Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: K4vJBTl+m7RGaWTkwzf05iFeCl6a5L1l+XdagbMopi0=
Subject key identifier: DC:0B:25:FB:E1:6B:2B:58:DB:72:BF:CB:6A:53:EA:1A:AC:3D:C0:4B
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 019E303BA80175E20FFDCC6C40882F511DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 10:01:16 +0000
Manifest this update: Sat 16 May 2026 10:01:16 +0000
Manifest next update: Sun 17 May 2026 10:01:16 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: LT2+ZIiyqXNwz+s4FQQsewxw1phOOhyPGXHM2iSg5aM=)
2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:a8:01:75:e2:0f:fd:cc:6c:40:88:2f:51:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: May 16 10:01:16 2026 GMT
Not After : May 17 10:01:16 2026 GMT
Subject: CN=dc0b25fbe16b2b58db72bfcb6a53ea1aac3dc04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:9b:83:f3:90:6c:6f:39:36:a6:1a:f3:f5:
ba:73:06:c1:7d:09:f7:9d:14:ac:eb:18:3c:a5:1f:
00:83:ee:06:65:3e:a2:bf:60:0f:bf:ce:e0:fd:52:
c2:8f:4d:d2:44:be:4b:3f:0b:c1:72:a7:f8:d9:a6:
d3:82:ff:b1:f5:c4:58:8f:35:39:24:d3:5f:db:cb:
c9:87:16:5d:22:8d:16:b3:f3:43:59:76:29:e8:41:
64:21:81:94:64:58:bf:02:09:22:20:3a:ed:f9:da:
b1:83:13:0f:83:5c:1b:4f:1a:b9:ca:b8:45:6c:8a:
15:e4:7a:8a:44:3f:38:6a:8a:7a:ee:ea:d4:28:89:
ab:cc:58:e3:1f:87:44:11:92:ba:80:6e:a5:ac:65:
e4:da:ca:32:2d:3d:1e:1e:ea:af:c9:bd:7b:f7:d2:
2e:ac:21:ab:c1:5f:d9:47:65:6c:96:f5:3a:6b:88:
1c:5f:60:76:c2:99:dc:b2:e4:04:d2:4e:7b:57:0e:
50:56:c6:eb:36:cb:dc:4d:53:75:af:cb:45:ed:5e:
33:73:4c:41:37:51:64:57:67:60:a3:47:04:8d:43:
fc:ea:41:46:a9:60:f1:e6:a9:25:8c:5c:79:ac:47:
b5:93:0c:13:23:98:bb:79:5c:3e:13:d1:43:3d:ff:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:25:FB:E1:6B:2B:58:DB:72:BF:CB:6A:53:EA:1A:AC:3D:C0:4B
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:7c:0c:ad:43:fb:4d:12:64:6c:dd:59:97:93:36:20:a9:
3c:18:4e:29:0a:76:83:98:2c:0b:d0:3a:51:6d:fa:24:66:53:
bb:82:0f:84:23:9a:c0:29:57:b0:e8:e3:ff:7d:aa:01:d9:61:
aa:9d:02:00:fc:e7:22:49:0d:ef:2c:53:1e:d6:00:d7:a3:86:
63:7b:ff:83:23:42:bf:70:dc:74:e3:2a:c7:1e:7d:cc:b2:86:
07:fa:a1:c3:a8:69:c8:9e:f8:24:8e:ff:20:18:4c:4c:c2:cc:
a7:86:44:76:89:0c:b1:8f:82:80:20:b1:04:41:f9:e9:23:45:
ab:fe:b3:c0:bc:4a:0a:a9:c0:0f:d1:77:45:c8:4e:0e:23:b1:
72:45:ab:72:5e:b6:80:50:e9:cd:36:00:d7:0b:ba:61:ae:7a:
24:38:eb:d4:5a:15:2e:58:cb:6b:a4:62:01:db:69:26:87:2f:
e0:1c:1c:9f:f0:40:1f:1c:45:00:31:21:d4:2e:a2:f0:99:53:
16:20:b5:96:03:fb:ed:5a:30:9a:1f:15:1a:53:17:74:e1:bb:
57:34:34:7c:30:da:f0:81:65:4b:ca:d6:e8:9c:8a:72:58:e0:
58:4d:a3:93:2a:55:de:bd:cd:75:f9:cc:34:40:87:bf:d1:ef:
b9:c3:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:42 2026 by rpki-client