Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: k+pXy4gyObaE73WmguCjiGh0+iZ4PJ6dw3QPFECuMe8=
Subject key identifier: 2A:EC:4C:CD:9C:77:3F:EE:FE:24:54:6B:74:76:13:29:1E:14:6D:CF
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 01A00137E4DBC8F18FC2EDA985DB5199E907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 14E2
Signing time: Fri 14 Aug 2026 17:00:35 +0000
Manifest this update: Fri 14 Aug 2026 17:00:35 +0000
Manifest next update: Sat 15 Aug 2026 17:00:35 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: TcDOYeCJmvcGZxYyXKwll+/jzj03P5bP8lXA8geXu2A=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:e4:db:c8:f1:8f:c2:ed:a9:85:db:51:99:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Aug 14 17:00:35 2026 GMT
Not After : Aug 15 17:00:35 2026 GMT
Subject: CN=2aec4ccd9c773feefe24546b747613291e146dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:c6:59:3a:2d:10:f3:04:be:c1:cd:1d:a7:
74:e8:58:28:a4:45:f6:4b:1e:e4:b0:99:f3:37:9f:
10:8f:d4:16:aa:ff:e0:e4:1a:16:6d:78:cf:16:88:
50:bd:1b:1f:fc:2c:43:b1:85:98:08:80:dc:8b:0e:
91:d7:2f:e9:39:75:f9:02:4d:1a:91:1e:fe:f6:09:
34:35:0e:46:b9:15:46:18:15:4b:1b:1e:81:b2:b8:
7c:64:66:8d:5d:08:d2:b4:d1:09:b3:0d:61:61:6d:
af:da:c5:d5:16:e2:20:bc:52:cd:3f:87:a1:68:cc:
ba:07:39:76:dd:e3:38:df:55:86:1c:1a:9d:3f:8e:
c6:1e:b7:01:8e:ac:e5:a8:90:c0:e2:37:53:02:e5:
45:cc:96:62:79:40:79:7f:6f:9d:8d:76:7d:d5:d8:
a1:31:d8:f4:2a:84:24:cc:88:28:32:1b:62:a5:6f:
a6:79:7a:ef:18:a4:75:5c:87:0f:7d:51:7b:ec:22:
3f:7b:84:d1:c3:12:fc:45:1d:40:9b:06:45:ee:7b:
bc:10:8b:c5:45:08:c8:73:54:a1:cf:8a:72:a9:69:
d0:a9:ea:dc:21:cd:f5:72:72:08:8b:93:fe:eb:9b:
42:9a:49:95:c7:a7:c2:a7:d7:e2:d5:13:64:71:21:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:4C:CD:9C:77:3F:EE:FE:24:54:6B:74:76:13:29:1E:14:6D:CF
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:a8:4f:2f:fa:d2:f6:32:5e:e2:8b:d1:68:bf:c5:cb:dd:
81:4e:61:58:5c:30:f3:a1:82:83:8f:18:d2:b6:dd:72:ee:85:
48:d9:49:86:41:49:c1:1b:9e:73:3b:a4:8e:48:fa:a4:27:15:
4a:6c:70:cb:14:58:73:b4:72:a3:67:c6:a9:a4:b9:da:d8:6f:
a0:f3:5c:63:70:b2:fc:5b:7c:e0:74:0e:15:f0:62:2f:79:fa:
cd:0b:21:82:40:b4:15:97:c1:58:46:50:12:ac:e7:ed:fe:84:
5c:78:65:b8:5b:5a:a8:ed:ca:dc:89:04:87:8c:42:6a:9d:d2:
b2:c4:03:c1:a4:f2:1d:35:cb:b1:ce:32:77:67:08:93:80:73:
f1:78:bf:ab:37:55:21:2a:74:67:d1:49:b1:94:16:eb:c5:a9:
2a:3a:1d:bb:82:a4:6f:65:40:ab:49:43:4f:79:75:96:84:8d:
da:58:63:28:41:82:c9:f7:ef:b3:3c:3c:83:1b:54:5e:6e:b2:
56:45:eb:94:28:47:6b:81:8b:e8:de:fd:98:c2:91:7a:2d:d8:
25:ad:b9:0b:11:52:ff:d5:9f:e1:f5:af:ff:84:27:41:50:54:
ad:fe:7f:8b:35:62:9b:68:16:17:31:5d:46:74:d2:c5:ea:75:
0f:4a:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:40 2026 by rpki-client