Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: uayG36RMOwC51hqbWA7sdvXo8WtaRWiW2JvG7xbSp1I=
Subject key identifier: 4D:9E:15:8A:4B:2D:7F:11:6E:C5:4E:97:5E:10:B8:4E:DB:C5:11:94
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01A0E218EDA7F8254B34349B9F40722BDEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 17A0
Signing time: Sun 27 Sep 2026 09:01:19 +0000
Manifest this update: Sun 27 Sep 2026 09:01:19 +0000
Manifest next update: Mon 28 Sep 2026 09:01:19 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: K1b5b8iluEQXsJhDm0u/+Y9olBsnTPkJAQJFAnRCew0=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:ed:a7:f8:25:4b:34:34:9b:9f:40:72:2b:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Sep 27 09:01:19 2026 GMT
Not After : Sep 28 09:01:19 2026 GMT
Subject: CN=4d9e158a4b2d7f116ec54e975e10b84edbc51194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:aa:f9:e2:a9:62:02:45:23:c2:c0:87:a7:
16:4d:13:1c:ba:fa:bd:31:5e:dd:3a:de:23:9e:a3:
23:3c:99:68:68:8f:21:6c:9f:70:4e:06:6a:71:7a:
31:82:53:e4:da:5e:37:0a:eb:f2:5f:45:88:5b:37:
9b:e3:18:d7:92:57:ea:d6:08:e7:64:35:a7:c6:db:
70:e1:13:74:24:fe:d5:57:67:a5:9e:d2:9e:69:7b:
fa:df:24:fc:c5:69:7a:7d:d0:e0:95:77:d4:39:ea:
09:f2:70:53:72:8c:14:03:bf:f7:af:61:f1:c5:82:
f6:9c:42:ad:70:a5:c2:12:ea:e6:7f:37:a6:e7:75:
9a:80:6b:fa:8a:43:0b:42:d0:3b:97:24:fc:be:6f:
ed:75:64:e6:37:bd:0a:f4:45:3c:db:79:b9:3f:3a:
44:bb:bd:8b:7f:a4:8e:a7:df:27:71:75:39:04:b4:
38:48:e4:6a:b8:f3:8e:db:78:89:e0:b3:05:e8:22:
b1:66:8c:1e:2d:b6:03:49:b8:8f:ec:47:90:8b:e7:
cd:fc:a9:d3:81:24:c9:e5:ad:85:a3:a7:b7:fd:ae:
80:3f:e9:5b:c2:7f:ec:fd:3b:0f:19:4d:3a:84:5a:
b3:ad:10:20:54:d7:c6:b8:6e:04:68:c9:35:80:f9:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9E:15:8A:4B:2D:7F:11:6E:C5:4E:97:5E:10:B8:4E:DB:C5:11:94
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:7d:5b:f9:11:20:dc:95:bf:01:65:e9:6b:7f:b3:d7:68:
3d:ab:04:a7:54:c8:fa:b2:95:3d:cb:13:1a:0d:30:28:ff:2e:
94:40:29:3b:45:9e:a7:c7:09:86:96:04:b0:d1:d2:42:ca:bb:
5e:86:c1:f8:37:03:f5:09:f6:2e:69:b3:a5:a9:b9:85:73:d5:
42:a8:93:2f:46:d8:1a:77:90:a9:48:1c:65:85:82:5b:a3:8c:
83:98:67:4c:ce:8d:f1:7a:75:1b:6b:ef:33:66:a6:7b:d8:77:
34:3b:eb:58:be:52:8f:d4:d7:f3:61:26:33:ff:5a:e8:18:3e:
5e:19:e5:6a:91:06:ad:c2:ed:7e:34:56:71:f7:c3:b8:e1:55:
e8:5b:00:9d:eb:20:75:84:51:ad:59:44:ef:d7:88:2d:7d:01:
8b:6a:61:b1:88:e4:bd:59:35:39:85:64:78:0f:47:8b:ce:a5:
d7:38:b7:5f:5a:f1:84:04:12:59:18:ce:7f:c7:e4:9a:d7:d3:
49:bd:a8:ee:54:9a:64:c3:1e:c0:24:75:fc:ad:de:13:01:bd:
85:62:e7:fc:92:80:0a:b2:2f:09:4d:79:ef:2d:13:e3:4f:5e:
d0:ef:8b:eb:6e:71:e2:90:ea:85:fa:b2:ef:d3:c2:e2:e0:01:
73:68:46:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:11:34 2026 by rpki-client