Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: r1PYWSurS36DpZ4gYLRHDTMpVfM5C3J6oRL96CxC6dk=
Subject key identifier: 9C:68:3B:40:C6:54:96:7C:F3:5C:E2:E4:A0:90:0E:DF:7A:13:D1:28
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 01A1DD94A70109F41F7C02BE047B32F4FC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 1A8C
Signing time: Sun 15 Nov 2026 05:01:09 +0000
Manifest this update: Sun 15 Nov 2026 05:01:09 +0000
Manifest next update: Mon 16 Nov 2026 05:01:09 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: bPIUyBPWTsL3QM74sWpxOInrC3vEVYjiVi5fKJGN9s4=)
2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:a7:01:09:f4:1f:7c:02:be:04:7b:32:f4:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Nov 15 05:01:09 2026 GMT
Not After : Nov 16 05:01:09 2026 GMT
Subject: CN=9c683b40c654967cf35ce2e4a0900edf7a13d128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:dc:77:d4:d0:3d:c6:db:4a:f5:e5:4a:17:
46:ac:45:2c:87:1e:f6:0b:3e:4b:fe:1a:78:73:43:
b6:ed:12:1d:73:aa:54:e3:00:23:cc:ba:c5:a3:e8:
6f:ee:12:f0:3c:10:80:59:c0:ee:1c:c8:ba:42:05:
55:64:f5:53:54:54:d0:a1:cc:67:9a:99:81:86:8b:
73:6e:b4:25:3d:1d:bd:b9:68:cb:5b:6e:3c:f9:a7:
29:70:2b:08:83:9b:19:21:7d:5d:d6:7c:df:b1:a6:
9e:c5:df:53:28:c6:b2:42:e0:4e:f2:e2:a9:17:3f:
cc:0b:05:8b:7a:f8:bf:88:8a:cb:d1:ca:66:5a:87:
bc:48:d7:6f:4a:4a:7a:d4:cd:bf:0b:eb:69:e0:ac:
4b:ee:e5:59:8f:17:12:53:14:e1:cb:34:14:8d:f8:
67:da:b8:00:03:e4:9c:bd:7c:1f:fd:a7:22:de:b7:
6b:ad:5d:b1:f2:9d:94:c6:84:8a:1a:27:dd:5e:21:
79:0c:1d:22:89:3c:3c:ef:37:11:17:da:30:bb:3f:
25:8c:ea:fa:3c:75:c8:83:61:b0:7f:35:dd:ff:5a:
97:fd:04:60:5d:21:9a:1f:b0:d0:64:81:aa:88:62:
b9:6e:d5:85:29:5e:54:e0:0d:88:84:82:ad:78:86:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:3B:40:C6:54:96:7C:F3:5C:E2:E4:A0:90:0E:DF:7A:13:D1:28
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:c5:30:3b:e9:64:e3:f5:c2:58:fe:4d:39:b8:f4:1c:87:
07:85:17:93:ea:2c:0d:29:35:59:a5:de:3a:c7:f2:2e:43:6d:
47:2e:bc:48:2d:e2:ad:a3:b8:1f:52:53:7e:89:30:fe:ba:2a:
c9:0f:2f:0e:e9:26:36:b4:15:25:90:f4:b6:76:9d:16:7e:21:
14:cf:f1:ee:57:30:6e:bc:38:a9:37:16:c9:fc:ce:c8:79:f4:
eb:3c:a1:39:ba:e1:d7:a1:dd:ed:86:8d:fe:48:68:27:57:9d:
63:87:de:36:02:00:80:5c:d7:ab:fb:c3:4c:d1:8a:85:33:3c:
d8:d1:c5:f3:b3:a3:ef:f1:b4:40:71:fe:b8:cc:09:7c:ed:3f:
0f:55:61:52:69:c8:31:58:c5:5e:23:3f:7a:98:f1:7f:10:dc:
0c:be:72:fd:c1:3c:1a:7c:58:77:39:64:18:51:33:0b:07:1e:
0e:23:6b:4c:bc:78:0c:bc:c9:85:59:e9:70:75:81:57:9a:0d:
be:e0:76:80:18:0e:34:90:6e:cb:2a:b5:41:1c:84:ea:ab:5b:
d8:f2:4c:73:9b:29:c0:d9:23:49:6b:ce:5b:be:be:e8:ff:3a:
8a:0b:b7:ed:d1:32:8c:9f:4e:18:e4:6b:38:70:19:f9:5b:32:
e2:85:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:26:54 2026 by rpki-client