Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: c27oK8tYHXiI5Ng4BwtVGpwxbbbn+RfvMLwBo4Hfgfo=
Subject key identifier: D3:43:8A:CE:16:11:17:94:1F:25:CE:74:8D:0A:CE:3E:58:B9:56:CE
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019F17F9F859AE0AF3BA4772D6E75CF87706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 18B8
Signing time: Tue 30 Jun 2026 10:01:25 +0000
Manifest this update: Tue 30 Jun 2026 10:01:25 +0000
Manifest next update: Wed 01 Jul 2026 10:01:25 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: Qq5aB/811vid6A8jHL2Q62/VJRGJjl+bX+NACMQ1g9o=)
2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:f8:59:ae:0a:f3:ba:47:72:d6:e7:5c:f8:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Jun 30 10:01:25 2026 GMT
Not After : Jul 1 10:01:25 2026 GMT
Subject: CN=d3438ace161117941f25ce748d0ace3e58b956ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:2d:3b:28:ca:9b:65:ca:23:52:78:49:23:
99:e4:ea:f2:11:b1:35:59:01:17:99:22:71:64:45:
e9:b3:9b:c2:67:14:8c:f3:74:b7:db:b7:a3:76:fb:
8f:6f:22:e3:74:33:8e:8d:84:d0:ce:06:3a:a0:01:
cc:41:30:47:28:8e:81:5b:a5:02:5f:41:9b:85:68:
57:69:1e:d5:2d:cf:92:44:11:85:57:00:db:c2:12:
16:68:b4:90:fc:05:d9:5d:f9:1e:71:96:92:04:6c:
68:3c:5b:bd:d7:fd:b1:8b:ad:7c:cc:43:c4:e0:8d:
8a:d7:a5:9f:c6:c7:68:5e:ca:c7:ea:e3:e4:50:32:
cc:82:2f:27:43:85:a7:81:84:f4:a4:ba:e2:8b:4b:
d0:99:b1:b8:48:f7:e2:74:f1:04:63:ad:21:a8:a7:
55:06:ef:7b:1d:86:b5:1d:b6:95:08:4d:d4:67:12:
76:62:2a:c6:94:de:80:a5:80:c0:c7:31:f1:df:76:
55:0d:48:c8:e4:28:52:c4:15:b1:3f:25:da:2f:3b:
a5:47:f9:0b:e2:1f:e8:ec:e1:f8:aa:7b:de:04:44:
43:3e:d9:29:16:b9:1c:92:72:14:b2:b1:43:52:a3:
36:c8:3f:28:8c:6a:a3:9e:41:8f:db:2c:77:46:14:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:8A:CE:16:11:17:94:1F:25:CE:74:8D:0A:CE:3E:58:B9:56:CE
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:13:b1:d4:57:05:44:36:b1:b8:3b:b4:5a:d1:d6:a3:09:f4:
93:32:7c:bb:5f:35:af:f5:8b:cc:b1:51:8b:8a:8b:cd:bd:0b:
c3:69:39:2d:35:57:92:36:a4:84:4f:0b:64:96:46:83:2f:38:
9c:74:65:43:c5:24:44:d3:c3:c7:02:1a:22:c9:2f:82:9a:b8:
ec:a3:31:86:71:6b:c6:e4:6c:a2:5c:4c:ea:7f:e0:94:7f:20:
9a:6f:3d:67:0b:00:68:33:f4:ab:24:70:f6:2c:dc:c5:5c:e1:
f6:8e:d0:f3:e7:e1:70:ef:e7:b1:a6:31:49:f3:1c:99:60:6b:
c8:ad:96:f0:59:c6:8e:e3:90:bd:0c:22:fa:58:fd:cd:89:12:
c4:36:74:7f:4a:6f:0b:a8:22:e1:0c:33:98:0b:a9:6c:11:6d:
1b:0f:b7:c0:28:9a:cc:14:ff:81:4b:47:a6:25:1f:1a:5d:9d:
35:1d:b4:f7:c5:eb:c1:07:5e:e0:17:a2:86:d4:31:b4:f6:99:
96:83:b5:ad:99:96:a5:cb:ba:41:50:14:76:9a:fa:ba:0b:4e:
ad:c3:df:92:aa:72:f2:2c:9c:4c:60:f0:c7:ce:4d:6f:c3:ba:
55:33:7c:72:59:ef:ab:7e:8a:1b:1b:22:57:e0:10:33:72:85:
7b:ef:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client