Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: dh+dzrpnuGlPkYMVlT4QUbDMZKrc9HvG4/VUtpOWOCk=
Subject key identifier: B4:39:7C:AC:4C:3D:78:F6:56:33:8A:4A:0F:6C:64:10:47:26:DB:8C
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 019CAAFD301A5511AB039F469924DBF09CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 0533
Signing time: Sun 01 Mar 2026 20:00:45 +0000
Manifest this update: Sun 01 Mar 2026 20:00:45 +0000
Manifest next update: Mon 02 Mar 2026 20:00:45 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: dTwaFE6ECB1EsRxcfn9VqbH/GZ8VrN1KrUiLQRsNMX0=)
2: cZ8-AkXAb2nUBhGUsHG4MeP8-lQ.roa (hash: Gc7mW6CvdmBDDaCtzdF2PWoeTQzlwZZENLOGA8KTcww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:30:1a:55:11:ab:03:9f:46:99:24:db:f0:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Mar 1 20:00:45 2026 GMT
Not After : Mar 2 20:00:45 2026 GMT
Subject: CN=b4397cac4c3d78f656338a4a0f6c64104726db8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:10:11:0e:58:07:e5:09:ce:be:c6:93:94:
df:41:d9:13:d7:89:a8:1e:68:50:f3:4d:64:ee:11:
41:74:b4:c9:d2:c4:0e:8c:05:09:0c:da:5f:d3:5e:
14:7e:63:bf:50:ef:39:a1:a4:57:a9:52:65:b7:6c:
af:7b:b8:68:7b:a1:87:b5:8d:e9:46:24:2d:22:03:
f1:58:7f:13:af:73:b7:bc:ee:35:22:a0:47:0e:4b:
e9:9a:3c:03:ab:20:70:3f:04:32:50:9b:91:2b:3a:
2f:e6:a4:e4:b9:73:f8:e4:c7:06:52:80:75:b8:17:
1e:2b:39:55:9b:3e:94:b8:4d:31:b6:21:a0:b2:67:
59:22:9b:3a:7f:1a:0e:1e:fb:93:c8:c8:de:e1:9c:
5c:e3:a5:2f:73:7a:10:a4:1c:8c:8b:32:22:82:72:
ab:67:97:8f:23:25:8a:48:0b:10:27:85:3a:b6:3f:
27:03:06:f8:ed:e8:1c:3b:78:7e:ec:7e:23:70:d0:
3a:2a:40:0c:59:db:6d:0b:33:df:f5:60:90:81:ef:
6a:f7:02:26:22:dd:74:ed:35:87:6e:fe:17:ff:44:
53:c1:8e:47:4e:68:3a:10:f0:1a:84:6b:fc:d1:9e:
8a:8a:89:65:e8:64:3d:91:95:28:97:af:4e:17:53:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:7C:AC:4C:3D:78:F6:56:33:8A:4A:0F:6C:64:10:47:26:DB:8C
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:10:7e:78:90:c0:79:ed:04:45:e7:7e:fc:b7:ca:71:3c:ba:
b4:a2:5c:23:38:c7:51:d0:39:ed:8a:3c:17:ab:72:ca:c0:c5:
23:bf:7f:0f:48:b0:fb:ac:9c:5d:2b:23:f2:86:8a:40:1d:b1:
36:82:c5:ea:83:6b:49:c0:aa:a5:79:31:ee:2c:bd:d9:df:da:
b4:8c:c4:48:b6:59:e1:97:af:a1:e7:fb:5b:a3:9e:9a:76:29:
29:59:3b:ec:79:a3:3d:25:1c:3b:49:2e:f1:77:3d:be:32:80:
4c:44:b2:0e:cc:70:89:b6:09:a8:cf:1e:f5:87:2a:7f:1c:d2:
c4:dc:aa:69:3b:8a:46:8e:9d:90:75:38:7a:58:1f:aa:41:11:
53:9a:b3:25:ab:8b:e7:ab:69:1b:a5:78:70:b7:9b:6e:b1:36:
aa:e5:f5:63:3d:d0:4b:c7:95:f9:6b:9d:74:b7:a8:6b:3f:a5:
d8:92:4f:c5:fb:ef:c9:38:2f:08:d5:06:54:54:32:bd:01:c5:
00:9b:4f:6c:2c:5a:31:7f:fb:6e:24:c3:c4:56:80:61:0d:6a:
72:92:f9:21:f6:70:28:16:ba:0e:73:d2:44:ca:cd:21:c0:6f:
e1:d4:d7:9f:e2:65:10:fc:ff:ad:d5:55:43:03:f9:09:85:0c:
97:0a:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:46 2026 by rpki-client