Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: GLr39speUJDuozExKf9K4Ah3Czs+dewhklxfiASZo6Y=
Subject key identifier: 83:91:2C:53:FC:F6:54:78:81:31:13:65:BE:37:17:4D:20:CD:14:81
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019CAC7DF0F0DF39A0818AC94F6083254B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1572
Signing time: Mon 02 Mar 2026 03:01:00 +0000
Manifest this update: Mon 02 Mar 2026 03:01:00 +0000
Manifest next update: Tue 03 Mar 2026 03:01:00 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: ivvj2zvymja5maubjyzsGmAfC69atebximOswCYqU1M=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f0:f0:df:39:a0:81:8a:c9:4f:60:83:25:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Mar 2 03:01:00 2026 GMT
Not After : Mar 3 03:01:00 2026 GMT
Subject: CN=83912c53fcf6547881311365be37174d20cd1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:56:bb:55:e4:79:02:13:4a:51:24:08:b9:
f5:e2:19:60:aa:87:61:d9:b4:eb:e8:aa:8d:0e:30:
48:21:d0:f2:96:1d:f3:c3:eb:c9:26:5e:7c:c9:4a:
d8:7b:bc:01:52:00:24:28:16:f8:aa:7c:71:94:b8:
cd:29:b4:92:72:68:f7:9d:4e:52:ae:cb:af:c7:4a:
42:a2:91:6b:3c:a1:2b:4c:2b:40:3e:a4:5e:fa:d9:
c4:87:f4:8a:dc:69:b1:70:b3:f6:4d:35:9e:19:fc:
4d:48:7f:03:43:c2:be:e5:0e:82:f3:02:08:08:0d:
e0:d0:6a:31:97:f3:ba:99:19:83:7a:b3:3e:fa:69:
fa:7b:27:1b:ec:d4:7e:dc:9a:e9:39:71:0f:d6:1f:
0a:ab:90:af:31:a9:a7:40:8d:96:5a:7f:1a:9e:99:
44:fa:eb:aa:1f:34:4f:45:da:e2:fe:be:fd:fe:06:
73:ae:b0:6f:12:38:62:5a:a1:e3:c1:4e:fc:b9:f8:
9d:71:32:0a:d8:36:02:fd:f9:5c:b0:20:51:ca:ea:
d9:6e:73:db:77:94:1c:7e:0a:d2:70:4d:95:c5:cc:
6c:af:8e:6c:77:c3:94:24:99:5a:c5:d9:09:93:a8:
61:ad:e0:69:10:a4:da:57:38:e2:15:42:3c:67:41:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:2C:53:FC:F6:54:78:81:31:13:65:BE:37:17:4D:20:CD:14:81
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b7:0f:3a:3c:43:48:da:72:c5:53:c9:ea:04:b7:f4:51:5f:
5b:7a:cf:28:45:39:0c:af:27:23:40:8d:ca:01:9d:d0:47:0f:
40:0f:29:62:44:1c:14:e8:49:73:ad:4a:64:57:04:1b:19:c6:
ae:d6:45:c3:42:50:16:80:a0:79:e6:e4:ec:cd:f2:fc:42:56:
86:5c:75:8a:07:bb:6a:88:d4:0b:6d:07:04:8f:4e:0f:50:e5:
df:6d:22:02:97:33:61:81:62:de:74:ed:a8:b0:b0:02:85:3a:
98:5f:7b:bb:6e:dc:9d:a6:03:de:a7:cc:84:b8:26:7b:a5:0b:
3a:fe:7a:df:f3:71:f9:a2:46:6b:49:e1:f0:7d:c0:c8:d4:74:
29:cc:3e:a5:2d:48:1c:a1:46:fc:6b:98:c0:03:0b:d4:b4:56:
af:5d:b4:c8:f1:98:64:d8:50:15:10:b7:db:bd:1e:05:01:34:
c9:da:e4:b3:4c:d5:0e:38:1c:14:18:ca:95:bb:28:7d:15:c8:
18:5f:70:3d:1f:c0:3d:6a:f3:f9:0e:a9:c4:33:43:86:c8:01:
0f:b1:ff:79:5e:9a:0a:97:d1:bc:53:8d:54:83:8a:c8:c5:c4:
5b:63:0d:da:f7:da:c5:78:b5:15:1e:d5:c7:d3:88:37:e5:ef:
28:b8:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:54 2026 by rpki-client