:ff:dc:07:da:6e:da:61:9f:74:41:5f:22:7d:33:
3a:10:b2:c8:43:ce:1a:36:93:2f:67:cf:ae:8a:da:
cd:d0:c7:2e:6e:3b:48:ec:c7:d1:2a:97:f1:4b:6f:
93:6c:9c:c8:6a:6a:a0:97:09:5b:ce:00:ff:a8:cd:
9c:fa:74:3e:eb:01:60:6e:05:ef:88:0e:61:eb:58:
8c:05:54:b2:0e:2a:68:de:7c:9f:75:50:5c:3b:5d:
34:7c:67:ff:0b:40:40:f1:6e:f0:de:48:99:7c:c5:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3A:58:92:F7:F9:44:A3:38:74:30:63:B8:48:C0:F5:C4:14:F4:19
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:73:43:82:6a:8d:a5:ab:3f:05:bc:d3:c7:f6:75:7a:77:8a:
7e:89:80:4f:ee:8d:a1:77:d6:18:5b:13:9c:c7:ae:fe:14:10:
c9:0a:19:df:57:c9:6a:a5:98:59:f8:3a:64:dd:9b:39:47:c2:
f5:d2:80:35:f0:18:ab:20:0b:15:fd:ac:8e:25:6d:92:ab:90:
24:a1:1a:b5:c0:2a:ee:07:d3:ea:75:ca:7b:43:36:82:b4:ff:
33:c0:f3:4e:74:0c:09:97:64:eb:80:a2:09:d0:cf:f2:a5:74:
62:57:5d:59:6e:ef:39:5f:9e:82:d0:7b:ad:29:6b:04:13:fd:
6d:6a:93:b7:3c:28:e9:db:70:b0:1e:48:e1:f4:6e:e1:7c:a5:
4f:fc:82:4a:e6:49:bd:91:e7:28:92:96:7c:a7:7b:e9:a2:a3:
c8:a4:b6:9b:fd:69:58:cc:49:9a:9d:33:8f:c4:43:73:ac:95:
31:bf:ab:0b:86:8c:7e:da:3a:bc:76:32:c9:6e:ec:e0:63:65:
45:24:97:ac:02:5c:ad:aa:64:b6:d3:c5:31:cb:62:6e:14:12:
66:76:30:a6:31:eb:3b:ce:1e:95:3a:64:ee:47:c2:96:be:9e:
15:6a:89:eb:d0:14:98:34:4f:d3:95:b9:18:ed:14:71:a0:f7:
c3:98:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:24 2026 by rpki-client