Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: w+hoJ+0QU2hpI1LEb3WmVj1OSXF2yeLdrQjMCohtigU=
Subject key identifier: A2:AC:1B:E5:B6:9A:2B:2C:43:C8:4C:E9:D6:83:85:2F:EF:6E:45:43
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019CAB6AE7A809D27E88394713A660B6D573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1450
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: WG3fslhyjsgzk/ASIPIglVEjfqclXe4u6XBR6lTTX14=)
2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e7:a8:09:d2:7e:88:39:47:13:a6:60:b6:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=a2ac1be5b69a2b2c43c84ce9d683852fef6e4543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:43:0e:a0:cf:67:d7:76:9e:2a:84:fa:79:
e7:6b:df:03:e5:00:39:ae:cd:fe:dc:e3:a4:f6:bd:
d7:72:d8:64:58:50:07:70:8a:e0:7d:00:08:4e:80:
e5:f4:5a:f4:9a:1e:4d:e6:22:01:63:6c:ad:cf:f4:
c7:f5:ff:91:35:5a:c1:08:1a:92:27:4b:bd:9d:57:
b8:27:7a:e1:ca:49:d8:a6:a1:ba:4a:7d:1d:e6:bc:
44:c9:19:52:5c:a0:23:86:e7:82:b3:30:5f:ea:28:
c7:15:97:98:a4:83:46:eb:3e:f4:6c:c5:96:04:ff:
22:b6:65:59:22:0a:93:5f:de:04:f5:f7:4f:34:2e:
11:db:72:93:69:5a:f3:32:1b:a1:bd:b5:36:88:b8:
8e:86:5e:4c:be:59:1a:c1:54:7e:65:bd:47:07:03:
d8:53:ec:05:b2:ca:b3:06:57:27:23:97:9c:e3:3c:
11:e8:ab:e2:0d:ce:af:66:57:3d:0d:bc:9e:85:88:
12:39:8e:a1:d4:ed:09:ad:e8:56:8d:22:b0:40:1c:
88:77:64:39:06:30:ae:54:57:a0:0c:14:84:94:fb:
c5:8a:f4:f4:98:3b:4a:c9:f6:5b:5f:02:e3:82:b0:
56:19:72:1c:3e:89:98:7a:53:17:34:a5:03:f5:ce:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:1B:E5:B6:9A:2B:2C:43:C8:4C:E9:D6:83:85:2F:EF:6E:45:43
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ad:eb:13:9c:15:74:33:23:61:0d:36:98:0f:96:c1:b6:df:
0e:36:d2:8a:c9:3a:9d:ab:cf:58:78:53:c2:e0:f6:29:ea:4f:
fb:84:55:60:27:b4:9b:a9:79:a4:13:5a:7c:e8:24:c1:00:0f:
ef:d1:1e:a4:8f:49:88:19:de:1d:28:fd:9f:fb:8f:87:57:e0:
a2:c5:17:f8:76:0a:f3:99:93:28:06:61:54:60:fe:41:37:4e:
12:ec:7b:84:d4:25:78:02:20:f4:81:c0:09:1a:18:01:b6:94:
e5:0c:a9:db:e6:43:01:da:c9:d8:ea:af:7d:55:8b:61:37:ff:
fe:25:20:1a:24:11:1e:93:4d:1a:9d:17:3c:a6:3a:91:26:7e:
54:1c:39:fa:21:aa:c7:4e:16:d0:ed:d8:3d:37:84:1d:3e:57:
4f:9f:33:dc:1b:f8:cc:9b:29:36:c2:ac:59:cb:0a:ad:1b:02:
d7:54:e7:89:37:d4:13:81:2f:2c:d7:0c:e8:0b:fa:d0:cc:35:
b0:73:16:90:1c:2c:7b:1e:6b:c9:ec:84:8b:34:3b:e6:14:0b:
50:80:ad:12:e6:82:ac:be:04:ab:c4:07:71:6e:98:d7:b6:84:
32:49:d2:9b:4d:4f:ba:1b:7f:3f:38:69:07:d3:30:2b:6e:9e:
f7:6d:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:19 2026 by rpki-client