Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: vKb1v7m1Avm9ACzkLFw73cO+lFYPVLqiXm1ymksuON8=
Subject key identifier: 7C:FD:72:60:02:40:4B:C3:66:14:9A:6A:79:E2:49:25:16:B5:BF:AA
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01A00402AF374E83D9395A617924D2437645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 172D
Signing time: Sat 15 Aug 2026 06:01:19 +0000
Manifest this update: Sat 15 Aug 2026 06:01:19 +0000
Manifest next update: Sun 16 Aug 2026 06:01:19 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: chIgqn0k1eSirGf5KVNEjN1H1P28ANyALoyOn1T4CoU=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:af:37:4e:83:d9:39:5a:61:79:24:d2:43:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Aug 15 06:01:19 2026 GMT
Not After : Aug 16 06:01:19 2026 GMT
Subject: CN=7cfd726002404bc366149a6a79e2492516b5bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:67:50:11:0d:09:43:8c:34:21:97:1e:86:
4a:be:ac:0e:db:57:96:08:2a:2e:32:30:92:15:1f:
44:b8:45:aa:6a:62:71:a4:44:8c:11:77:dd:4a:37:
1f:c0:ff:1f:33:bc:07:2b:b1:64:a8:b5:9d:0c:5b:
f6:d5:30:c8:4c:20:5d:60:a8:05:7c:75:c7:97:bf:
42:6b:1d:19:87:9f:45:9f:9b:89:2b:6f:9c:9c:24:
9d:de:bb:55:25:27:3a:74:d5:3c:1a:25:89:ce:bb:
1a:d5:1c:43:de:2a:94:1e:43:79:2c:10:d8:d8:c8:
8d:3b:25:fb:b2:06:6d:a2:45:2f:bf:66:15:0f:9f:
dd:ad:ef:f0:70:3a:64:4b:7a:b2:2a:44:d8:c7:e3:
55:0e:40:83:72:3f:12:2f:c9:f3:5d:ef:e9:87:d7:
49:24:9a:4c:44:ac:5f:74:f1:3f:01:33:89:7d:a1:
9b:34:44:b3:ee:15:64:cf:a9:96:d5:ea:02:83:46:
13:57:f6:05:1b:af:e1:bc:09:a3:9f:8d:1c:b3:04:
14:88:23:f0:10:0d:b9:db:96:cc:4a:ad:6a:bf:ba:
38:e2:38:5e:a9:0a:ca:10:90:13:05:09:c4:3d:4b:
2e:a9:aa:6b:28:b2:ad:89:58:1e:21:ae:be:29:d1:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:72:60:02:40:4B:C3:66:14:9A:6A:79:E2:49:25:16:B5:BF:AA
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:fa:1d:08:6d:da:8b:0a:c2:05:cd:97:b8:28:87:78:14:
5b:eb:b9:9e:39:ec:3e:a2:61:27:d8:86:ed:b6:f8:25:5e:9b:
f8:22:fc:a5:65:be:93:8c:46:4d:d9:90:47:df:b3:2c:bb:10:
af:d4:dc:a7:09:63:ec:3f:46:4e:1c:98:64:c9:fc:64:5e:28:
ad:dc:d4:dc:8e:ca:8f:94:e0:ce:a7:fa:19:48:1f:58:7c:83:
3c:28:64:e0:b0:2d:f1:ab:1e:5c:f1:84:9b:85:d2:44:df:cc:
60:a3:02:f9:62:0d:75:53:07:3f:9f:62:49:be:31:e9:17:16:
56:64:93:c9:9f:dd:2f:d0:5b:74:a4:cb:99:b5:9f:d9:44:cd:
9d:c9:79:ce:dd:7a:36:dc:d4:8c:d5:6a:46:f9:ef:ce:c0:b9:
70:c5:89:b4:87:ca:48:8b:8a:8d:a2:48:84:db:35:d4:44:d8:
ee:b2:9b:43:81:ee:a9:cb:eb:27:5c:94:02:87:05:4d:c9:a6:
2b:06:15:5f:aa:38:41:0e:95:99:52:68:72:79:17:06:e0:84:
ff:a7:ff:21:91:48:ee:8c:6a:2b:96:7e:76:58:e4:e9:fe:59:
d1:48:af:7b:a8:7d:34:2f:6f:be:fd:72:1d:c4:51:a8:7f:9b:
78:0f:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:30:19 2026 by rpki-client