
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: zbR0QCjEMNj3mxybIYEkQ5Q8YTLCF7c0r1yG3f0MXow=
Subject key identifier: 58:4C:89:36:6F:85:59:AA:33:64:41:70:DF:01:49:83:D3:CE:BC:00
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 01A14BE1C343C37A8B01FBC2CB3BCD002B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1AAC
Signing time: Sat 17 Oct 2026 22:00:49 +0000
Manifest this update: Sat 17 Oct 2026 22:00:49 +0000
Manifest next update: Sun 18 Oct 2026 22:00:49 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: YRn+OUqMytOTEJ3Z/Dfa38gszA9GR4/c9Tm3RqcGbwc=)
2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e1:c3:43:c3:7a:8b:01:fb:c2:cb:3b:cd:00:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Oct 17 22:00:49 2026 GMT
Not After : Oct 18 22:00:49 2026 GMT
Subject: CN=584c89366f8559aa33644170df014983d3cebc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:a8:4b:97:79:41:ba:f2:33:24:c9:37:37:
74:f6:47:3f:91:c1:c4:a8:50:63:3a:8b:7f:13:4c:
52:1b:7d:6c:ec:5c:cc:16:53:6b:87:78:57:9d:ac:
4e:eb:34:37:41:f4:56:e8:5e:b4:71:e3:30:25:26:
5c:9f:76:d3:51:17:68:d5:a1:d2:cf:c8:f9:58:e9:
5a:a2:ed:66:e8:97:08:08:04:32:a8:86:aa:78:c7:
ad:b7:b3:65:ee:4c:10:e5:c4:12:54:44:b1:80:80:
e7:e3:d4:6b:16:aa:bb:00:bc:4c:3b:dc:c7:9e:70:
71:14:46:11:69:b6:90:47:59:dd:8a:c3:01:3a:b5:
a5:a4:27:98:5c:2e:97:15:59:93:5f:1f:cf:fc:f0:
27:41:7a:aa:0b:ac:bb:21:a1:df:4f:98:35:af:91:
07:1c:39:1a:dc:b2:13:6e:bc:ab:05:d3:49:b0:9c:
8c:8b:33:1c:30:23:c5:b4:5f:d8:69:c9:22:c1:9c:
a5:30:35:a9:09:21:64:80:86:ba:17:41:20:96:df:
17:bd:67:12:bb:8e:6b:ec:3c:86:7a:86:9b:5f:57:
3c:bd:2c:55:96:18:ed:a8:36:c4:5a:8f:ec:09:f4:
1a:57:b6:86:cc:22:2c:22:7e:a1:22:1b:12:17:5e:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:89:36:6F:85:59:AA:33:64:41:70:DF:01:49:83:D3:CE:BC:00
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:9a:2c:de:43:8c:a3:4c:e8:a8:90:8c:58:74:98:e5:6c:
ed:7d:4d:2a:71:65:4c:f0:96:0b:e1:66:03:c7:46:0b:c3:86:
1a:a0:a7:e2:d7:84:15:e7:12:6a:f5:f2:41:5d:8b:cb:91:85:
d2:90:79:9c:d9:08:a3:00:b4:95:30:26:af:3c:15:af:e7:63:
77:fa:a6:4f:70:7a:77:b2:9e:57:16:12:bf:c7:a1:9e:fb:ec:
94:40:00:3e:c2:c0:61:a4:31:66:3e:51:fc:93:be:8e:cd:e1:
0b:e2:d9:91:48:fc:02:53:aa:e0:70:ff:9d:b1:82:28:20:89:
34:0f:09:38:b5:79:66:fb:66:eb:24:6f:c6:f9:fb:59:0a:35:
c2:9c:99:50:75:ae:6b:2c:24:d8:92:0a:3d:bf:0d:c1:19:81:
17:ed:99:a5:c5:5a:fe:e0:d7:4d:f5:06:55:ec:53:ea:86:db:
54:16:e9:c4:f3:37:9b:78:d4:32:b7:63:2d:43:90:60:86:b9:
da:69:b2:c9:69:34:03:63:f6:15:37:c3:ee:0b:62:f2:b7:b3:
8b:18:ee:dd:94:b8:3d:5e:e2:b2:05:e3:ff:52:5c:81:c4:e1:
74:87:9b:b5:ee:b0:1e:b0:e3:38:47:38:1c:91:73:4b:aa:22:
ea:a3:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:51:02 2026 by rpki-client