Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: vpxFQGYcZdJqZuWPaAWyiXne+CFH1smeMf5uyVg3CZo=
Subject key identifier: 05:DD:EF:80:3F:8F:69:DA:0A:F3:E5:18:4F:50:F7:DE:DC:B3:55:C3
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019D9A0709A84BDEEA7CD358935BC106BD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 15ED
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: 1MC70fIYrtCC8EyzSsVElyRUHr7CHKt29WZCMP0KdsM=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:09:a8:4b:de:ea:7c:d3:58:93:5b:c1:06:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=05ddef803f8f69da0af3e5184f50f7dedcb355c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:28:81:e3:22:7b:58:b4:72:f8:fc:db:56:
3b:d4:fc:cd:b4:28:f7:63:c3:12:d8:cc:e6:9a:ba:
87:cb:ed:30:15:d7:6a:f1:90:8d:3e:44:5f:e1:8f:
06:f6:ac:2f:57:2e:bc:8c:48:96:d6:1c:5a:48:0a:
d9:3a:38:cf:a9:d5:ec:fe:a8:5f:5d:34:52:66:ce:
87:32:e7:c3:5a:17:d9:6b:66:f1:37:87:ac:62:f5:
51:93:d7:a5:6b:c8:e1:bc:09:88:13:42:92:7d:f7:
bd:e4:8c:0c:db:da:70:87:3a:eb:30:87:2f:ed:4e:
de:8a:a4:81:58:01:a1:fb:ba:fa:9f:10:a0:96:85:
3d:8a:15:f8:15:4d:6f:8a:7a:66:89:af:b7:5e:42:
6f:30:0f:a0:5e:7e:9a:6d:fd:f4:b1:d7:de:e6:96:
0f:96:3b:fb:88:00:47:7d:ad:84:69:02:e7:35:83:
b6:21:22:9e:8b:27:d9:8b:70:4b:51:af:5f:5e:6b:
bc:dc:65:d6:98:de:90:f6:2e:c1:78:39:2e:b0:4c:
7a:2d:02:9b:71:4a:0e:df:ec:91:53:16:4b:5e:99:
1a:6d:85:f9:16:d7:3b:ac:db:ce:0d:13:d7:42:8c:
95:de:cb:79:63:90:27:34:bc:87:7b:f3:8f:07:37:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:EF:80:3F:8F:69:DA:0A:F3:E5:18:4F:50:F7:DE:DC:B3:55:C3
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:99:99:b1:21:ca:9f:a1:22:a3:78:d6:52:0c:8f:45:55:
13:0d:60:85:97:0d:f7:ec:d4:dc:4a:da:50:96:a0:94:70:9b:
e1:f2:bb:51:ab:17:e9:0e:9a:b1:85:ba:b6:39:2f:b9:ce:ce:
56:a9:64:40:69:5c:d4:74:08:2f:ce:57:ba:a8:e2:57:be:59:
25:c2:33:f1:47:dd:0e:0d:db:9a:37:ac:e1:29:e6:9f:d9:7b:
b4:c2:52:0d:7a:08:e4:b6:d8:22:ba:04:6b:47:9d:c3:19:17:
5f:da:4b:e6:22:f8:f0:8c:21:5b:c7:6d:fb:5e:f4:c7:f9:93:
64:4f:3e:5d:da:34:03:1f:9d:b6:df:02:71:c4:1f:60:0e:2c:
f5:18:08:3c:40:0f:9b:df:68:18:90:e5:01:b6:63:43:27:89:
65:4c:da:c9:49:14:33:60:b7:a7:95:ef:a1:76:dd:5d:02:e5:
80:9f:8a:ee:93:c9:69:9a:b9:08:31:a7:16:e7:00:5a:38:14:
4a:c1:f0:ef:5a:1d:d5:05:ad:2d:9c:c7:b8:40:07:a9:fd:4e:
ca:1f:51:b8:78:e4:f7:34:a7:a5:62:a5:a6:9f:fe:46:45:bd:
93:b5:6d:0d:c7:b4:2f:6a:42:e7:b4:e4:a0:1f:ea:57:28:ab:
ff:ff:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:59 2026 by rpki-client