Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File: 0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier: b4t+9zI+7Ys3tDKa8o9Ph4MrrirNf00ZHYYz5ZIdgcg=
Subject key identifier: 7E:2A:EE:76:53:A5:00:98:81:74:46:67:6F:E7:AF:BF:D3:97:6A:12
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer: /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial: 019D390A4A70734D1AD1B77D45C9A2C7C2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: 2TRVtsMQjk9tfi0n4hknmuZpnb4Fi3iCT6ALAcjPIDI=)
2: GmHD_yxmhmb7r8gjp6el8HpBXOw.roa (hash: fVaQ2rKEBssbb0vmO7FX3uJ1zApwIkrOyFVIx+Y+u/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4a:70:73:4d:1a:d1:b7:7d:45:c9:a2:c7:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=7e2aee7653a50098817446676fe7afbfd3976a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:f4:c0:b2:67:af:f5:fc:6a:52:c2:90:22:
f0:0d:57:2a:9c:72:02:ac:8e:42:4b:3b:6b:c7:3c:
df:a6:9b:f0:64:cf:70:15:78:c5:7c:21:0b:26:5a:
fc:a7:4b:95:97:57:03:7c:79:ff:a3:c0:ca:e3:42:
17:aa:b7:ad:e3:8e:56:5c:ab:f4:d6:a5:42:00:39:
d5:ed:a5:9f:9d:25:b9:87:63:3c:6e:e9:98:ed:be:
7e:c4:a3:73:dd:7e:f2:fe:e7:3d:26:5b:04:82:85:
4d:62:59:05:4f:59:13:9a:da:67:3a:88:ac:ab:e9:
2f:28:2f:e4:cd:4a:bc:86:f2:d2:c8:6d:37:f7:69:
a3:cc:1a:1b:db:ef:74:82:e8:0b:a0:db:d0:7f:ee:
68:8b:bb:cb:e8:53:d3:f4:ba:01:87:7f:01:1d:b6:
2c:e0:b6:3a:1f:94:f4:3e:ad:dc:93:9d:4d:4a:1a:
80:38:0b:e3:9f:d3:1e:90:21:30:55:7e:d2:7c:be:
1b:eb:da:39:2d:b3:46:a8:2b:f6:59:f8:06:2e:43:
12:b4:f0:c1:b1:86:e8:cd:a5:2e:0e:b1:66:18:c4:
40:41:0a:ea:1f:0e:9a:b7:28:d6:49:a1:e6:c1:e5:
e9:d6:9c:b3:4f:e5:a1:2b:28:ed:61:72:f0:01:4f:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:EE:76:53:A5:00:98:81:74:46:67:6F:E7:AF:BF:D3:97:6A:12
X509v3 Authority Key Identifier:
keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:54:46:7d:9e:59:b9:c3:32:f2:04:86:f7:81:18:18:7f:ce:
af:41:e9:37:ee:30:e1:2b:22:75:4e:b8:fa:26:2a:fb:1b:fc:
48:b0:e9:6e:49:84:c0:40:e6:32:37:c7:de:51:22:c7:41:5f:
1b:b5:83:2b:95:fb:54:66:13:93:19:d1:9e:16:44:72:09:09:
85:59:25:fb:46:46:e4:93:4d:6d:18:87:96:40:d0:6f:f2:d4:
85:e1:26:a8:6b:c6:f3:fb:91:de:cf:c6:62:ae:99:97:ad:96:
8a:e2:81:89:3b:67:88:59:fc:c9:b6:ab:e0:8f:3a:af:94:35:
84:7d:a1:8c:8a:ea:70:c0:d0:76:fe:c0:d2:3c:1d:54:ba:40:
08:e3:00:a0:85:61:ca:66:15:49:c4:68:92:0d:e3:f7:12:3d:
fa:c1:21:bb:35:bd:a8:c2:40:e7:6f:15:9f:0a:30:f4:0e:fd:
76:4a:00:7c:41:d6:7f:41:2c:a3:cc:f2:04:76:9d:d5:81:d4:
60:41:ae:7f:e4:83:e4:65:e1:a6:e6:2e:bb:cd:9d:7d:e9:ba:
e8:5a:f4:29:84:bf:51:1c:8d:00:62:38:06:ef:4c:e1:db:bb:
b4:30:d1:62:10:8a:19:89:67:1f:3a:f2:8c:80:41:69:78:0f:
af:1d:1e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:30 2026 by rpki-client