Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: QcX0GmxBHE6McAsVr/zNY0A5zJmwm1n8keIGq9m+EGk=
Subject key identifier: A4:EC:02:8D:F1:B9:0F:67:2E:48:CB:AF:7F:64:D7:BE:0B:18:5B:B3
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 019E30A90D6A82A834CD22DB994CBAEF971A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 1251
Signing time: Sat 16 May 2026 12:00:45 +0000
Manifest this update: Sat 16 May 2026 12:00:45 +0000
Manifest next update: Sun 17 May 2026 12:00:45 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: 1KQBFSAx40JD2Dz1fhLf4MzkI5yJJ5tmRGO5DVrIbRY=)
2: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (hash: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:0d:6a:82:a8:34:cd:22:db:99:4c:ba:ef:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: May 16 12:00:45 2026 GMT
Not After : May 17 12:00:45 2026 GMT
Subject: CN=a4ec028df1b90f672e48cbaf7f64d7be0b185bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:ea:37:6e:a0:68:50:73:bd:91:d4:e2:44:
ca:ce:98:16:61:6a:ba:93:b9:eb:35:f4:6e:d3:32:
97:6a:13:95:42:12:fc:72:02:bb:54:13:09:b6:69:
db:5b:ba:d6:7b:35:e7:9b:43:74:fb:eb:6d:ad:6f:
58:36:3c:f3:c3:9c:6b:c6:04:85:ba:b6:53:08:d4:
68:92:e3:e2:47:e7:42:8b:61:37:30:2e:bb:79:75:
9b:e1:d0:8c:af:e8:1b:7f:dd:91:36:11:a8:d3:50:
94:c1:77:5f:08:18:09:47:de:8c:af:2d:ab:04:d3:
d1:e3:80:b9:3d:76:ff:c1:4f:44:4c:be:13:42:f2:
a5:1e:94:70:c2:98:3d:a3:1b:cd:90:28:07:6e:96:
04:20:f9:64:65:9c:4e:ed:a2:5d:55:5b:11:62:de:
89:5a:52:b1:31:13:86:31:26:00:57:ac:2a:70:4c:
41:90:96:05:f7:11:2e:a8:64:5e:58:bc:0a:01:71:
6c:bb:bd:c8:1a:38:41:7e:85:5a:8f:66:6a:c4:7b:
6a:54:54:fa:9b:14:50:cc:18:98:9f:28:76:c9:d5:
18:98:97:ea:99:c7:18:f6:de:9c:79:c9:a1:52:c2:
1e:87:99:2e:7e:2d:2a:45:de:9b:59:16:7c:2d:e6:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:02:8D:F1:B9:0F:67:2E:48:CB:AF:7F:64:D7:BE:0B:18:5B:B3
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:5c:00:b7:cc:2a:29:17:58:64:67:50:67:3b:17:27:df:
e7:f5:4c:46:71:a8:53:61:49:73:18:40:7d:27:72:61:93:b0:
9c:67:72:ed:1f:8c:17:0c:a7:63:1d:c2:51:82:dc:3a:a1:07:
24:a0:9d:5a:c9:9b:9b:06:0f:4a:86:72:d2:6a:d1:ba:a6:6a:
5b:4d:6f:98:f5:95:d2:a7:99:1a:b1:25:a5:b8:d8:34:aa:5e:
90:79:ec:a2:11:54:0c:86:a3:3e:1b:65:44:e8:d0:15:91:9a:
c1:e0:e9:42:6c:e8:34:fd:04:c9:76:eb:8d:a8:ed:e2:30:8e:
7c:85:c7:8c:d2:a0:39:3e:9c:66:18:87:00:e7:03:fe:bc:a2:
01:b7:54:6e:be:90:d4:95:63:66:8c:95:87:2a:9e:ac:f3:14:
de:5d:7a:64:07:8b:d8:70:4e:4c:85:6b:a6:9d:7e:e4:1f:ff:
42:88:be:79:3f:73:6c:04:6d:d4:1e:bc:61:c2:03:ae:c2:08:
7d:74:2b:15:0e:1d:7a:b6:31:2a:83:56:f3:e7:25:d3:4f:55:
f5:3c:31:09:dc:08:d0:99:b0:3b:ba:ed:24:0a:7d:66:6c:ff:
58:38:6d:12:99:99:b0:b7:f1:47:31:c2:d1:84:0f:3a:e2:9b:
c1:e9:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:23 2026 by rpki-client