Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: ylKXstjUgXI4XznEu76W3wjcBTIitzm/TPeErcPpChs=
Subject key identifier: 78:C8:A0:FA:2E:9C:3E:09:AF:93:12:C7:0F:90:97:4C:73:EB:BD:FE
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019E28F012997095CC058D88BE7F81B22627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1637
Signing time: Fri 15 May 2026 00:01:22 +0000
Manifest this update: Fri 15 May 2026 00:01:22 +0000
Manifest next update: Sat 16 May 2026 00:01:22 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: B8zjNEwdyk4+x92v+5zlOmEDaUUz/OzMKtawCe58aaI=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:12:99:70:95:cc:05:8d:88:be:7f:81:b2:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: May 15 00:01:22 2026 GMT
Not After : May 16 00:01:22 2026 GMT
Subject: CN=78c8a0fa2e9c3e09af9312c70f90974c73ebbdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d4:1b:42:63:f4:6e:77:66:9b:f4:58:5b:96:
a6:76:62:2d:de:8f:a7:b6:c6:3c:05:06:58:71:90:
da:1c:8a:2e:37:85:a6:e7:9f:aa:0d:fe:e0:4e:3c:
c9:b2:c4:2a:58:f4:70:87:0f:97:82:d4:b7:dc:36:
a3:2d:95:4e:05:c2:2c:cf:3a:38:3b:67:a4:22:a5:
9a:a3:5c:93:5f:7c:30:96:70:86:46:90:4e:f0:e4:
03:a7:e7:9a:83:1a:a6:14:e5:09:84:02:58:a5:08:
1c:11:66:67:40:29:74:8a:3e:11:7a:93:9c:19:52:
e7:09:29:e2:ee:e5:2e:42:c2:9b:89:1c:21:d7:d2:
28:14:b8:95:8b:17:df:9d:e9:59:33:3a:b5:b4:19:
cf:61:cb:56:4f:7e:9a:88:50:59:21:e6:af:46:97:
08:ac:1f:4b:6e:e1:18:32:8c:e1:df:67:28:8b:45:
f5:51:49:7c:a6:9a:07:eb:f0:25:df:79:a2:ba:75:
a5:9d:a0:36:71:32:95:48:83:22:2c:e5:57:3d:6c:
dd:66:63:8b:28:01:3e:97:86:3f:53:2e:63:b7:65:
2d:7f:89:12:1e:08:9a:d5:f2:2d:36:1c:b4:a8:10:
39:3c:3b:6d:8c:95:b7:bd:58:2f:ff:15:fa:ce:0e:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:A0:FA:2E:9C:3E:09:AF:93:12:C7:0F:90:97:4C:73:EB:BD:FE
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:33:f5:25:29:48:94:f8:10:79:10:50:39:4e:e1:7c:05:d9:
21:17:25:23:da:f9:fd:21:f2:f5:72:dd:ed:52:30:c2:91:35:
7b:ed:be:0e:93:5d:cd:be:99:34:5c:da:fc:28:da:49:f4:d6:
6f:95:11:4c:fc:f1:e1:ce:ce:6e:63:11:eb:4c:ea:b1:2d:b9:
74:ff:45:37:05:b7:6f:a6:18:c6:bb:30:2b:67:b4:58:ce:46:
ae:6d:80:16:0e:c2:df:aa:fe:2d:c8:c2:b3:d8:d2:58:d5:cb:
4a:43:94:bb:ff:6e:74:3b:aa:8b:65:2e:a1:84:14:d6:27:86:
f5:af:a2:66:d5:1a:a5:32:24:30:44:f4:1e:18:e7:e5:15:7b:
f7:eb:29:e1:38:b7:4f:7f:11:8d:dc:c6:a0:44:c2:bc:f8:f2:
4a:49:3d:fc:0f:b2:2e:18:ca:ad:f1:92:35:7e:ec:74:6f:a1:
49:b8:67:4d:49:2c:19:4a:e8:d6:88:1b:98:b1:7a:c5:0e:01:
9f:1f:ae:47:d7:f8:57:d6:28:08:df:4f:e2:c2:61:d4:9c:56:
ed:15:99:97:a5:bd:6b:20:68:64:23:d9:f0:92:28:52:a2:d8:
a9:9d:d8:2e:1a:8e:0d:69:e1:9e:1c:81:6e:db:b5:62:31:bb:
56:19:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:38 2026 by rpki-client