Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: c5L0BoOUenjXaSC8MyLLRtYVo3/LbsbFVz3tMZ+hM7A=
Subject key identifier: 5B:6A:E5:A0:DD:E6:80:98:D3:50:5F:DA:5D:24:46:23:41:20:FA:3E
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019D0B1F1B7FBC00B561FE89A706F566F83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 15A3
Signing time: Fri 20 Mar 2026 12:01:20 +0000
Manifest this update: Fri 20 Mar 2026 12:01:20 +0000
Manifest next update: Sat 21 Mar 2026 12:01:20 +0000
Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: vhOC9YKXG5O1V2lRwFyi0bsWPMsQocZgRfJh3yhSddQ=)
2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:1f:1b:7f:bc:00:b5:61:fe:89:a7:06:f5:66:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Mar 20 12:01:20 2026 GMT
Not After : Mar 21 12:01:20 2026 GMT
Subject: CN=5b6ae5a0dde68098d3505fda5d2446234120fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:e6:e7:0a:37:ec:ff:1b:c7:57:0c:c8:2f:
38:81:fe:6c:e5:37:c6:fe:e0:b7:37:e6:1f:81:81:
e3:cc:67:cb:85:5b:fe:17:81:fc:86:92:bc:9b:2d:
61:b2:a1:2e:69:b4:89:ca:e9:66:0e:da:22:bb:d1:
82:9d:47:35:15:14:c3:09:f3:5e:fc:7a:2d:8c:6e:
64:8f:27:08:aa:e1:ff:a8:5a:c7:e0:18:89:13:2d:
e2:96:39:09:aa:9b:16:d2:3d:82:f9:92:65:81:b9:
93:48:8b:4b:7d:ff:2e:94:7c:3e:8f:ba:4b:30:3b:
e7:1b:5f:0e:e5:0a:61:3f:da:65:5d:2e:27:15:71:
5d:34:05:06:89:c4:b4:b3:2a:79:ae:82:bd:c6:8b:
c7:6a:3b:9e:c0:1a:2b:93:c7:70:55:63:7d:cc:1b:
2f:4d:ae:b3:9a:1f:07:4a:63:38:6f:27:11:61:5b:
4c:95:3f:71:c8:c2:a0:14:e2:39:8c:45:06:e0:f7:
14:fa:61:72:40:7c:31:74:11:d2:3d:cb:10:b9:10:
bf:54:ae:ee:26:27:ad:97:07:ee:98:95:d0:06:2d:
eb:07:08:75:74:11:d6:27:56:73:da:24:02:5d:ee:
27:c4:c8:83:02:a3:50:2b:80:17:36:1d:a5:c0:01:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:E5:A0:DD:E6:80:98:D3:50:5F:DA:5D:24:46:23:41:20:FA:3E
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b7:de:7e:6c:67:11:7c:58:07:83:8d:f9:47:5e:b2:3f:7b:
d1:78:28:3c:6f:6a:9e:34:99:da:2b:55:f2:83:e9:84:de:5a:
dd:04:4c:19:f4:1f:63:db:0b:14:24:05:e8:bf:cf:6c:10:5d:
1f:bb:e1:59:f2:0e:22:1e:95:75:22:99:53:ff:b3:df:3b:37:
8d:c4:39:23:ec:be:ea:10:b0:49:56:b2:16:03:ed:62:1b:30:
21:61:f1:1b:24:3d:42:1a:cd:d7:39:f5:40:7c:25:6a:7b:bc:
62:71:fd:dd:27:d4:38:67:b0:d3:bc:11:0b:8a:54:ce:5f:81:
24:48:d8:a2:55:94:eb:99:2a:a5:6a:2f:15:40:26:de:3f:5a:
50:cb:08:ad:be:f7:ae:3b:a4:2d:1d:b1:5a:fd:50:76:9c:bf:
eb:3c:0e:47:f9:54:8c:59:97:17:0f:3f:f1:ee:ec:36:04:a2:
bb:81:78:8e:e7:bf:63:e4:24:40:7c:a4:af:58:26:e4:f1:20:
96:44:3b:57:59:39:66:20:bc:62:63:e5:f8:d4:9d:4e:c2:6a:
ad:86:8b:af:94:44:3c:28:03:19:bb:b3:5d:d8:df:8c:7a:70:
9f:e1:70:35:97:4d:fe:c8:83:47:ad:d3:31:3e:bc:e9:5f:4f:
c7:d6:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:38:36 2026 by rpki-client