Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: LR3vxaSbl2OUW1KEOpcfDvG+97BjeCSW0iDzlbm3i6E=
Subject key identifier: 34:22:8F:36:05:F6:FE:79:B1:82:D1:38:4F:0F:DF:16:F5:CB:6A:5F
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 019E91DD760A1BBED1AF792A77B2C219DF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 0154
Signing time: Thu 04 Jun 2026 09:01:10 +0000
Manifest this update: Thu 04 Jun 2026 09:01:10 +0000
Manifest next update: Fri 05 Jun 2026 09:01:10 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: tAIJtL0E0D3UZn3Mqnz72KtyjUIbuqar6ElKBWILGjw=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:76:0a:1b:be:d1:af:79:2a:77:b2:c2:19:df:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Jun 4 09:01:10 2026 GMT
Not After : Jun 5 09:01:10 2026 GMT
Subject: CN=34228f3605f6fe79b182d1384f0fdf16f5cb6a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:26:e5:0f:67:be:80:a3:d7:fd:ec:e5:0a:
a5:7b:3d:aa:49:26:18:d6:26:0b:2e:9e:02:62:8f:
71:30:78:6f:81:c1:8e:8d:4f:01:36:98:f6:c3:55:
14:92:36:b6:45:f7:fc:40:9e:96:fa:8f:50:44:e9:
a9:4d:15:67:af:29:80:5e:e0:1f:97:ec:8e:8d:37:
ca:45:62:b0:9e:f3:53:91:0c:d2:7c:29:ba:60:61:
27:6f:9e:93:7d:c9:14:f1:97:61:38:60:6e:66:95:
a0:c0:c1:db:5b:2a:53:b5:b1:d7:e3:09:af:2d:c0:
80:e8:c9:08:33:47:91:e5:91:75:0d:34:c6:96:3a:
32:ae:5d:98:b0:de:f8:ff:22:b4:19:6d:55:0b:de:
65:ba:3f:48:8a:4c:b8:a1:08:c3:b9:d8:d1:8a:a4:
fd:d6:23:92:0f:19:62:09:57:fe:3e:38:95:59:94:
41:45:b7:ff:bc:d1:15:c3:c0:15:97:22:f5:f9:54:
61:6f:c0:6b:85:b9:a9:56:f9:18:08:79:64:20:6c:
8b:0f:6c:a1:69:70:32:c8:b1:20:6f:a5:2d:a9:cc:
5e:13:e8:97:01:20:ea:42:48:64:c3:ec:5c:d1:2c:
2d:f0:26:1e:b1:8c:21:2c:43:f9:0e:cf:d7:87:78:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:8F:36:05:F6:FE:79:B1:82:D1:38:4F:0F:DF:16:F5:CB:6A:5F
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b9:9d:86:40:2d:0d:f6:c0:06:cb:62:37:25:97:1e:ad:fe:
f6:91:a8:09:5c:5f:35:91:14:0d:fd:07:43:81:01:f1:ee:27:
12:c7:2a:25:59:92:46:86:2e:f9:5f:d8:1f:c0:47:0f:d8:2d:
f8:d9:6c:09:11:9b:b1:6a:3e:0e:7f:67:ce:ce:c4:74:bf:ab:
37:00:4b:2c:b6:d7:c9:c6:10:7c:2f:d5:6c:b1:60:53:78:c6:
99:23:a1:f8:54:69:eb:98:a3:60:b8:99:da:ed:eb:08:d3:4f:
91:8a:14:a7:35:3f:1a:53:e7:be:e3:25:c6:f9:76:fb:7f:dc:
61:72:d1:cb:8f:03:00:84:10:d8:9e:3c:d9:38:4f:7b:8d:54:
15:76:24:e4:de:20:82:f5:6e:cc:70:46:45:58:29:33:26:aa:
05:3b:b1:1f:8d:c6:4f:b0:0c:18:b0:8f:01:f0:0a:26:f1:09:
1e:2a:3e:10:b7:28:56:0b:c6:f4:b6:15:60:5a:e3:c2:32:72:
22:f9:58:34:5e:40:8e:78:a2:51:7f:5f:90:a4:fd:38:43:7c:
84:85:7a:5e:af:f5:5d:6e:f8:de:9b:7b:e1:68:74:91:c4:bc:
1b:bd:8b:97:62:d9:90:98:b7:31:88:c7:3b:9c:f2:40:a0:1b:
54:e1:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:54 2026 by rpki-client