Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: t6npovMPVzynYWaSoH7M9VTqkqy7caOKMrkDm4k0ED0=
Subject key identifier: 2E:36:BF:43:7C:F0:28:C3:48:30:FD:C1:61:24:9B:9E:C8:64:16:17
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019D345171B64A2803FD3D05E80FBA1F8066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0C9C
Signing time: Sat 28 Mar 2026 12:00:45 +0000
Manifest this update: Sat 28 Mar 2026 12:00:45 +0000
Manifest next update: Sun 29 Mar 2026 12:00:45 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: LngqA+aso7kvLU2FYDToFa+NPtya/xAzRTVf5bZBmgE=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:71:b6:4a:28:03:fd:3d:05:e8:0f:ba:1f:80:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Mar 28 12:00:45 2026 GMT
Not After : Mar 29 12:00:45 2026 GMT
Subject: CN=2e36bf437cf028c34830fdc161249b9ec8641617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:d2:05:f8:bd:5d:a0:d2:15:f5:2b:56:db:
5d:36:fc:ec:da:c7:b9:b9:00:22:45:52:b3:c9:06:
aa:ea:cc:90:3b:da:49:9c:d3:79:d4:f6:88:49:60:
ce:53:03:d6:79:b6:2c:bd:6c:86:82:c3:cd:50:69:
70:f7:38:f2:52:78:67:6f:e7:77:b6:40:74:e6:0b:
00:ae:7c:5b:d5:41:39:ed:71:16:90:07:ee:99:f2:
3a:6b:22:50:32:c2:ee:04:f0:23:af:ba:ef:23:65:
94:9e:d3:03:88:99:8a:79:43:9d:cd:43:d4:2b:f2:
a6:53:fd:5b:3e:5c:8b:1b:01:d5:cb:bf:ff:54:87:
01:92:bb:13:d5:20:b0:ac:90:e3:76:97:af:b7:bd:
06:b9:ee:6d:e7:9b:2f:31:e2:fa:a9:13:8d:48:81:
11:ef:db:b2:af:db:55:09:06:1c:b5:59:c9:6b:74:
17:3d:00:0b:ca:a3:9e:3a:01:47:2e:d1:04:81:b4:
c7:fb:c8:bf:d4:6a:85:1a:bf:f8:21:bf:38:36:93:
99:cc:02:90:65:d6:f6:3a:a3:67:98:fb:f0:78:2b:
98:bd:ee:d3:9f:59:2a:74:83:f1:eb:ac:ce:19:62:
7d:0e:4d:c8:43:a1:7c:c8:c4:6f:36:da:55:ab:e1:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:BF:43:7C:F0:28:C3:48:30:FD:C1:61:24:9B:9E:C8:64:16:17
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:9f:72:8e:9f:bb:50:94:a7:b4:7a:a1:d3:60:22:15:d8:
1e:29:d9:44:79:05:dc:fb:06:bf:59:33:27:35:a0:86:08:10:
4a:b0:62:4d:90:48:fa:f2:be:21:fc:08:b9:53:23:7e:ac:ca:
1a:d0:57:b0:98:27:15:d2:c3:e1:26:3c:88:9c:f5:47:4d:a6:
e9:d1:a3:90:78:67:69:b1:35:cb:0a:3c:d5:36:e4:71:bb:89:
b9:92:c4:6f:a2:ec:80:40:cd:4d:29:95:37:ba:57:b8:c7:0e:
91:ab:df:19:e8:19:47:12:1d:aa:26:a3:c8:a5:c5:ca:68:ad:
4a:5a:12:cd:fe:cd:66:ed:c8:f6:e3:e4:75:c5:d1:00:e1:25:
a7:ce:72:09:7f:ea:dd:74:7c:b0:67:a5:95:9e:20:62:e3:80:
8d:0e:b8:41:94:9c:5b:3e:09:bc:d7:bb:90:9b:c7:1c:ed:54:
04:e2:50:a8:b2:7d:dc:f8:ce:3f:1b:e6:61:d6:a8:0b:c0:86:
24:32:45:f7:7e:ed:d0:41:0e:a2:38:54:bd:10:20:a2:51:8b:
95:7b:55:6e:9a:79:16:a6:97:9a:bc:a5:74:dd:73:ee:71:80:
fc:b0:c2:92:a2:e6:8c:c6:5d:db:a6:16:70:fe:46:56:24:95:
cf:16:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:22 2026 by rpki-client