Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: GQ+g1DVC3WBhjAr1fvkRfLeUXuuJ4JJsfjUcHkJsIrQ=
Subject key identifier: 85:78:46:5E:91:30:C6:28:60:36:D7:B8:63:AE:15:1B:08:47:94:E2
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 01A16FB71A19E750B7ADB3F2BB23E2F11AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 02D0
Signing time: Sat 24 Oct 2026 21:00:33 +0000
Manifest this update: Sat 24 Oct 2026 21:00:33 +0000
Manifest next update: Sun 25 Oct 2026 21:00:33 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: 57SIQRTkltojRA8FvpEEbFLCS0vXPTk5NVH2hG76PvM=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:b7:1a:19:e7:50:b7:ad:b3:f2:bb:23:e2:f1:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Oct 24 21:00:33 2026 GMT
Not After : Oct 25 21:00:33 2026 GMT
Subject: CN=8578465e9130c6286036d7b863ae151b084794e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:8c:69:c6:18:df:11:fc:28:7e:77:b0:05:
32:f5:c8:e2:21:47:52:d9:4c:36:75:41:de:80:5f:
63:f3:a7:f1:87:e4:2e:06:1c:de:4b:b9:1c:96:d5:
9d:71:d0:9f:d1:8c:eb:c2:ba:8d:f7:26:e0:43:3a:
95:4b:8b:66:03:06:ed:5e:27:e7:54:66:86:39:4e:
5b:a4:b2:8a:9a:c9:60:a1:f2:93:23:20:3a:79:65:
12:73:41:78:e8:4e:0c:ed:0c:49:48:85:b3:85:be:
ad:cd:90:ee:36:4d:49:d1:d4:f0:32:11:9b:20:a8:
23:44:9f:dd:9b:ce:fc:95:15:4c:91:50:3a:2b:69:
76:19:01:79:65:c5:fd:b1:7c:83:70:2d:fc:f9:f1:
06:86:a9:30:e9:c5:68:0a:38:9d:54:6c:d2:57:95:
a6:a3:f4:ad:1c:70:d2:db:92:ad:27:25:55:96:0a:
04:fd:b4:7a:f6:23:52:17:a1:fd:f6:7b:e6:5b:ae:
43:26:42:84:cb:22:4c:c4:34:8b:31:f0:e3:c6:53:
e8:34:e0:b2:cf:f4:91:a1:c4:e9:04:0a:2c:27:93:
b3:53:10:d3:a0:71:aa:72:d0:8a:7d:d3:ef:02:7e:
9e:43:1d:46:70:3b:a4:bc:2c:0d:35:bd:d7:87:11:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:46:5E:91:30:C6:28:60:36:D7:B8:63:AE:15:1B:08:47:94:E2
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6c:ed:8e:c7:a9:58:c5:2f:41:01:44:66:3e:ed:db:a5:d6:
57:cf:bc:c7:db:21:6b:d7:5e:a1:e0:69:06:ec:5e:f5:a4:b1:
67:43:57:e4:49:61:e7:b7:c0:36:06:07:9f:ed:f3:54:70:6b:
c6:94:a4:c4:f7:61:45:c8:29:e2:8e:0c:cd:a8:af:09:f7:59:
b1:28:e8:70:9f:63:98:9a:b0:6a:09:19:7d:ba:5d:35:3f:52:
5b:5a:b9:1b:f4:55:0f:c5:0b:9b:35:ca:91:10:31:f0:55:16:
94:8b:30:a5:a6:ea:78:88:0b:75:3c:88:fb:33:88:26:72:64:
fc:43:54:52:e2:e4:17:11:38:a4:ff:04:bc:b4:59:46:1f:4c:
41:8c:3c:a4:9d:52:2b:b8:81:b1:ac:84:5d:e8:a5:ff:d7:40:
44:41:c3:71:7a:67:28:25:34:fc:5d:11:62:63:30:8f:fb:06:
5d:ca:6b:25:3d:68:a4:8b:92:2b:e0:65:dd:80:f5:f6:90:08:
04:37:ec:ff:72:38:c7:0f:e1:6d:66:b0:65:25:2b:fe:ea:94:
0f:0e:c6:bd:0c:90:d4:de:c8:55:c4:5a:7b:55:f5:71:98:b0:
9e:6c:33:f0:b2:bd:19:dc:e7:01:d9:4c:bb:b3:35:56:7a:5c:
62:e1:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:49 2026 by rpki-client