Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: KeVM64pPP2qWz1w5VQ8p7au2EnJqE15x+gGF6W5pI1M=
Subject key identifier: 1A:56:31:6D:BA:9A:4A:C0:86:4E:3A:26:22:54:27:A6:15:54:7B:97
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019D273B0CC460EDAFBC74700EC6BD3AD72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 1470
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: HM+rqwP5ZLoA0DJyB6PgyqB+ackHogmk4YlRynRdm/k=)
2: GJOoU-343CEzQJKM7Tgkkopjnfc.roa (hash: K8/YlGCuLAIO9UgXpY3V1KHiQod3PTuMQD73e0fNF1U=)
3: yctCqdF2GcTXWy0WmDYHPzl-WtQ.roa (hash: FQFO1j2YPQTxKyeArPzCOMAvtASBLvUVTye3eM/YxHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0c:c4:60:ed:af:bc:74:70:0e:c6:bd:3a:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=1a56316dba9a4ac0864e3a26225427a615547b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:55:6b:cf:bd:e5:7a:79:fa:31:e9:4d:25:
fc:40:bf:4a:5c:98:7c:67:00:b6:fa:9a:f6:95:db:
32:66:89:da:b9:79:43:ff:a3:f1:95:6a:d4:00:db:
8b:81:2a:e0:76:d0:e3:ec:1e:be:a6:ca:60:8b:3e:
37:3a:19:25:66:d1:dd:32:f8:61:36:bf:ea:94:9e:
74:52:5c:fa:b1:8d:c3:fe:1c:15:7e:35:0c:25:b5:
c7:12:3b:9b:3a:d6:c1:10:7e:15:98:41:47:40:0d:
40:60:b6:44:c3:7f:1d:ef:c1:1f:db:a7:11:3d:2f:
f6:d1:b1:39:cd:10:d2:63:0d:30:2f:f0:7d:3b:49:
0e:06:c2:75:b3:34:49:c4:8f:e1:32:7d:ae:13:42:
77:cd:df:50:12:0b:f1:c3:24:3c:11:e9:52:f5:1c:
9a:56:76:de:1b:da:00:2c:19:1b:2b:21:00:0b:21:
35:65:d9:e6:a6:3b:c7:1e:aa:00:a4:a7:02:6e:18:
07:1e:cf:56:ce:4e:2b:a3:9e:7e:e8:0a:8c:23:10:
6a:fe:e8:df:14:3d:03:d8:02:5c:fa:a8:af:ff:ea:
a5:c9:22:8d:72:5f:e6:58:37:a2:b8:e7:e5:f7:a3:
a3:f5:6c:90:d5:b6:b5:49:52:c6:fa:d3:13:4b:c1:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:31:6D:BA:9A:4A:C0:86:4E:3A:26:22:54:27:A6:15:54:7B:97
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:70:73:0b:99:34:48:36:ea:a9:e7:b8:f9:61:6c:20:09:
5c:5b:a4:1e:d8:48:cd:98:2d:36:8c:b1:bc:47:24:d1:b5:3d:
e1:38:05:5f:d5:bc:10:ab:c2:7e:9e:76:48:80:9f:b3:b4:95:
e4:bf:0b:ef:7f:db:31:f1:56:32:cf:fa:f5:39:4f:21:76:a9:
53:e8:9a:dc:44:0a:af:5e:63:fa:ca:6d:de:31:04:46:02:c5:
c9:90:d5:5f:95:e9:b1:13:6c:6c:c8:3b:b2:d3:9c:2b:ee:4f:
ef:72:a7:1e:2b:0c:d7:a8:4a:03:de:c7:d5:08:8f:80:b3:de:
d5:d8:75:f1:44:9b:5f:45:ea:3a:65:15:aa:2a:8d:b3:3d:48:
23:70:bb:a2:d7:c5:c8:f3:9f:8f:6c:f6:15:b1:42:5c:62:19:
2d:10:e7:f9:13:da:9b:8f:27:cd:75:0e:af:de:5b:08:77:7b:
7e:5a:f5:91:0b:a4:13:2f:26:5a:e0:2b:3c:e2:48:d4:ae:9e:
f2:f3:be:ae:07:7a:98:ad:0b:9c:b0:fc:83:fc:11:29:78:7a:
3a:a9:95:ff:93:d3:a4:1f:61:2f:46:ad:52:62:89:d7:44:5e:
7a:1b:c5:cf:1f:be:c9:a1:12:1c:73:30:df:c4:ba:11:b7:50:
16:82:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:38 2026 by rpki-client