Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: +rrl6HoaQzEWr8G4GdiZ2wDLQiQCRIZHSourJXJ0TRo=
Subject key identifier: CD:95:97:D3:F3:C0:15:45:49:C7:1B:44:88:E2:A7:98:A0:E5:3E:D8
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019D38D39787D18590B07860E88F50D6F6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 07DD
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: aB5t3h3lR1s02fGCaxpKUOYM7RjYEpLDnpWF5+Ur5Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:97:87:d1:85:90:b0:78:60:e8:8f:50:d6:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=cd9597d3f3c0154549c71b4488e2a798a0e53ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:d8:6e:b1:0e:86:30:fe:f7:a5:e5:cd:29:
74:de:59:ca:49:96:6c:34:70:74:65:2c:5e:78:d6:
9f:57:86:54:14:3e:59:1b:3e:ec:29:65:6f:7d:11:
09:9f:46:1f:79:74:05:11:4d:5f:a6:d7:f6:a0:73:
ba:fd:31:af:3b:36:0c:26:a1:6a:a0:98:84:b1:21:
b1:4d:b3:db:63:d4:a3:17:db:6f:d9:83:d7:7c:69:
fc:20:f6:af:ef:2a:14:46:b4:26:30:cb:7b:22:c1:
b6:51:38:e8:4d:05:d7:5a:a4:4d:ac:13:d7:6e:06:
a3:82:1c:2e:65:42:58:80:f9:3e:42:f0:5a:79:13:
9f:7f:92:ce:50:28:0f:a2:df:84:a8:91:31:00:dc:
d0:89:47:b3:52:49:f7:69:3a:bd:3f:a5:63:ff:83:
52:67:ca:b7:b1:24:4f:87:54:8c:06:c3:2c:24:dc:
92:1c:d0:70:86:3b:bc:60:c8:83:e7:f3:55:a8:08:
45:f9:ba:ba:4e:4e:d6:61:19:2c:9b:e5:54:2a:c5:
ce:6f:5d:56:23:54:5c:fe:ec:b8:f9:3e:d4:f9:23:
c4:f2:20:7a:3b:f9:af:16:9a:7b:7e:25:72:f8:eb:
b4:51:c7:94:6b:90:60:e3:10:34:70:21:aa:be:c8:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:97:D3:F3:C0:15:45:49:C7:1B:44:88:E2:A7:98:A0:E5:3E:D8
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:2d:cf:7a:52:23:03:50:4a:1f:8f:cd:6f:82:9d:6e:80:
cb:cd:0c:c1:1c:0d:e2:71:42:5b:7d:f4:9d:b5:79:07:93:da:
49:36:cc:ba:41:26:d4:e0:b5:22:00:af:b8:17:18:48:74:59:
ae:a1:07:26:e8:f3:5e:0e:ac:00:9f:92:03:09:05:d5:24:03:
97:6b:d3:70:9b:4c:e8:8a:3c:bf:2f:31:df:9e:1d:8c:26:ee:
de:52:c4:95:8e:de:e4:f4:a8:88:2e:c2:4f:aa:6d:77:63:f7:
40:63:46:11:2f:81:d3:70:a6:20:21:69:62:ef:57:a9:16:3f:
27:bd:f5:5e:20:8c:a2:1e:31:83:b5:6b:f5:30:37:a3:a1:e2:
f2:30:40:c8:97:ad:46:39:51:7b:cd:27:3a:e0:3c:59:d6:c9:
34:b1:34:33:eb:5c:2f:8c:0a:4c:6e:bf:3b:36:4d:0b:1c:a3:
71:65:e1:bf:dc:4d:86:45:14:31:fd:0a:9d:9f:82:55:30:52:
b2:fc:87:23:11:4c:e3:f8:8e:12:12:b9:59:81:0d:09:bb:df:
ac:8f:47:a5:52:2e:90:86:3f:81:97:2d:d1:cc:ef:33:0d:a8:
1d:cd:7b:aa:0b:b2:d0:f3:f7:31:43:b8:11:9e:b5:c4:a9:42:
df:65:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client