Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier: 95ktnqBrdccRk5teTtg1F5tIYfkckKevhprQZfQvkHY=
Subject key identifier: B8:21:E1:48:EC:7F:ED:93:4A:A5:3D:A5:BD:4C:D8:5C:2A:A0:F8:28
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 019D100E628F4167835CA2882A3788170816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number: 1890
Signing time: Sat 21 Mar 2026 11:01:11 +0000
Manifest this update: Sat 21 Mar 2026 11:01:11 +0000
Manifest next update: Sun 22 Mar 2026 11:01:11 +0000
Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: kHJSfAU0y+Z3WhoGMxgcjOvAeOt7d8/qAsFACL7cNuU=)
2: a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa (hash: HfOJoJtir41J/f+2Eh1+jNbOpl4HZb7UfJBs0/Ovz88=)
3: cVHvV_AfygNUxK1wLw3TaNGFbjc.roa (hash: aLS2Onqdh8tUWZKfNWq/5VUb/NC+ZJDVJlHb2Z6u8NU=)
4: wQxI0N6wQyPtnD-0275R19YpjGg.roa (hash: sn5K7ssLl2Ssv/wbg1cIpo1dVgEp9s7k3bxB61yjjzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:0e:62:8f:41:67:83:5c:a2:88:2a:37:88:17:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Mar 21 11:01:11 2026 GMT
Not After : Mar 22 11:01:11 2026 GMT
Subject: CN=b821e148ec7fed934aa53da5bd4cd85c2aa0f828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:77:60:84:b0:52:92:e5:a1:73:1e:6b:7e:
83:cd:a3:8c:ca:f3:c1:e5:97:0d:e0:03:b9:f2:69:
bd:2c:f3:a9:6c:14:de:32:68:48:ae:ff:d0:61:75:
55:00:59:eb:f3:c3:b8:24:dd:40:59:04:bd:db:90:
0e:24:6d:06:f9:43:74:2f:f5:e4:ae:03:34:b7:02:
d7:eb:f5:93:6e:6d:4f:8d:08:8b:9b:d4:64:a5:23:
b1:bb:dd:10:2a:6d:ac:7e:da:e4:ce:09:72:4c:e9:
eb:cb:ee:85:34:40:18:da:8c:08:2e:33:ca:6b:d3:
da:34:d5:5d:d8:16:df:fe:c7:49:fd:b6:ae:85:ec:
70:54:db:84:8a:73:b2:2e:c0:b5:46:df:96:ed:63:
f5:d2:45:f2:19:e2:46:5f:dc:f1:f1:98:f2:ff:80:
26:df:ec:1e:a0:3a:fd:00:fd:ad:ea:92:c8:67:0e:
d0:c5:d3:f9:85:02:7c:4b:28:40:8b:b4:ff:d3:f8:
3c:70:4c:d1:9d:c0:0b:4e:28:43:44:bc:a0:77:d2:
6e:6e:e1:6a:c8:7c:e5:71:28:3b:2e:5f:ef:f0:a7:
cb:7e:97:a8:7f:06:3f:e8:77:89:e8:0f:ad:9f:89:
f8:65:c8:7f:fc:47:a5:af:08:e1:db:2b:c6:a2:3f:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:E1:48:EC:7F:ED:93:4A:A5:3D:A5:BD:4C:D8:5C:2A:A0:F8:28
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:b4:d1:27:ad:98:42:38:0b:f9:aa:46:03:df:52:97:83:
73:b2:32:74:a0:dc:c3:33:d1:a9:89:93:43:50:bd:e0:db:aa:
2e:51:c8:27:9c:fc:4f:d3:1b:c4:ea:78:59:47:ab:92:78:7f:
0c:49:40:4d:ac:de:ed:77:ef:b9:ac:95:92:1d:14:67:aa:f9:
ca:bb:98:88:87:0a:94:19:3a:95:f6:7d:27:b3:b0:ea:c3:69:
2d:9f:9b:e6:a0:5f:74:bd:b1:b6:83:13:96:b7:5c:3a:ba:a6:
69:d9:c4:2d:bf:db:e1:c2:ed:79:7f:38:0b:77:0c:c4:90:c3:
6e:1d:9c:b7:e2:ca:f2:f5:4f:69:88:cf:2a:50:d8:13:53:c0:
1b:9c:77:64:29:74:06:32:69:8f:45:b7:cb:c3:d4:7e:aa:a8:
27:65:76:8f:49:28:1e:4f:ce:3b:99:40:a8:ec:01:29:43:0e:
ee:d8:c2:56:c3:0e:24:ec:d5:0a:d5:9b:65:84:a1:23:e2:5a:
e6:56:84:2e:11:ee:1f:d9:2a:7a:1b:47:4f:8a:9a:83:f1:5b:
52:86:b9:d5:ad:21:7f:b2:f7:4f:85:b1:5e:a8:0d:72:93:2a:
30:08:f8:1b:1f:db:cc:8f:3c:c1:5f:86:c2:01:17:e5:4f:69:
b4:db:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:32:38 2026 by rpki-client