Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: WBoPIPW4OroapWom7z4MmaRCyvK1Iwk6z30yHFZ3BCo=
Subject key identifier: 17:89:1B:D5:36:0C:BE:0D:69:21:92:AC:5C:DF:CF:C6:93:7D:23:FE
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019CE591240D7D4632A7468DCE236ECA4EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 144E
Signing time: Fri 13 Mar 2026 05:00:20 +0000
Manifest this update: Fri 13 Mar 2026 05:00:20 +0000
Manifest next update: Sat 14 Mar 2026 05:00:20 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: qsByhjHqyNslOlUB4g91Ah3TE5auMgNerPd3N0XfW18=)
2: GJOoU-343CEzQJKM7Tgkkopjnfc.roa (hash: K8/YlGCuLAIO9UgXpY3V1KHiQod3PTuMQD73e0fNF1U=)
3: yctCqdF2GcTXWy0WmDYHPzl-WtQ.roa (hash: FQFO1j2YPQTxKyeArPzCOMAvtASBLvUVTye3eM/YxHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:24:0d:7d:46:32:a7:46:8d:ce:23:6e:ca:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Mar 13 05:00:20 2026 GMT
Not After : Mar 14 05:00:20 2026 GMT
Subject: CN=17891bd5360cbe0d692192ac5cdfcfc6937d23fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2d:92:01:bb:b8:a3:80:2d:e9:d6:c2:1e:61:
72:cb:c4:f8:61:f7:88:cd:6d:30:77:83:a5:bc:4c:
c0:63:c2:4b:2d:66:f3:3a:e4:be:c6:c9:db:52:37:
55:ea:28:9c:4b:78:3d:df:c7:99:06:3e:30:0d:63:
c6:b3:f2:5e:5d:27:73:05:a3:aa:11:36:28:87:2d:
4b:e1:c3:62:94:cb:01:c2:8a:51:ae:e6:6f:e6:bd:
2e:84:d0:ea:53:95:dc:01:c4:6f:fd:d0:1b:b9:10:
74:3a:e7:53:07:c9:d4:fc:79:ac:cc:96:68:ba:99:
6b:bf:fe:56:41:29:95:d4:8f:9d:d3:b3:08:87:96:
c2:9a:22:53:3d:5d:09:bf:54:f7:c7:95:d0:1b:84:
2e:44:a2:35:95:9d:83:53:5c:4d:df:2f:9a:8f:b7:
6e:4c:3a:ab:7e:b7:c6:ac:cb:6f:0f:f6:62:b3:85:
8b:4b:31:c3:61:0e:d4:0f:68:19:07:4e:38:b0:ca:
63:ab:b6:be:58:b5:37:23:66:45:1d:8a:e2:55:46:
4d:9d:c0:e2:1e:9f:f7:79:e6:fc:b1:f9:ad:21:f0:
d7:9c:68:3d:05:36:f7:dc:bd:99:b7:91:1a:25:e2:
f7:e5:72:91:9a:4b:58:08:a7:a6:20:d4:a4:73:a3:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:1B:D5:36:0C:BE:0D:69:21:92:AC:5C:DF:CF:C6:93:7D:23:FE
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:10:c7:08:f4:e1:14:e8:3c:71:b0:59:02:4e:5f:26:bf:eb:
c7:6a:80:8d:a6:0a:aa:b5:34:4d:70:67:f8:ac:e6:46:0d:c0:
46:6f:c6:c0:63:86:84:64:a5:08:d9:07:7c:d1:8c:3e:53:c2:
f3:7a:c9:47:bd:cb:57:55:86:de:54:fd:55:7d:33:88:1e:e3:
67:eb:1b:66:21:37:26:2a:8f:4c:77:ad:9d:48:4f:a8:fc:3e:
ee:78:7e:51:f9:97:45:eb:8d:2c:25:66:67:dd:7f:d3:bf:9f:
23:f3:2f:fb:1c:ab:36:f9:5a:14:14:98:d8:86:d5:ad:36:8e:
1b:e3:eb:43:86:19:41:fc:5e:45:e8:da:20:6d:f1:25:b9:2f:
cf:6e:be:ba:8f:5d:7e:c4:16:55:23:07:28:ff:f8:28:5f:57:
9b:51:f1:13:70:8b:10:09:f3:a1:e7:4c:4e:21:01:88:fc:20:
a4:fa:d6:05:78:92:b2:0a:6c:d0:7e:9e:dc:ed:91:e9:3e:84:
ce:fe:83:58:be:7a:57:22:bb:94:1a:33:18:71:b8:d5:a5:84:
33:3a:24:00:cb:5b:bb:1e:4a:c5:93:9f:2e:2c:63:33:f3:b0:
c1:60:23:b1:71:0d:35:d8:6f:ff:42:97:48:ec:b6:4a:7c:58:
13:89:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:39 2026 by rpki-client