Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: 7XCzRZU5ygvp6dlV1sEGE4WF4K/2dQG9suNIqSZ9bis=
Subject key identifier: 2A:2B:33:C4:B2:91:F5:50:1B:2D:E4:82:A0:B8:CE:57:BC:3E:ED:0B
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 01A0E888E82864A43A57973EAE9070A3BBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0E87
Signing time: Mon 28 Sep 2026 15:01:21 +0000
Manifest this update: Mon 28 Sep 2026 15:01:21 +0000
Manifest next update: Tue 29 Sep 2026 15:01:21 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: lDVshPKgCUzqz3IYXl8zDVnyWLCOA+wpM0K6bSJQq4k=)
2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:e8:28:64:a4:3a:57:97:3e:ae:90:70:a3:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Sep 28 15:01:21 2026 GMT
Not After : Sep 29 15:01:21 2026 GMT
Subject: CN=2a2b33c4b291f5501b2de482a0b8ce57bc3eed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:67:d9:33:9c:6d:e7:8c:3b:9f:27:97:16:
95:7e:da:b8:2d:26:cf:7b:c8:3f:10:fe:b0:db:05:
ef:a7:14:ff:7e:51:a0:cf:6c:17:66:e4:46:1e:54:
6f:c7:fb:67:ff:09:9b:22:a2:56:fd:de:de:e9:1f:
bb:77:30:9a:78:6d:82:dc:bd:b4:b5:b4:f5:de:0a:
98:90:81:b2:ff:4a:83:db:f0:d3:e2:34:71:c0:87:
2a:5a:58:db:f2:6e:86:2b:47:01:8e:d4:43:f2:b0:
22:a1:18:94:b3:c5:17:76:aa:80:49:f4:6e:ef:d4:
4e:3d:a3:83:af:a1:6d:d7:9f:a8:00:25:ab:a4:51:
27:e9:77:1f:20:79:49:15:dd:c7:10:64:f0:9e:cf:
d3:df:96:c1:e1:3c:63:e4:82:10:40:c1:1d:45:47:
62:cb:91:46:09:d9:44:24:0c:6b:7f:c1:53:08:c7:
c6:ff:63:9e:27:1f:7a:5f:f6:80:ff:fa:a0:2f:9e:
6d:c3:e2:9a:b2:c1:27:79:09:b6:b8:25:5f:b6:a1:
f8:3f:4f:4d:4a:57:72:3e:06:f6:71:98:ae:24:94:
f3:10:04:d3:bc:8c:6d:59:b9:f4:ae:77:4e:2c:a4:
c5:e3:c1:89:87:e4:55:57:af:a3:d1:9e:ab:17:4b:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2B:33:C4:B2:91:F5:50:1B:2D:E4:82:A0:B8:CE:57:BC:3E:ED:0B
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:0f:d9:29:12:ec:ee:1c:85:fc:4c:23:11:16:ee:27:d4:
a9:eb:ba:0b:4f:25:e5:bc:40:94:81:de:82:e8:ef:40:57:74:
39:9c:12:ce:04:7a:3c:fd:19:26:df:4e:2a:b1:ac:f3:4c:43:
a3:0f:88:6a:bd:17:7e:35:e9:cb:a2:ba:5a:ec:16:6e:a2:e7:
b0:d8:90:a4:69:7c:51:72:4b:cf:94:ed:7b:9d:11:e5:ed:44:
40:0a:4a:63:ce:df:39:cc:df:6b:b5:b7:ef:b8:e0:19:e9:71:
15:ec:d0:60:d7:8b:36:7e:2c:87:63:02:99:1c:66:39:2a:bb:
67:53:c5:20:b5:84:f1:7a:c5:79:84:cb:3f:f7:d2:40:60:86:
39:f8:93:76:33:8d:69:a5:c9:42:b1:c1:4f:4b:36:08:69:10:
00:59:22:28:07:57:33:af:54:23:9a:58:50:2b:c0:1e:91:bc:
05:cd:74:19:d3:c1:45:cf:2e:ba:58:7b:c1:f5:96:65:0c:c2:
a7:b4:5a:98:b8:ea:55:50:46:2b:5f:dd:76:e3:84:bf:94:10:
34:bf:09:45:e2:2e:ba:c6:02:c8:97:0b:cb:24:68:b0:ac:b5:
4d:d7:71:72:9f:c0:20:ec:18:08:08:df:81:9d:6f:73:60:ce:
fc:e1:90:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiOgoZKQ6V5c+rpBwo7vjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjYwOTI4MTUwMTIxWhcNMjYwOTI5MTUwMTIxWjAzMTEwLwYDVQQD
EygyYTJiMzNjNGIyOTFmNTUwMWIyZGU0ODJhMGI4Y2U1N2JjM2VlZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZBn2TOcbeeMO58nlxaVftq4LSbP
e8g/EP6w2wXvpxT/flGgz2wXZuRGHlRvx/tn/wmbIqJW/d7e6R+7dzCaeG2C3L20
tbT13gqYkIGy/0qD2/DT4jRxwIcqWljb8m6GK0cBjtRD8rAioRiUs8UXdqqASfRu
79ROPaODr6Ft15+oACWrpFEn6XcfIHlJFd3HEGTwns/T35bB4Txj5IIQQMEdRUdi
y5FGCdlEJAxrf8FTCMfG/2OeJx96X/aA//qgL55tw+KassEneQm2uCVftqH4P09N
SldyPgb2cZiuJJTzEATTvIxtWbn0rndOLKTF48GJh+RVV6+j0Z6rF0srVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCorM8SykfVQGy3kgqC4zle8Pu0LMB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASg0P2SkS
7O4chfxMIxEW7ifUqeu6C08l5bxAlIHegujvQFd0OZwSzgR6PP0ZJt9OKrGs80xD
ow+Iar0XfjXpy6K6WuwWbqLnsNiQpGl8UXJLz5Tte50R5e1EQApKY87fOczfa7W3
77jgGelxFezQYNeLNn4sh2MCmRxmOSq7Z1PFILWE8XrFeYTLP/fSQGCGOfiTdjON
aaXJQrHBT0s2CGkQAFkiKAdXM69UI5pYUCvAHpG8Bc10GdPBRc8uulh7wfWWZQzC
p7RamLjqVVBGK1/dduOEv5QQNL8JReIuusYCyJcLyyRosKy1Tddxcp/AIOwYCAjf
gZ1vc2DO/OGQbQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:36:21 2026 by rpki-client