Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: bBY4k9n017pWGOGhCW/3UoXY7mKa43VCmnzEEPA0TpA=
Subject key identifier: 51:26:DB:88:97:01:B6:59:A7:F6:EE:1C:6E:0B:5A:8D:6D:00:92:7C
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019D3909E7F75860A471AA7D24CAF9C651C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 17C0
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: feQ6rbADOLD8iF/45+9s5kvcJ6IZWeCsHG56MQyBBtU=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e7:f7:58:60:a4:71:aa:7d:24:ca:f9:c6:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=5126db889701b659a7f6ee1c6e0b5a8d6d00927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:0d:51:d1:32:b2:27:9f:89:b4:d7:a4:6b:
d3:57:1e:a7:2f:7f:cd:4c:bb:73:b4:95:48:a2:c5:
58:d6:ae:53:5d:ea:7b:c4:3d:14:52:c2:77:fc:6f:
15:3b:15:df:81:e2:04:d0:74:fe:1e:3f:81:6d:9b:
07:ed:5c:d1:0a:d7:3a:e3:8b:fd:2c:fb:34:41:9b:
17:88:ea:92:20:f8:29:cd:13:df:45:11:16:05:e8:
1a:1f:ae:1b:ae:a5:d5:9b:2f:76:42:29:5a:80:e9:
bc:f0:25:6b:55:95:95:25:2a:aa:91:48:3b:fa:13:
f3:a6:90:0d:08:2d:34:c9:f0:cc:50:5f:57:3f:f2:
29:90:f4:a4:cf:b9:9d:8f:a5:bf:f9:cd:fe:5b:35:
01:2e:17:21:f4:6f:cd:ae:a7:69:ac:87:94:55:5c:
14:56:4a:54:aa:70:10:c1:48:e4:e5:b6:04:da:8d:
8d:92:1b:90:b6:69:be:03:f7:e9:1e:91:f8:4a:2b:
af:06:1b:73:7e:8b:c1:22:97:14:95:f5:c5:f0:de:
87:fb:7f:bb:82:04:00:a7:96:f6:ed:3b:8a:38:fc:
c6:83:a7:b5:b6:5a:72:8a:14:d3:43:64:a0:fb:2e:
3d:24:81:a5:c9:8f:56:52:ea:35:4c:ad:9b:d6:d7:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:DB:88:97:01:B6:59:A7:F6:EE:1C:6E:0B:5A:8D:6D:00:92:7C
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:44:da:20:8d:05:81:21:9c:0d:7e:d2:d9:a8:f4:e5:cc:19:
17:00:8c:d0:76:4e:53:88:08:b6:22:72:2a:5b:b5:00:64:c3:
71:34:1b:87:24:bd:cd:0d:4e:05:7d:cf:6d:96:5f:4a:53:96:
70:de:01:fa:cc:97:b4:1d:3d:97:26:64:a0:a2:f3:a5:4a:e0:
a0:95:18:f5:5e:4f:5c:23:6e:aa:4e:8b:fa:f0:8a:bd:15:3d:
99:b3:d7:e4:a3:13:45:72:e6:50:d5:b1:36:6a:da:07:46:4f:
31:8c:8f:9f:46:92:3d:06:f6:7c:53:9b:1f:ce:2d:c3:00:04:
cd:0a:1e:c8:38:4b:92:47:67:8d:4f:75:01:e9:b8:f9:d2:8f:
66:d1:9a:7a:4a:cc:42:e4:5d:77:cf:8c:5c:2a:a7:2d:c8:cb:
4f:f3:66:9c:1f:8c:56:b9:16:61:ce:95:73:e3:09:0a:d6:95:
1c:87:11:e9:48:c4:c1:df:a9:42:ff:a2:f5:bb:92:ab:f7:67:
03:5c:e3:57:1f:b4:28:d3:09:e6:59:05:a9:72:a9:d6:4a:28:
12:ab:6c:72:a0:91:af:82:d5:9a:8f:d5:af:f0:ae:f6:f5:27:
d9:22:de:85:ad:80:40:73:cc:86:fb:70:ac:2d:0a:ef:9c:b8:
e7:75:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client