Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier: GS3jtfG6BhljeyPGCLP11y3n8FAs7X/xjsJmYF2gNMo=
Subject key identifier: 0D:68:03:02:C5:48:A9:D3:1F:FE:F4:A9:69:66:6A:2C:05:89:DC:44
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial: 01A000938DB1CEF15D4DAC3FCBDBE5F3CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number: 1995
Signing time: Fri 14 Aug 2026 14:01:05 +0000
Manifest this update: Fri 14 Aug 2026 14:01:05 +0000
Manifest next update: Sat 15 Aug 2026 14:01:05 +0000
Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: cAxxGAlyMd/5/SpCAFP9c3hp5pw+E49SNVjA04/xgZ4=)
2: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (hash: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:8d:b1:ce:f1:5d:4d:ac:3f:cb:db:e5:f3:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Validity
Not Before: Aug 14 14:01:05 2026 GMT
Not After : Aug 15 14:01:05 2026 GMT
Subject: CN=0d680302c548a9d31ffef4a969666a2c0589dc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:67:6e:a9:c7:4f:1e:1f:80:b4:0a:78:f6:
a6:de:cd:42:e9:23:68:e9:c5:6d:0c:42:50:85:69:
f6:5a:37:c1:2c:45:f3:d4:74:b2:4e:6c:8e:a4:dc:
25:f9:ef:bd:24:5a:db:86:2f:e0:1b:8b:db:4e:b8:
d4:e5:0f:1a:e1:bc:b0:21:9c:4a:b8:47:87:69:44:
8e:4c:21:c3:d2:f5:58:c4:9f:95:b7:2b:83:33:f1:
30:18:63:4d:2d:3e:76:84:09:d5:db:70:69:6a:56:
2b:d6:b4:43:49:d3:f2:28:68:b2:23:45:df:7b:ba:
41:28:9f:21:24:51:3b:1e:0b:39:55:50:74:dc:57:
6e:65:8a:4e:2b:f8:50:7b:9c:02:2f:8d:9d:a7:e8:
6c:c6:c3:9c:e8:14:52:50:7b:1c:c4:58:1c:c5:2f:
d4:1f:64:34:5c:84:0f:8d:cd:9b:2a:7e:e5:ea:f2:
e4:18:6b:d4:75:75:d6:97:dc:aa:92:54:b8:28:95:
91:bc:5a:61:bf:d9:77:ec:e4:6e:80:8a:05:69:77:
02:9f:b1:c5:97:4b:50:09:fa:4a:e0:bb:37:3e:11:
4e:8c:0f:a7:dd:5a:e7:62:aa:ff:3e:98:88:58:ea:
71:7f:b3:1f:7b:d0:8a:00:4f:c9:98:3d:a1:0b:11:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:03:02:C5:48:A9:D3:1F:FE:F4:A9:69:66:6A:2C:05:89:DC:44
X509v3 Authority Key Identifier:
keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:c6:2d:53:4c:a9:00:f1:de:33:0a:6c:f2:d2:5e:b2:25:
6c:27:79:dd:b0:16:d9:3b:45:bc:2f:7c:64:2b:72:00:0e:92:
6b:fd:bd:69:90:01:7e:2c:b2:e9:9f:f2:36:13:ef:91:ea:16:
8b:6d:5d:4a:ef:1e:16:71:41:2b:01:f7:ae:1d:f2:1a:3d:e8:
16:c8:ff:53:09:bf:84:a1:dd:29:08:e0:50:a1:4f:71:13:95:
37:be:b4:ff:eb:fc:76:da:54:f6:78:51:36:37:3e:a8:08:0b:
72:80:d7:32:78:24:b2:62:c8:7c:db:4f:29:38:ab:19:c3:bb:
d8:13:a6:87:ec:bf:38:33:cb:76:6b:45:57:01:e6:bb:53:47:
f0:0a:92:51:02:87:22:71:25:0f:ed:b4:b2:c9:6a:ef:de:b1:
80:f0:46:b2:5c:eb:e1:e0:90:2e:30:4a:98:5b:22:0e:5e:90:
ff:ec:45:50:4a:03:db:bf:10:9d:db:16:f7:aa:18:00:b8:78:
90:b8:30:de:99:5c:56:5f:f2:2f:e1:e0:ef:f3:6d:f4:09:61:
a7:89:d7:b4:cb:9c:4c:5d:c2:4e:6a:19:c8:55:78:55:1f:1e:
55:07:81:71:20:2f:ae:50:3e:0f:01:d8:e6:f2:fb:a6:36:c8:
b3:f5:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:14 2026 by rpki-client