Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier: R3a+P68fxsVuyqla4cGERAHSdOjfPnHzLuhQeL+/UhM=
Subject key identifier: 2A:6E:FC:56:BB:64:2B:92:E9:C5:A1:2F:60:AE:7C:C4:DC:8C:B1:B4
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 019F1943A35130EF137F1FC987C8BEE2AAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number: 1592
Signing time: Tue 30 Jun 2026 16:01:30 +0000
Manifest this update: Tue 30 Jun 2026 16:01:30 +0000
Manifest next update: Wed 01 Jul 2026 16:01:30 +0000
Files and hashes: 1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: 1WAsKlIRJHFjSfAQgpaSU7fJM0PVkJLe39AlODW8fsk=)
2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:a3:51:30:ef:13:7f:1f:c9:87:c8:be:e2:aa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Jun 30 16:01:30 2026 GMT
Not After : Jul 1 16:01:30 2026 GMT
Subject: CN=2a6efc56bb642b92e9c5a12f60ae7cc4dc8cb1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:53:88:27:46:bb:e5:af:54:73:e5:ad:4d:
f0:b8:0e:4e:25:7e:76:93:b3:89:0e:e6:03:78:e0:
ba:b6:37:c1:4e:d4:13:7c:dc:d1:01:e8:ca:87:68:
40:73:47:f9:d3:20:9a:a5:31:97:d2:56:de:36:01:
90:fb:fd:78:b7:75:bc:e7:ee:29:82:fb:d0:30:05:
35:a7:56:9d:f8:6a:26:37:bd:88:24:63:0a:76:f9:
ff:01:b1:32:39:dd:ab:f2:f8:70:fa:36:23:38:46:
13:fb:ad:52:73:6f:a2:0d:a3:cc:9d:7e:8e:58:9a:
73:5e:94:4e:21:d7:1a:ee:31:f8:e7:2c:3d:44:74:
41:14:8c:f5:6b:4a:40:a7:46:57:a2:98:5d:2a:96:
50:e9:97:a5:66:98:f5:8d:9d:7c:2c:ab:5f:c6:ed:
0c:65:3d:1c:1d:69:f1:28:03:09:f0:2f:a3:1a:3e:
7c:41:04:9a:cb:6e:eb:c3:38:a0:cd:9b:1f:9d:cd:
c1:d1:5e:45:51:27:06:6c:b7:f7:f1:ae:e1:c1:fb:
86:b7:8d:24:90:53:96:0b:9b:33:08:63:82:f5:c2:
a4:12:89:90:43:f2:1f:98:ee:d7:e7:ea:2e:0b:ee:
50:d4:ae:aa:e9:f2:bb:8a:a5:40:8d:cf:61:48:f8:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:FC:56:BB:64:2B:92:E9:C5:A1:2F:60:AE:7C:C4:DC:8C:B1:B4
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d7:ef:f2:6e:d9:3d:e7:ac:b7:96:d7:6f:bd:9f:d4:98:79:
4d:78:a8:81:75:92:8a:46:11:59:43:2f:94:e5:69:78:b7:35:
74:3f:d9:a0:de:e5:bf:70:dd:c1:08:f6:08:26:c2:10:05:d0:
67:64:95:b8:db:42:d5:74:95:3e:ba:7f:ef:53:df:eb:01:00:
d6:93:84:bc:ca:88:3d:81:21:8d:90:d0:44:f4:43:09:0b:e4:
dd:e7:ee:49:1f:11:e7:81:8c:35:4a:72:8d:78:1f:9e:d1:d1:
e8:ca:09:30:49:7a:5e:a8:74:23:b6:aa:14:a0:53:fa:f7:c8:
d8:10:bb:a0:c6:75:9a:a4:b2:71:48:cc:6a:a0:77:e9:82:08:
b4:44:b0:de:a5:e6:03:01:82:6e:5f:e1:05:83:47:27:eb:47:
12:ed:c1:d6:8c:71:7a:96:c4:e5:e0:c1:bf:a1:69:95:93:86:
9d:0c:78:0d:5e:9d:4a:ea:4e:13:74:0b:f4:f3:39:f7:3f:d5:
15:48:91:17:8b:17:fb:b7:73:99:6f:8e:af:b5:14:0a:38:ff:
43:e6:2a:89:e6:93:83:f5:69:f6:06:d7:e1:7a:d2:34:99:9a:
4b:0e:39:5a:72:8d:5a:27:91:7d:e9:34:5f:39:e2:cd:50:f4:
27:49:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:33 2026 by rpki-client