Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: u2IGUgnFXKY1Ggkg9m1SSdgiZOku65rIogOt84Se2Ok=
Subject key identifier: 03:9A:BC:13:E9:D3:93:A3:CF:DD:CA:AA:39:FD:B6:13:7B:80:0C:D1
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019D9D75A66B1CA53F3B4F8EDA6FD4D4D715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 17F4
Signing time: Fri 17 Apr 2026 22:00:26 +0000
Manifest this update: Fri 17 Apr 2026 22:00:26 +0000
Manifest next update: Sat 18 Apr 2026 22:00:26 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: 8jEIOQ8liZHONU5NzSPHfaEzPBhJovuhxnNeA8KcWik=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:a6:6b:1c:a5:3f:3b:4f:8e:da:6f:d4:d4:d7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Apr 17 22:00:26 2026 GMT
Not After : Apr 18 22:00:26 2026 GMT
Subject: CN=039abc13e9d393a3cfddcaaa39fdb6137b800cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:8f:79:22:82:4b:44:8f:55:d7:8b:84:d0:
6f:b8:d3:81:0b:7f:48:bf:9f:c8:41:bf:bf:e8:ce:
1c:6a:4d:9f:e9:ed:8b:ef:df:3f:c0:c1:45:32:57:
a1:5a:36:3f:89:35:5e:a4:5a:3a:c3:01:55:d5:02:
c0:8a:c0:85:f2:25:f5:75:97:04:75:87:f2:35:de:
b8:27:a0:7d:45:d3:69:ac:6a:b5:fb:da:7e:90:13:
ef:ad:de:28:0d:ed:d9:6b:b3:2c:e5:9d:74:22:2c:
65:e2:bd:e5:96:59:b3:e6:db:71:69:b9:94:20:20:
92:5d:e0:2f:fb:d3:ea:07:1b:70:19:d8:4f:66:8b:
60:f7:73:5b:34:2d:ba:5b:9c:29:03:ea:2c:b5:e4:
cc:9f:69:85:3e:5f:70:67:fa:6e:c1:8d:a4:4f:ac:
9a:96:27:1c:5c:55:14:1f:b7:0f:ce:ce:f8:4b:b8:
e2:6a:01:e2:bb:3f:69:fd:5a:24:f2:9a:63:43:bd:
1f:e4:a0:0f:97:0c:3b:fb:96:bd:fe:24:9f:fd:c2:
f4:72:ba:ce:6c:a3:9f:0a:0f:e7:52:92:78:58:36:
37:a1:3a:1c:0f:9a:3a:99:e0:54:3d:34:16:14:c8:
ec:94:70:a9:35:db:96:15:32:54:84:2a:e3:26:f4:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:BC:13:E9:D3:93:A3:CF:DD:CA:AA:39:FD:B6:13:7B:80:0C:D1
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2e:77:bf:07:0b:17:7f:34:5f:63:39:c6:58:dc:1f:cc:3e:
bd:50:a3:b4:ff:40:a2:b0:77:79:f7:cc:c3:8b:c9:d6:e3:1e:
91:b1:df:94:c9:f1:1c:12:b8:9d:1f:90:b1:38:6d:34:75:be:
96:7b:72:f1:7f:e1:97:8b:cb:82:ea:e2:72:d0:4c:b8:cc:30:
5d:70:c1:2e:91:37:5a:ca:93:75:f1:04:dc:70:47:50:6d:e1:
92:81:e6:73:18:fa:85:76:e3:8a:e5:8e:9f:a4:52:38:5c:e9:
a0:bf:2e:f4:23:32:1c:02:20:e7:c3:e0:73:3d:2b:94:a9:6f:
05:f8:c3:0d:e1:e1:a7:f8:c2:94:66:51:ee:cd:69:00:6b:1b:
02:9d:b7:8c:bc:6f:86:1f:29:18:10:e5:83:8d:4a:b5:05:15:
80:8e:0b:16:6b:bc:82:37:87:26:da:8e:a4:cf:37:96:4b:c2:
9c:ab:ce:fb:45:45:c6:f7:53:cc:30:15:4f:58:65:ee:fb:2e:
b0:49:0b:3f:fd:44:0e:c9:1a:a2:30:27:92:40:eb:cb:2b:92:
c1:fb:3d:26:0a:af:75:b8:0f:da:63:10:0a:8a:80:6b:9a:05:
a4:ba:70:c2:dc:5c:67:b5:25:cb:3c:9b:e9:b2:78:50:0b:f4:
8c:78:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:51 2026 by rpki-client