Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: 7dmgBWN3eYr0yT7ynhNcyeD76sKzzjKt9ueYJ2/bgXA=
Subject key identifier: 96:D2:6A:32:1F:63:BB:88:6A:12:23:84:FE:53:0E:EA:EB:CC:F4:3B
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019CADFDFBAE43B7E21BB2B20AAC741728B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 1778
Signing time: Mon 02 Mar 2026 10:00:29 +0000
Manifest this update: Mon 02 Mar 2026 10:00:29 +0000
Manifest next update: Tue 03 Mar 2026 10:00:29 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: wl5PyPbpQx3Qq31HseXsmxyTfGEQuzSJ7ZNRzDAZt7Q=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:fb:ae:43:b7:e2:1b:b2:b2:0a:ac:74:17:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Mar 2 10:00:29 2026 GMT
Not After : Mar 3 10:00:29 2026 GMT
Subject: CN=96d26a321f63bb886a122384fe530eeaebccf43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:9c:ea:37:81:7a:26:40:07:23:5b:68:60:
50:fc:18:b0:06:e5:34:6b:b2:6d:d6:73:58:dd:c0:
86:ac:f3:51:04:3a:81:8d:81:3c:5e:69:d5:6c:dc:
03:c4:34:aa:b9:c9:67:9d:cb:96:0f:56:2e:fc:2d:
8e:35:2e:82:a7:d5:7d:c1:e0:b3:c3:4b:2e:96:76:
0f:30:17:29:c4:52:3d:31:ef:bd:fe:9c:06:54:99:
a4:50:19:be:01:cb:b3:68:0c:d8:68:8c:89:50:ad:
5e:e7:d4:f3:0e:f7:b2:3c:a9:18:f9:c1:fc:8f:02:
a6:21:5c:b6:91:73:33:ee:e0:02:0a:99:2d:9b:89:
c6:50:2c:a8:14:cc:cd:50:e3:73:6d:21:32:6a:ef:
78:90:53:e9:de:3e:9f:79:ec:f6:9e:ee:29:e9:20:
b9:e6:ca:4b:83:53:8b:4b:79:10:01:b0:bf:8e:7f:
5e:98:ee:c4:26:8c:53:9b:fd:04:c8:7c:3b:4d:14:
a0:78:2a:b9:71:73:43:60:8e:62:12:75:94:6f:65:
af:d9:34:db:53:9c:0f:91:53:9b:dc:e8:54:f1:65:
f9:cc:1f:c6:54:33:a6:66:83:54:bd:49:88:a4:4f:
27:ac:f0:90:45:07:15:f4:d8:36:dd:51:4e:cc:aa:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:6A:32:1F:63:BB:88:6A:12:23:84:FE:53:0E:EA:EB:CC:F4:3B
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:98:bf:6c:84:75:bc:d7:f0:ec:c5:ed:39:39:ff:e0:fa:
b7:a5:fa:b8:ca:89:d3:ec:b7:c3:51:f4:83:ae:1b:12:79:17:
d7:59:d8:90:9e:a5:81:d1:06:6e:1a:a7:a4:55:52:e1:15:41:
e3:59:29:0b:35:2d:a3:49:90:78:d4:b6:71:51:01:d2:72:50:
07:9b:ef:8d:4f:c8:49:5d:6f:ff:1e:c1:29:21:6a:3e:e2:0f:
de:d8:c0:e0:d5:5c:51:c3:f6:84:c2:c8:93:5c:1e:94:e9:76:
63:6c:28:92:be:07:ab:12:6f:a8:f9:7b:87:d8:bb:ab:de:2b:
aa:dc:44:78:45:15:1f:f1:ee:eb:96:9f:94:40:71:65:03:07:
f3:89:a5:f6:78:1a:ce:72:ac:72:9b:89:b0:5c:05:12:cf:cd:
12:16:09:34:82:1f:5a:ab:a1:2e:86:f7:69:a8:8b:b7:cf:54:
70:b4:ea:b3:c8:72:c3:40:54:23:58:dc:b9:d0:ae:f0:ba:48:
0c:19:a5:45:3e:b4:7f:71:cb:96:69:7f:b6:38:17:19:88:f6:
93:9a:f9:77:aa:1e:3c:0a:dc:2b:3e:d7:c0:cf:63:5d:3a:49:
8c:39:50:e1:77:62:79:13:dc:33:df:7a:1c:cb:a8:5d:32:29:
e2:d8:bb:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/fuuQ7fiG7KyCqx0Fyi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz
NjY3NzMwHhcNMjYwMzAyMTAwMDI5WhcNMjYwMzAzMTAwMDI5WjAzMTEwLwYDVQQD
Eyg5NmQyNmEzMjFmNjNiYjg4NmExMjIzODRmZTUzMGVlYWViY2NmNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpyc6jeBeiZAByNbaGBQ/BiwBuU0
a7Jt1nNY3cCGrPNRBDqBjYE8XmnVbNwDxDSquclnncuWD1Yu/C2ONS6Cp9V9weCz
w0sulnYPMBcpxFI9Me+9/pwGVJmkUBm+AcuzaAzYaIyJUK1e59TzDveyPKkY+cH8
jwKmIVy2kXMz7uACCpktm4nGUCyoFMzNUONzbSEyau94kFPp3j6feez2nu4p6SC5
5spLg1OLS3kQAbC/jn9emO7EJoxTm/0EyHw7TRSgeCq5cXNDYI5iEnWUb2Wv2TTb
U5wPkVOb3OhU8WX5zB/GVDOmZoNUvUmIpE8nrPCQRQcV9Ng23VFOzKp2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbSajIfY7uIahIjhP5TDurrzPQ7MB8GA1UdIwQY
MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt
MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh
LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ6Yv2yE
dbzX8OzF7Tk5/+D6t6X6uMqJ0+y3w1H0g64bEnkX11nYkJ6lgdEGbhqnpFVS4RVB
41kpCzUto0mQeNS2cVEB0nJQB5vvjU/ISV1v/x7BKSFqPuIP3tjA4NVcUcP2hMLI
k1welOl2Y2wokr4HqxJvqPl7h9i7q94rqtxEeEUVH/Hu65aflEBxZQMH84ml9nga
znKscpuJsFwFEs/NEhYJNIIfWquhLob3aaiLt89UcLTqs8hyw0BUI1jcudCu8LpI
DBmlRT60f3HLlml/tjgXGYj2k5r5d6oePArcKz7XwM9jXTpJjDlQ4XdieRPcM996
HMuoXTIp4ti7Ug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:12 2026 by rpki-client