Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: 8drUkCpPXUErwhh6XHZes8P3v53H/toZTm2tTuUkrxk=
Subject key identifier: 49:A1:AB:4A:00:2B:E9:DC:5B:81:F4:58:63:65:D9:9A:57:49:81:A9
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019CAEA2D1F0F5CEE0B65850713286389DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 1332
Signing time: Mon 02 Mar 2026 13:00:32 +0000
Manifest this update: Mon 02 Mar 2026 13:00:32 +0000
Manifest next update: Tue 03 Mar 2026 13:00:32 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: KHtEA4oBpZEiSTTR7UB1g2eSlC6SB5y5N7Dh94cywvg=)
2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:d1:f0:f5:ce:e0:b6:58:50:71:32:86:38:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Mar 2 13:00:32 2026 GMT
Not After : Mar 3 13:00:32 2026 GMT
Subject: CN=49a1ab4a002be9dc5b81f4586365d99a574981a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:ce:c6:40:ba:10:c9:35:e0:ec:8f:81:e4:
b7:4b:f8:76:33:9a:5a:0b:56:f1:06:f0:c9:4c:a3:
27:20:d7:4c:d2:fe:55:e7:b2:23:fd:63:12:fe:9c:
d6:b8:38:e6:00:aa:38:b7:73:95:d9:f7:b8:c8:31:
2c:6e:a1:74:72:30:2a:8f:fb:74:bd:82:2f:98:71:
ad:83:dc:10:ed:05:c3:35:28:8f:ab:41:89:ee:4c:
7d:9c:f4:ce:2f:10:93:1f:dc:c2:88:92:32:6d:fc:
31:a7:01:47:7a:f5:18:86:63:97:c5:44:45:25:70:
7c:d9:b0:f7:54:46:c6:47:5d:d6:af:0c:a1:ce:af:
6a:2a:0e:4a:d0:2c:32:0b:98:56:ef:6a:d1:93:56:
28:9e:95:dd:7e:43:55:90:d9:39:99:e2:19:52:12:
58:0f:f6:e6:cb:fe:e1:68:a3:dd:18:29:9e:62:c1:
06:7b:3f:11:d9:49:05:26:fb:6a:86:50:51:c1:21:
b3:7e:ec:30:6b:ad:53:89:fa:bd:ba:99:0f:bc:7e:
9c:30:51:dd:b5:99:84:94:ed:87:58:c2:ee:51:bf:
9b:9f:9b:8a:7b:16:fe:04:4d:78:d5:00:cf:4d:11:
f9:03:0e:46:10:55:22:26:16:b2:4e:70:9f:56:51:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:AB:4A:00:2B:E9:DC:5B:81:F4:58:63:65:D9:9A:57:49:81:A9
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:21:7e:a9:2a:f4:38:47:65:a0:55:99:ea:d7:c3:bc:6f:
54:94:53:2e:90:9e:be:a4:b8:29:31:55:ec:b2:b6:05:0a:ea:
fc:1f:7d:53:48:f7:62:78:5e:d4:53:34:aa:eb:d2:ce:51:ed:
ee:41:a4:95:09:4a:9f:43:2a:d4:90:74:f4:23:63:ac:9f:41:
85:2f:ce:5b:1c:af:2e:e8:b2:93:9c:ce:a9:d8:03:30:4b:0d:
58:b3:d9:4e:92:3b:8a:d4:75:21:15:13:9a:05:b2:14:83:9d:
ca:b6:ce:d9:8b:00:e9:c7:69:5f:f3:53:47:27:02:11:35:39:
42:00:97:15:40:ce:4c:7d:b1:9a:64:49:17:02:24:cf:7a:02:
21:4f:79:78:dc:21:92:70:b6:b6:f4:18:56:50:04:61:59:88:
8f:ed:31:95:51:10:b5:72:b8:f7:38:1d:22:e9:04:e4:a4:69:
72:79:8e:40:5e:ea:37:94:32:c4:0c:71:10:26:b1:63:d7:70:
86:aa:e3:84:a9:6c:e9:a2:ac:89:79:76:5a:89:b9:fb:c9:52:
90:04:99:00:cf:fa:0c:54:5a:20:84:37:25:27:1d:1d:2b:c1:
7c:d4:93:ce:a7:42:0f:e5:6d:d6:7d:dc:19:4a:c8:eb:27:83:
e9:ba:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:08 2026 by rpki-client