Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: Iy6y/wfuukMOOBvpbYXe7OAd1/yD8hkufIcb6MnEYN8=
Subject key identifier: EB:57:17:B5:99:E0:81:E8:76:C9:DD:F2:E7:9E:8E:56:CB:8E:B7:81
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019CAD22FE81147FF2F72901CF17FF3A67FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0C56
Signing time: Mon 02 Mar 2026 06:01:17 +0000
Manifest this update: Mon 02 Mar 2026 06:01:17 +0000
Manifest next update: Tue 03 Mar 2026 06:01:17 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: Ql/v9ba2TJAQyiz8yURJ3IcQOILUbv1M0Sebe16n118=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:fe:81:14:7f:f2:f7:29:01:cf:17:ff:3a:67:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Mar 2 06:01:17 2026 GMT
Not After : Mar 3 06:01:17 2026 GMT
Subject: CN=eb5717b599e081e876c9ddf2e79e8e56cb8eb781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:31:79:7d:24:e4:69:79:3d:63:3b:8b:d5:
1f:5a:44:9b:5f:fe:09:86:4f:27:a9:5b:9d:33:9f:
a4:61:a7:98:5a:f1:1d:2d:d6:ad:a4:8b:d4:50:ae:
b1:5d:02:24:9a:70:2e:96:1b:eb:11:9f:17:07:21:
f6:7b:4a:2c:e8:09:7c:fd:3a:0d:b8:56:6a:35:e2:
0a:22:28:b0:8c:78:42:b4:95:23:e1:d0:2d:e4:dc:
32:d1:a9:72:5b:a7:a2:73:b3:1b:1d:b8:2e:61:26:
3b:d8:95:20:dc:c0:87:df:04:12:e2:b1:f6:7e:83:
03:fc:a3:5c:f9:68:9e:35:b0:20:7f:54:f6:de:4c:
73:b7:5a:e0:29:26:99:19:3d:ab:8e:5d:8c:e8:5f:
5a:8c:c3:ce:b0:a5:78:af:3b:b6:ac:df:6e:bf:88:
b9:cc:ab:ce:51:23:ea:9f:15:f1:64:59:f0:5e:2e:
09:d2:20:64:48:7b:f5:8f:b3:52:03:b3:03:0c:46:
db:1f:f0:a9:1b:f9:72:1e:76:3f:c2:5e:b7:48:1b:
e6:62:b1:d1:3a:0d:af:18:40:92:a1:cc:a7:7c:4a:
0c:1b:ae:56:6e:fc:ce:4a:7e:e5:b2:a2:a6:36:7c:
68:34:86:25:68:af:48:76:00:3e:38:c2:ac:10:a2:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:17:B5:99:E0:81:E8:76:C9:DD:F2:E7:9E:8E:56:CB:8E:B7:81
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:52:ca:52:29:6d:32:75:9d:d6:fe:2b:b2:59:23:5b:32:76:
60:52:56:3a:37:ae:7d:78:cb:c1:63:0a:ca:fe:d5:2b:bc:9a:
ca:53:0a:f8:fd:5a:94:bb:88:e6:58:6e:7c:c3:ca:b5:4d:26:
20:70:5a:b7:0f:5e:ef:c7:f9:00:78:75:e0:26:2f:5a:c0:10:
b8:c7:a4:b8:db:51:1e:e8:64:ba:a7:de:b1:f0:74:95:7d:5c:
ed:27:28:e1:ff:7b:d0:7e:5d:13:e3:87:1c:1d:e4:d3:a0:e6:
3d:35:d6:2a:f1:ee:46:e4:a8:e3:c0:be:0b:c8:db:a8:5e:51:
15:a4:a2:0e:e4:d3:1a:80:01:e0:e5:4a:e5:41:6d:6c:49:3b:
cf:44:93:a8:5a:95:e6:57:7c:40:10:7b:06:15:a3:52:25:8d:
d9:0c:e2:3e:35:92:2a:58:bc:fb:12:96:3e:1f:f7:f6:12:d4:
c7:15:3c:e3:d8:be:56:e8:59:cf:3b:9e:17:7a:69:eb:20:2b:
56:e4:e6:05:00:ef:4a:d4:b9:c9:8f:4b:55:88:00:8b:61:20:
fb:a2:62:65:65:be:d5:e6:3e:9b:da:db:6f:05:0e:46:76:ae:
44:46:4c:0a:5f:74:7e:75:90:76:4c:54:6c:bf:7d:33:fc:36:
95:57:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:50 2026 by rpki-client