Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: +n9zidYYqTr6RKAQv6Uiz87WS1qEgKLYsQV5Y5chDto=
Subject key identifier: 0F:AD:5D:2A:86:3B:B0:4D:43:D2:89:A6:00:B5:27:F8:00:46:CB:20
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 01A06EDE28C795705D49C0014B4FD6252CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 024B
Signing time: Sat 05 Sep 2026 00:00:48 +0000
Manifest this update: Sat 05 Sep 2026 00:00:48 +0000
Manifest next update: Sun 06 Sep 2026 00:00:48 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: YukTMP4oqKyIr7O77E1aw9OelDNUPKEK1aGd66LegD0=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:28:c7:95:70:5d:49:c0:01:4b:4f:d6:25:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Sep 5 00:00:48 2026 GMT
Not After : Sep 6 00:00:48 2026 GMT
Subject: CN=0fad5d2a863bb04d43d289a600b527f80046cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:9a:a5:73:fc:05:56:f6:7a:ba:f7:c9:a5:
e9:a3:80:39:3d:32:a0:82:66:8a:23:fa:c1:ef:ef:
f7:d6:2d:ad:08:3b:97:18:92:ef:c4:ec:d3:a3:bd:
27:47:a3:72:8a:fb:f7:9d:09:0e:f0:04:ae:dc:a7:
4c:13:a4:46:63:41:17:b1:92:50:b7:4d:7d:8a:84:
3e:9f:bb:66:3a:79:54:6d:ad:aa:de:16:21:43:46:
b4:97:f6:40:73:d4:ac:3f:ca:19:72:6d:98:f1:4a:
ba:7a:23:50:bd:8f:a5:07:27:c2:1f:25:83:5f:65:
6c:42:fe:52:24:34:01:b4:5b:25:ac:22:8a:a6:05:
af:2f:50:95:4a:73:1e:81:7f:d7:a0:9f:97:f3:fe:
4a:2a:21:a1:86:1e:d8:65:a1:04:06:c0:7d:ab:0d:
ab:c6:0e:88:be:f8:18:2a:9a:36:bc:39:9c:db:9c:
11:46:20:04:63:67:6b:bf:d2:e0:66:7f:ba:63:ba:
9e:66:43:16:02:f5:68:9f:60:f5:b4:d6:bc:4a:f2:
81:e5:41:4c:96:83:ec:ea:92:d9:49:51:fa:2d:a6:
f9:bd:e7:10:36:9f:c9:48:b1:bf:62:52:1f:33:b9:
53:93:3a:e6:5c:39:1f:a4:6c:b6:5c:6e:34:a1:ab:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:5D:2A:86:3B:B0:4D:43:D2:89:A6:00:B5:27:F8:00:46:CB:20
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:bc:94:92:9b:a0:ee:e7:e2:e3:57:52:18:60:c0:91:07:
ec:83:0e:c0:e5:95:0d:fa:b1:d2:f3:b3:e5:55:65:47:97:02:
66:1f:e9:8d:88:7c:55:9d:87:12:0b:f7:84:63:d4:9c:0a:b6:
53:6f:d0:46:77:0f:cb:da:19:9b:98:e0:6d:fc:60:db:05:2f:
6c:03:cd:e6:21:19:65:6c:ed:66:3d:a9:32:89:42:23:52:1b:
8f:fb:4f:92:4e:c3:2c:5d:18:3a:6f:a0:d6:23:20:21:96:ae:
25:a5:4b:6e:f7:4f:cd:fa:bf:b0:7d:80:62:6d:80:7c:dc:bb:
5e:96:c1:6b:a4:a7:f7:9e:bc:00:e6:23:9d:09:b0:6a:c1:95:
4c:74:21:7b:33:9f:26:ee:32:d2:49:43:59:ac:4d:fa:91:87:
01:c0:e2:41:e3:3c:c6:9e:80:3c:91:ab:64:41:c5:34:ce:ae:
4f:6e:25:f3:f6:fb:cf:1a:6a:60:6c:46:6a:ff:3a:66:d3:da:
74:16:b6:a1:5f:13:77:f3:61:53:a3:c0:ed:85:05:9b:6a:5c:
72:5d:a2:7d:49:56:57:8f:bc:a9:4f:20:6f:e9:6a:8b:4e:3b:
05:d9:1b:92:a2:ef:23:e7:51:86:74:27:52:66:c9:9c:9c:f3:
7c:6e:8b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3ijHlXBdScABS0/WJSz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MmI4MjM3YjNmNmQxZDFiZWFjMjlkMjk2OTY0MGIzOWRj
Yjk0M2UwHhcNMjYwOTA1MDAwMDQ4WhcNMjYwOTA2MDAwMDQ4WjAzMTEwLwYDVQQD
EygwZmFkNWQyYTg2M2JiMDRkNDNkMjg5YTYwMGI1MjdmODAwNDZjYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQWapXP8BVb2err3yaXpo4A5PTKg
gmaKI/rB7+/31i2tCDuXGJLvxOzTo70nR6Nyivv3nQkO8ASu3KdME6RGY0EXsZJQ
t019ioQ+n7tmOnlUba2q3hYhQ0a0l/ZAc9SsP8oZcm2Y8Uq6eiNQvY+lByfCHyWD
X2VsQv5SJDQBtFslrCKKpgWvL1CVSnMegX/XoJ+X8/5KKiGhhh7YZaEEBsB9qw2r
xg6IvvgYKpo2vDmc25wRRiAEY2drv9LgZn+6Y7qeZkMWAvVon2D1tNa8SvKB5UFM
loPs6pLZSVH6Lab5vecQNp/JSLG/YlIfM7lTkzrmXDkfpGy2XG40oatAWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+tXSqGO7BNQ9KJpgC1J/gARssgMB8GA1UdIwQY
MBaAFNcrgjez9tHRvqwp0paWQLOdy5Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgt
ZTY4ZDlhNTY0NTJjLzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgtZTY4ZDlhNTY0NTJj
LzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOa8lJKb
oO7n4uNXUhhgwJEH7IMOwOWVDfqx0vOz5VVlR5cCZh/pjYh8VZ2HEgv3hGPUnAq2
U2/QRncPy9oZm5jgbfxg2wUvbAPN5iEZZWztZj2pMolCI1Ibj/tPkk7DLF0YOm+g
1iMgIZauJaVLbvdPzfq/sH2AYm2AfNy7XpbBa6Sn9568AOYjnQmwasGVTHQhezOf
Ju4y0klDWaxN+pGHAcDiQeM8xp6APJGrZEHFNM6uT24l8/b7zxpqYGxGav86ZtPa
dBa2oV8Td/NhU6PA7YUFm2pccl2ifUlWV4+8qU8gb+lqi047BdkbkqLvI+dRhnQn
UmbJnJzzfG6Lgw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:47 2026 by rpki-client