Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: NA6hxg2W4Ku8NLisrpJkAVzx6yJROUl7W0Q5JOD+X14=
Subject key identifier: 73:2C:21:87:47:6D:C8:2F:62:F1:35:A1:3C:5D:D4:50:B4:0B:61:9F
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019D389BC129018753BD60EC40BEF17F681F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1371
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: zSw34QUF1az2214i1pLifebosg6IVr/VdlO38k6jLcU=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c1:29:01:87:53:bd:60:ec:40:be:f1:7f:68:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=732c2187476dc82f62f135a13c5dd450b40b619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:07:6c:2a:07:5f:9c:0e:63:dc:07:6e:6e:
5f:35:6a:63:ab:11:f3:67:4a:43:99:eb:be:93:f9:
59:04:39:cd:40:b1:2a:ef:6a:b5:c2:1f:e9:b4:3c:
a5:78:e9:5a:cc:a9:2f:7a:41:16:9f:dd:a6:63:88:
a4:45:a2:c1:be:70:fa:c4:35:05:f8:c6:75:fd:15:
94:3f:6e:c8:cc:d4:bc:04:aa:5b:2f:dc:fb:9e:e7:
5d:ec:2b:92:ec:59:4a:5f:e0:4b:7d:48:54:41:93:
64:49:67:c0:68:d5:2f:6c:be:a7:02:1f:cb:37:0c:
f8:88:8d:c9:e1:ed:f1:e7:75:75:a7:95:03:32:f4:
59:27:a4:1e:97:9d:63:42:2d:de:86:8b:55:dc:69:
c8:03:83:b2:62:4b:7c:5e:79:40:67:96:f9:0d:1f:
bf:d9:a5:57:63:ab:a9:2e:7d:03:8b:7f:6f:a0:eb:
c3:b1:90:77:9e:2b:1a:70:54:b0:bb:fa:0a:6b:44:
da:e6:66:7d:78:59:d5:53:47:bf:45:b6:79:6c:a0:
67:71:dd:d8:fd:8e:e5:4c:ab:b3:fe:d2:0f:7d:20:
52:bb:bc:46:37:cd:5c:9c:99:e3:68:24:7c:a3:0c:
7f:df:19:2b:f2:87:12:3a:8e:7d:67:cc:2b:9f:cd:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:21:87:47:6D:C8:2F:62:F1:35:A1:3C:5D:D4:50:B4:0B:61:9F
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9c:28:5e:5b:24:b6:6e:c5:24:45:10:57:66:8c:92:ca:69:
33:59:a0:fc:95:b2:e9:c2:ff:48:6f:9c:44:93:00:1f:0d:cf:
ed:0e:9c:4e:77:0e:e6:7f:7a:a8:d9:1c:17:6e:0a:58:3e:1d:
91:ec:d4:c9:bb:e6:2f:ea:bb:69:3a:64:94:93:9e:b6:11:92:
6f:ae:30:7c:57:93:d5:42:30:a6:6e:31:d8:06:5a:75:01:89:
aa:78:22:1f:c5:c2:75:ad:82:c4:2b:4f:e1:46:4c:4c:24:da:
a8:30:b7:6b:99:cd:0a:90:f9:ee:66:1c:b3:16:7d:b8:7d:41:
8a:91:86:83:e4:44:ca:4e:e2:47:26:ea:bf:5b:28:03:d6:6e:
17:d4:96:bf:ef:1b:8c:77:6d:4f:5b:8d:6e:b8:1d:b6:0d:5a:
8c:33:8e:ef:f2:fc:3d:59:8f:b0:db:6d:ef:32:34:08:ed:b1:
11:9e:f6:3a:46:68:24:6d:86:d7:35:a8:cd:89:47:6d:77:b8:
cf:f8:8a:dc:b8:e3:d7:b9:78:d7:3f:62:04:03:70:fe:f2:e2:
df:62:23:1b:d3:2c:05:6d:07:ae:6c:13:2a:d3:ab:5d:51:90:
87:f1:43:02:6d:75:33:5c:82:0b:6a:f5:ef:bc:a5:1a:ab:f8:
59:1d:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:26 2026 by rpki-client