Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: H7+mqT7VLBl6vE2SOdvVDZmDFX85mpNy/h1mQJ16l5M=
Subject key identifier: BA:64:D0:1F:00:D0:0B:9A:A9:B0:23:C2:AA:B8:62:98:D7:7A:9A:0D
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019FAA1A33E93D839C744D882B632EE3C579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 15DD
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: ndfvCQmljFHRvGbp/CdUHnf75CxT+q6OqwuxKtzVVls=)
2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:33:e9:3d:83:9c:74:4d:88:2b:63:2e:e3:c5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=ba64d01f00d00b9aa9b023c2aab86298d77a9a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:10:98:1f:cc:06:95:63:dc:c2:9f:d3:5c:
ab:8a:a2:13:58:f2:96:78:8a:b4:f9:e3:a4:40:4f:
5b:40:e8:1c:8f:3d:2d:1f:6e:e3:a9:29:0c:f4:c1:
aa:65:54:05:84:b1:a3:79:9f:3e:95:d1:e7:c9:2d:
fd:a2:ff:94:92:a0:39:f9:8d:ee:b0:6a:eb:69:46:
dd:82:2b:bd:ff:27:0d:54:42:06:f3:01:6a:b3:87:
1c:fe:21:43:bf:f7:1d:b6:24:36:49:9d:99:27:4b:
2d:5f:d7:ea:94:63:ec:e0:a1:a3:2a:76:bb:35:1c:
58:71:45:fc:45:b9:46:25:12:59:c8:6b:79:b7:b0:
b1:5f:29:56:0c:9b:70:40:57:44:c3:71:ad:1c:c2:
09:26:05:1b:11:bc:d8:ae:1a:1f:b7:47:b0:12:ff:
63:72:84:9d:6c:bb:53:d8:8a:5b:e2:c4:d7:be:0a:
d0:cf:6e:ca:af:b5:04:f7:1b:43:79:e3:10:4e:e2:
99:4c:2e:a4:ed:a9:75:1a:84:8c:98:e7:3c:3c:30:
3f:92:8e:41:cb:52:1c:23:4f:13:c7:0d:ea:e5:90:
cc:e2:92:18:98:49:5b:4f:6b:63:16:48:ee:4c:ff:
f2:50:04:37:7f:42:92:3f:6f:a7:1d:fc:80:9e:34:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:D0:1F:00:D0:0B:9A:A9:B0:23:C2:AA:B8:62:98:D7:7A:9A:0D
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:f8:56:c2:e5:fb:65:be:8c:1b:bc:98:33:33:c4:64:d3:
57:b1:3f:96:09:98:56:f5:97:37:c0:6e:63:a6:d5:15:d2:03:
ba:22:fd:91:1c:be:01:2a:a6:24:e0:24:30:a5:2a:24:9d:55:
28:ad:f4:99:13:cb:b9:c8:6d:6a:10:eb:24:36:91:31:b4:0f:
5f:80:09:82:d3:59:b6:70:2a:7c:4c:31:b1:51:d2:aa:d6:77:
2d:f2:b1:aa:a9:06:12:b5:76:0e:e7:22:50:e5:f4:4c:8e:aa:
2d:70:e1:f4:a5:c5:02:4b:b0:58:9d:4b:f3:fb:4f:6e:7b:df:
8b:2a:9d:20:0f:a0:50:fc:5f:84:ce:92:b4:23:da:bd:43:1c:
96:ce:86:8b:63:4a:ae:03:4a:72:60:af:78:96:9c:12:e1:ee:
84:9a:46:d5:12:97:5d:41:57:dd:fb:32:ed:36:f1:d1:d6:ab:
ab:81:cd:3e:6c:76:af:ad:39:f8:c3:04:9a:01:2b:5a:a2:b1:
12:31:c8:63:98:8a:44:84:45:7c:8b:b3:b7:60:07:56:7a:7d:
c1:24:36:ce:02:7e:8a:1f:d3:4f:90:90:a2:97:ca:44:e3:d1:
94:77:ea:d7:50:64:82:aa:b9:3b:15:8b:8f:11:a8:c9:0c:68:
1a:1e:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:17 2026 by rpki-client