Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: QODakacj3e4ffubcCI5Z7lm59srq1TpsxdY+uyVZ4RY=
Subject key identifier: 2B:B7:B7:92:65:B0:42:A2:21:58:8C:98:EC:BD:88:3C:E9:EA:69:9D
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019E1C102EBAC04D3F36C3BC7D2299684EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0D14
Signing time: Tue 12 May 2026 12:01:22 +0000
Manifest this update: Tue 12 May 2026 12:01:22 +0000
Manifest next update: Wed 13 May 2026 12:01:22 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: naRQZN1j2Tmsmjq3XCa9LvHZHP3EFEmmrdwwqS4ph1s=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:2e:ba:c0:4d:3f:36:c3:bc:7d:22:99:68:4e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: May 12 12:01:22 2026 GMT
Not After : May 13 12:01:22 2026 GMT
Subject: CN=2bb7b79265b042a221588c98ecbd883ce9ea699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:b7:cc:99:d4:cc:f1:87:74:d2:17:27:72:
cb:9b:d8:0b:25:a0:a6:24:6b:88:99:bd:07:2f:ae:
bd:a6:d5:bd:cc:43:3c:8a:cd:ad:a2:85:34:c1:72:
73:ee:38:43:c6:62:eb:fe:6c:f7:c4:e4:2a:17:73:
51:bd:0a:4c:4c:29:24:d9:1c:0a:fe:db:70:b6:19:
64:68:54:1c:49:4c:70:f2:8a:bf:38:dc:3e:20:b2:
13:76:7a:eb:36:ce:39:6e:e1:e8:9d:d8:ab:07:f6:
a0:93:5d:2b:90:d7:fa:26:86:e1:2d:96:44:f9:c9:
b8:47:87:47:84:8f:1d:9e:fd:5c:68:34:a8:6e:1e:
79:24:a7:c8:d2:58:0b:3e:a4:40:5e:a2:75:22:8b:
45:25:1e:2d:45:df:ec:23:0e:62:68:8f:fa:1a:07:
0f:9a:19:f3:9b:56:f9:e5:23:7c:8f:e2:c9:89:0e:
79:e9:c3:a6:ab:b7:67:f0:05:a8:95:c6:3f:b3:d5:
11:b4:82:eb:77:74:0c:f7:07:da:d1:b1:a2:0c:d7:
f0:4f:4c:3c:c7:fe:0b:46:aa:aa:47:25:25:33:7f:
d0:62:c6:a1:b4:4f:25:36:02:1f:18:c5:ef:ae:c6:
0b:96:87:8f:12:19:6e:1f:9c:22:2b:d3:a0:e8:07:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:B7:92:65:B0:42:A2:21:58:8C:98:EC:BD:88:3C:E9:EA:69:9D
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3a:5f:3e:9e:c9:f5:5c:53:13:2b:f3:79:7f:0a:ca:f0:05:
ce:36:aa:71:a3:ed:ab:b4:c1:a0:f7:7e:be:3c:21:6c:2f:1f:
ad:d4:e6:59:6d:04:04:d5:38:e6:0f:3e:b8:44:6a:a6:9d:28:
e5:1c:7d:a8:79:2c:f7:59:12:9d:3c:10:2f:b9:8b:6e:65:79:
8c:d6:9a:4c:0a:55:53:7b:63:19:f3:7a:0f:85:3a:69:3d:11:
78:69:b6:10:2a:cf:66:a6:e0:ce:50:96:b0:84:74:4c:76:97:
47:dc:4e:10:31:43:90:4a:49:2f:06:b1:eb:66:20:8f:15:ce:
78:2c:cb:42:90:fc:88:01:0c:45:35:ce:3c:93:40:a0:f5:0e:
e7:e8:25:10:e1:28:73:ad:40:d2:59:80:a5:be:d2:33:b4:8a:
0f:3a:39:20:10:fb:e9:61:35:4f:ab:53:a2:44:69:e2:da:b5:
c4:17:8a:ec:b7:53:88:d9:f0:6e:85:b2:d6:61:e8:18:cb:d7:
8c:15:31:ca:57:dd:fc:5b:ac:65:16:2a:36:db:e1:c7:92:17:
73:41:77:fb:b4:f0:7b:a8:8d:69:60:25:9a:8f:e9:56:a6:bb:
80:e3:22:dd:91:96:c7:e0:65:63:35:36:31:69:e4:95:56:5e:
0d:2f:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:46 2026 by rpki-client