
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: EHpB8wCxJA8MBWpiqer7yVRpliukFuMpX5aODpjJsZw=
Subject key identifier: 0A:56:97:19:C7:BF:F3:C8:A2:39:E3:9C:BE:96:1F:AF:9B:8D:C8:A6
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 01A0DFBC80342DE87F44FBD47079896789E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 22:01:07 +0000
Manifest this update: Sat 26 Sep 2026 22:01:07 +0000
Manifest next update: Sun 27 Sep 2026 22:01:07 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: inFHAkkXL2VtXaKPrWY29IiIwVrjsC0ZRl8v3GvSZjs=)
2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:80:34:2d:e8:7f:44:fb:d4:70:79:89:67:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Sep 26 22:01:07 2026 GMT
Not After : Sep 27 22:01:07 2026 GMT
Subject: CN=0a569719c7bff3c8a239e39cbe961faf9b8dc8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:f7:75:e7:6e:44:6e:1f:e7:04:df:94:c6:
e6:c8:81:be:d5:74:d6:40:12:82:c2:c9:79:f3:6f:
ff:ba:1c:0d:30:47:79:19:a8:3f:f8:2b:6a:19:57:
55:12:23:93:0f:46:ab:42:01:05:0e:8e:ae:2c:59:
b5:c9:9c:f0:e8:ea:38:20:82:b0:92:a5:18:7c:1f:
95:82:87:bf:27:5c:d1:57:1e:92:3e:78:3f:03:6e:
d8:ba:80:a6:72:e6:b8:85:29:43:4e:ce:4d:c2:99:
f5:29:1c:6c:fb:20:e5:df:f8:bd:f8:c7:65:85:d2:
b6:fb:05:6d:92:e4:a4:f5:5e:79:de:74:db:40:bb:
a1:7e:ab:f6:71:d0:d1:2f:8d:8d:8c:e5:9f:50:60:
37:4d:63:12:a3:9c:d0:3d:51:5b:ec:f7:ba:55:b3:
d0:62:a2:91:c6:fd:92:d4:f7:04:41:01:21:9c:56:
52:2e:b6:7b:ec:61:ea:34:31:96:f8:cc:7c:96:6f:
e5:7a:04:fd:47:a4:55:86:96:44:25:20:3d:7d:50:
03:65:ba:4e:de:3a:ee:4a:5e:5a:af:14:2a:a5:7b:
20:e8:10:30:1c:55:62:54:68:76:7f:e3:41:39:1e:
41:dc:70:bf:77:ec:d3:26:6f:47:b3:5a:fb:c8:65:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:97:19:C7:BF:F3:C8:A2:39:E3:9C:BE:96:1F:AF:9B:8D:C8:A6
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:57:38:95:4f:ef:fd:86:c7:9f:ce:0b:0b:52:fd:8b:ea:2d:
da:4d:f6:8a:6d:08:73:84:15:ab:2f:44:8f:4f:87:07:81:b5:
d5:4b:01:24:8a:23:32:4a:f6:8b:d0:96:ca:7b:dd:28:9c:73:
1a:13:aa:dd:a3:93:15:4a:3e:ac:12:09:5a:56:80:73:70:e2:
42:8a:7b:86:82:aa:02:4a:9b:28:34:3b:07:2f:30:b9:ae:7d:
d9:fd:f0:a7:6e:c9:ae:f6:cd:67:87:7a:a2:3a:00:0e:40:4f:
c3:39:d3:28:24:87:27:8b:1d:f6:1e:e1:0f:0e:df:52:41:36:
2d:42:99:67:65:89:e3:da:aa:42:56:79:54:2b:bd:3c:f4:b6:
98:9a:87:44:20:fe:bc:0e:b6:4f:b5:e3:60:68:3a:5c:c3:22:
49:c4:c7:f8:52:f9:6c:96:a3:ff:d4:1d:43:e5:bd:4d:cd:26:
87:55:0b:f5:50:74:48:e7:20:93:4b:f2:0b:d8:34:fa:f7:ec:
9c:4d:7e:6b:5c:e5:f5:7e:e7:f3:44:94:cb:92:13:16:fa:09:
a5:fc:b0:79:00:11:0c:70:63:95:0f:fd:f1:29:f9:bd:a6:25:
cf:3e:ef:c7:7d:25:19:2c:e4:9d:df:f2:be:ed:e2:77:36:34:
38:01:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:31:05 2026 by rpki-client