Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: K/hoKkIHE4aoFnGECCKhv01F13eIP3TD4c/vi1tEgdU=
Subject key identifier: 46:F0:92:3F:AD:49:D4:D6:93:11:56:56:68:33:2E:2D:FA:F3:57:76
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019F189E6999F87FA1F13A158148D8D7CDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 1472
Signing time: Tue 30 Jun 2026 13:01:02 +0000
Manifest this update: Tue 30 Jun 2026 13:01:02 +0000
Manifest next update: Wed 01 Jul 2026 13:01:02 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: lCABwdTqHzMh6QmaVBDimhE2KhJtdXuF6wj1vMjlBZQ=)
2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:69:99:f8:7f:a1:f1:3a:15:81:48:d8:d7:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jun 30 13:01:02 2026 GMT
Not After : Jul 1 13:01:02 2026 GMT
Subject: CN=46f0923fad49d4d69311565668332e2dfaf35776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:67:70:5b:44:6c:26:73:51:a9:ab:a3:63:
11:55:86:20:0a:7f:46:df:0d:57:6a:da:2a:fb:33:
2b:43:65:8e:97:d8:85:ce:04:e2:81:91:9f:6a:69:
60:b6:7b:b0:39:fd:b5:e8:5d:90:55:5c:4b:1e:3e:
ec:5d:b7:bb:3b:b7:d8:76:a3:77:33:38:33:9e:08:
20:3b:ab:74:f7:40:41:1a:a9:5b:fb:d6:18:06:5e:
ae:e4:8c:e4:98:83:e9:52:c8:fc:88:b2:6a:b8:c2:
dd:c6:13:92:8e:b1:4f:1c:53:eb:f3:96:ce:db:fc:
80:9f:55:3c:16:b3:7d:f2:d1:0a:3c:f6:22:a1:4a:
c0:dd:4a:9c:be:c9:a4:cc:0c:42:b1:ae:cf:eb:c7:
b3:25:24:9c:c8:6f:f6:07:ea:3d:6f:2a:3b:f7:4e:
a2:f0:91:e4:07:98:64:4f:e2:13:77:1d:fe:44:9b:
27:4c:77:62:e8:98:1a:bb:d0:9d:12:35:87:e2:39:
9b:79:50:82:f2:e1:ac:42:36:f0:db:1c:b3:58:ac:
7c:8a:4a:40:1c:7b:b4:3d:50:33:bb:68:bc:93:2c:
4e:72:0f:77:20:0b:05:73:10:c3:fd:36:ba:db:5a:
d2:76:7e:11:82:24:c1:8d:91:8d:e9:c8:09:db:a5:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:92:3F:AD:49:D4:D6:93:11:56:56:68:33:2E:2D:FA:F3:57:76
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:df:ee:63:cf:65:71:5c:79:d5:31:11:f2:91:4a:42:af:
13:73:93:29:0b:01:25:1a:04:2d:80:27:53:83:44:57:16:ff:
6f:9b:28:30:50:7a:7e:8a:04:27:17:a3:7f:f7:40:54:27:5d:
c5:c3:65:11:a7:79:eb:de:45:3f:5e:9d:e1:7a:9d:6c:45:19:
e4:7d:67:a4:f0:a8:d3:d1:e4:e2:e7:7f:ed:80:a7:b4:db:f0:
fb:9a:e6:65:a4:14:57:a7:35:af:eb:3c:af:a6:c3:3c:91:dc:
b2:77:f4:15:4c:bb:45:9c:65:c9:1f:2c:f9:6e:30:e0:9e:f3:
2d:f2:2a:84:82:a4:d0:fe:0e:e0:4b:f6:ab:d8:4f:0c:22:55:
42:f4:19:24:68:b0:b5:56:f6:12:e7:62:3f:b6:05:c4:f1:ae:
0a:8b:93:06:40:72:bc:56:d3:64:37:e0:93:4d:12:20:78:e5:
56:36:a3:df:f6:89:fe:0d:7e:4d:bf:a5:7b:23:aa:fe:45:16:
86:2f:55:e9:d2:20:d8:4d:5b:36:1a:d7:b4:40:d7:af:73:9a:
43:6f:03:6b:24:91:a9:b0:9e:ac:dc:cf:f5:ee:22:1b:41:ef:
73:a0:cc:47:49:08:b1:69:b9:55:df:bf:83:f6:63:a9:e0:fd:
39:6e:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:24 2026 by rpki-client