Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: ydQuW/oYLm33jEgAo8KAdoCaaImS6nKNer4vQ0DeNO4=
Subject key identifier: 59:08:F7:22:67:E8:1F:37:2E:D6:6E:44:09:9A:FF:8F:31:C6:66:BD
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019D38D2E1B191382D097653862E2AFB2524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: rq9iKxljNXolLdsZ9Rp9sBEMkaChX+3GajBvrOqykNY=)
2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:b1:91:38:2d:09:76:53:86:2e:2a:fb:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=5908f72267e81f372ed66e44099aff8f31c666bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:68:55:df:0e:e1:dc:ce:bd:84:a2:f3:01:
7c:64:05:1e:83:b8:1f:44:93:d7:80:c9:21:7e:cf:
b4:f1:f1:2d:04:e2:88:5c:e2:8d:cf:cb:3e:3b:be:
5d:c0:86:8e:cd:89:24:73:c8:70:12:aa:9f:2a:8b:
5c:99:6d:9e:6f:b7:e4:22:f9:18:37:88:3b:47:41:
ed:9c:b1:33:c7:1c:fb:85:56:40:45:f5:c7:75:b9:
e8:e2:83:ac:c3:4c:3e:18:5a:1b:bf:8c:40:af:07:
81:30:4e:31:31:9b:d0:b6:87:e9:fc:0b:50:9d:9c:
d2:43:cf:7b:67:b8:46:99:0a:78:83:bd:cd:bf:e2:
ae:f1:f3:48:5c:31:c1:82:04:41:2c:08:01:86:95:
8d:97:82:ef:11:03:fa:37:6c:93:79:12:3d:26:ad:
db:30:87:3e:0d:40:30:bf:c8:53:ff:77:6e:cc:d5:
15:02:f0:72:f0:45:9b:5b:81:fd:96:2c:0e:15:17:
db:bd:87:22:57:57:c2:e2:8e:1e:d0:67:6a:f6:b5:
d8:ed:b2:da:87:e3:b4:3e:de:ae:52:57:75:41:dc:
18:bd:d4:dd:32:6c:43:ff:02:f8:35:8b:ec:61:a8:
01:2a:17:20:97:7a:66:d2:4c:e0:76:8a:91:37:c8:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:08:F7:22:67:E8:1F:37:2E:D6:6E:44:09:9A:FF:8F:31:C6:66:BD
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c9:8f:c3:41:83:45:3f:f9:ac:33:50:ee:c8:0e:a7:a5:67:
45:73:f3:66:64:31:5f:b5:43:5e:48:14:48:98:bd:1f:55:a1:
bc:81:4e:9b:de:6d:39:ee:c1:a4:44:ee:08:f8:09:db:9c:6c:
52:b5:96:8f:12:25:75:72:86:69:89:ea:88:ac:45:c9:0f:e7:
43:8f:39:d5:57:b6:1b:24:fa:c0:89:04:a8:80:49:12:d5:7a:
cf:fa:a2:83:9f:d5:a2:f2:df:62:81:dc:18:bb:f4:7a:f0:38:
2a:d0:c2:e1:85:17:9c:34:28:b3:7d:a7:59:81:4a:31:c9:ec:
d1:2c:d2:b1:d3:54:b6:8a:36:5d:88:ba:34:6b:24:40:0b:a0:
a0:aa:6c:81:1c:46:41:42:0e:68:b6:5d:be:d0:af:08:56:63:
1f:41:be:7c:54:a5:89:e7:0b:86:e0:da:29:0e:35:2b:53:27:
ef:83:71:62:77:e9:30:28:88:f1:46:89:ee:b9:86:dc:2d:8c:
94:a3:34:67:b7:e0:6e:db:56:2c:32:0a:03:37:3f:f4:c1:bc:
8d:98:d9:6e:ad:06:b4:cb:01:53:5a:7a:6f:09:d3:8f:f0:8b:
cd:d7:1a:82:93:68:2e:50:38:fb:e7:1c:d7:b6:8d:29:d3:a6:
36:a6:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:53 2026 by rpki-client