Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: YDp+vfsXIv/ULXU1jMA2spKQ0GYhTSuM4p8Xmt2aCHE=
Subject key identifier: 8E:88:25:CD:C5:CE:3C:3C:AF:A5:66:B5:D1:A4:A5:BA:15:0D:BB:82
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019FA9E30117D0ADB24500692B4803F5D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0DE2
Signing time: Tue 28 Jul 2026 18:00:54 +0000
Manifest this update: Tue 28 Jul 2026 18:00:54 +0000
Manifest next update: Wed 29 Jul 2026 18:00:54 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: +fAmLWf090lzmidUbwIe/E3Ak3omI7cvHscLgti57Ts=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:01:17:d0:ad:b2:45:00:69:2b:48:03:f5:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Jul 28 18:00:54 2026 GMT
Not After : Jul 29 18:00:54 2026 GMT
Subject: CN=8e8825cdc5ce3c3cafa566b5d1a4a5ba150dbb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:17:2a:7c:eb:d7:a2:2b:8a:de:ce:5d:e9:
df:da:e3:71:c7:b5:c6:27:40:cf:fb:61:ed:03:10:
b2:57:b0:b4:9e:67:dc:73:20:86:6a:fb:11:17:89:
2d:ac:f2:c3:b0:e3:3b:1e:92:41:b0:ed:b4:7e:80:
75:a9:04:27:e1:67:b7:9f:12:28:de:e0:d1:da:57:
c8:f0:2f:23:03:28:e4:db:b4:00:af:14:d9:ce:c6:
65:ae:22:2f:6f:b6:26:bd:1e:a8:77:aa:b3:13:38:
26:c6:28:96:a2:5f:fc:d7:3b:c8:ce:08:d1:6d:2c:
07:21:48:72:03:74:39:e6:63:6b:0d:d1:df:87:cb:
a7:18:d7:a1:c9:63:e4:d6:08:3e:94:de:43:ba:1b:
8e:89:c0:cb:70:b7:9a:68:6a:d3:7b:27:67:53:a1:
8a:dc:ef:05:ad:d8:3b:31:f7:b7:a0:2a:41:ed:3f:
64:96:e9:b3:9c:15:e8:f6:cd:6b:e5:a1:a0:ea:0d:
24:6d:57:73:d4:68:dc:31:d3:7d:3a:6a:ac:04:04:
f1:a6:55:01:4b:5d:80:dd:67:45:25:5f:f1:a4:15:
14:54:96:90:f1:78:ac:8f:22:7b:dd:13:bb:fe:32:
62:49:31:4b:66:45:6c:87:b7:55:19:a3:68:3e:5a:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:25:CD:C5:CE:3C:3C:AF:A5:66:B5:D1:A4:A5:BA:15:0D:BB:82
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:37:20:2c:bc:5e:c8:d5:c2:22:75:39:7f:4e:f0:fd:1d:
65:1d:79:f2:67:86:dc:5d:8f:2b:48:bd:47:41:08:7d:60:9d:
10:00:33:52:43:cf:d7:9d:ce:b3:7d:fe:a2:cc:51:de:11:60:
eb:c7:cb:bf:b4:f4:dd:c7:25:53:d7:1f:0a:f0:7d:6d:32:c8:
86:cc:03:58:6b:61:8f:c4:9d:92:a0:c0:0f:7c:4a:4f:6d:60:
81:7b:ec:1d:0c:1d:02:b5:d7:11:c7:e5:c5:82:bb:a9:4e:79:
f3:de:71:e8:65:10:a7:e7:5c:0a:8e:36:54:a7:45:e5:5d:0b:
0a:8c:eb:59:3c:3b:33:20:2d:8e:1d:eb:89:2b:08:a9:a7:27:
6b:38:75:16:fc:82:a7:50:38:26:1c:ee:2b:dc:a4:bc:eb:1d:
27:0a:4d:cd:06:7a:d2:ab:98:07:9b:21:a6:03:32:db:52:31:
e1:50:6b:63:7f:35:a7:f8:d7:2a:c6:ce:00:05:98:6e:85:3e:
fa:d1:d8:8e:cf:51:fb:cd:e9:bc:f3:57:a2:c0:a7:34:32:b3:
3f:0d:25:66:2a:96:a7:b5:a8:ed:ef:0e:58:c0:73:14:ec:8e:
09:09:d6:6d:f8:c2:5d:90:c9:a8:76:c4:8e:69:18:57:ed:cf:
bb:51:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:09 2026 by rpki-client