Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: bJuUT+R9+kN7kWt1thLRQwj4McF0GhyN3k/3VIfZ+9w=
Subject key identifier: D2:68:8D:CB:5A:E5:FB:A3:0F:B3:98:51:A7:1F:4D:01:5D:AD:A3:FE
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019F129CB6000AFAC75B040EF9FB941059AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 16B0
Signing time: Mon 29 Jun 2026 09:01:27 +0000
Manifest this update: Mon 29 Jun 2026 09:01:27 +0000
Manifest next update: Tue 30 Jun 2026 09:01:27 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: H72LIKE35awSOmNqcdXn3HtBg6uau/I8XQk90rNlI74=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:b6:00:0a:fa:c7:5b:04:0e:f9:fb:94:10:59:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jun 29 09:01:27 2026 GMT
Not After : Jun 30 09:01:27 2026 GMT
Subject: CN=d2688dcb5ae5fba30fb39851a71f4d015dada3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:76:8f:9b:51:c6:33:52:93:6f:51:ed:8a:
eb:6a:4a:5b:de:91:a3:b8:28:e1:15:33:31:54:42:
fc:c9:5f:af:b1:4e:6e:23:af:7d:a3:7b:00:25:3d:
16:84:3a:69:3f:2f:11:92:4a:8f:0c:a2:73:41:f0:
db:eb:62:f7:3f:f5:82:78:c0:9d:56:2c:4d:f6:ee:
23:92:2f:67:28:92:58:d8:84:b6:f7:a7:68:26:cf:
7e:17:cb:cd:0e:97:dc:ce:b7:55:61:38:e1:73:93:
41:67:c8:df:dd:4f:7f:18:42:7a:66:91:98:da:e5:
78:b9:ac:33:0f:80:ef:75:5c:9a:49:53:95:1e:13:
22:ce:f4:20:9d:e8:cc:a1:6d:4d:62:72:57:05:6b:
6c:d3:a7:ef:90:3c:7a:85:f1:d6:3d:94:92:7f:df:
2d:15:ee:35:44:ec:cb:c5:25:fe:0f:19:51:ec:6d:
ef:0a:54:da:71:fa:7a:f5:c3:72:3b:38:8c:a7:80:
83:fa:da:91:8e:d9:09:9c:f9:22:0c:74:7f:b8:08:
c5:1a:d4:a8:e8:74:7e:60:1c:d5:7d:ea:04:97:4e:
94:e0:6f:c9:67:fd:2f:d6:db:41:59:40:dd:92:d2:
52:fe:e6:eb:4c:d6:f1:9f:60:de:e9:cb:b2:8c:2e:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:8D:CB:5A:E5:FB:A3:0F:B3:98:51:A7:1F:4D:01:5D:AD:A3:FE
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:5a:6b:e3:99:a9:c1:7d:63:88:37:fb:e0:d0:f5:5a:f8:
97:1d:e1:f2:ba:46:67:ce:3f:6c:6c:89:36:07:a4:6e:5d:d0:
5a:15:c6:ba:73:3c:25:2a:f2:0c:1d:99:9d:af:fd:e5:b5:4a:
dd:26:a2:9d:49:6e:3c:3a:4e:19:75:14:33:3a:8e:20:ca:2e:
72:5a:0e:28:0f:6a:fc:df:cb:04:ee:1c:56:b2:c2:63:27:f0:
09:f2:7c:92:d6:3a:96:9f:28:16:a7:dc:bd:e3:39:e3:a2:6d:
a1:7c:62:50:1c:bf:e7:d0:80:4f:da:4d:91:9b:78:a5:b9:1f:
5e:93:62:ba:c4:9f:8b:fb:62:37:88:9a:7a:b9:5a:a8:fc:8d:
0f:e0:af:d6:7c:78:b3:6c:6d:03:75:58:98:b0:32:51:02:b0:
3a:fb:69:ca:94:0a:95:9a:f0:a9:ba:fc:8b:b1:a3:0f:75:ea:
a7:70:2d:e9:db:89:c6:9c:2b:65:65:8d:d1:be:f2:9d:8a:9e:
f6:ab:71:06:94:31:a5:1c:98:99:7b:05:1f:26:51:a8:d3:a5:
b6:50:fa:be:26:ed:dd:33:63:56:8e:0e:64:12:57:83:98:06:
ce:7d:52:ba:4d:2b:1d:6a:9f:e5:75:ad:96:08:c0:ef:b6:40:
ea:16:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:32 2026 by rpki-client