Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: IZ1022OaR4WFp+FisdnG7V9hKRsC0+1pkkDjQELByY8=
Subject key identifier: 33:8F:33:86:A3:3C:7B:9F:B1:13:8C:F3:B1:A6:6D:41:1E:03:5B:3B
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019E9B17F6CBEDA6D956D08CDCB683983678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 09AC
Signing time: Sat 06 Jun 2026 04:01:39 +0000
Manifest this update: Sat 06 Jun 2026 04:01:39 +0000
Manifest next update: Sun 07 Jun 2026 04:01:39 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: L4tmchNQcNmjg3mf+XFBLp1je95vyF6Lt80DYxDl3LI=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:f6:cb:ed:a6:d9:56:d0:8c:dc:b6:83:98:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jun 6 04:01:39 2026 GMT
Not After : Jun 7 04:01:39 2026 GMT
Subject: CN=338f3386a33c7b9fb1138cf3b1a66d411e035b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:08:8c:f9:75:9f:f9:57:3d:c4:ac:17:e6:
89:6c:db:3f:ac:80:6a:2c:30:47:f4:db:35:94:85:
f7:fc:fa:29:57:01:91:42:c4:76:6f:de:9a:12:78:
03:15:1c:71:76:6b:9b:eb:d3:00:28:91:09:00:fd:
60:02:b9:af:29:fb:6c:97:75:be:22:0e:9e:07:3e:
d8:88:42:b8:01:9a:a2:ee:20:f6:d7:b8:fe:7c:7d:
0d:2b:c9:75:68:f1:35:59:68:8b:99:ca:5b:ae:7f:
d7:25:13:61:73:62:a7:1d:2b:df:e0:42:0d:10:d9:
08:9e:d4:ca:b8:73:c1:e2:db:7b:8f:06:4a:a2:2e:
77:21:56:64:bd:9d:1d:5e:c5:83:2b:ce:8c:1e:bb:
c2:5a:1d:7a:77:19:44:6a:60:47:ec:ff:02:e3:f1:
a5:fd:ee:d6:c5:fb:32:1c:bf:66:80:ef:af:21:c9:
71:ef:b6:85:8a:e6:82:32:e0:2a:64:20:13:eb:a9:
e5:b1:75:fc:e8:89:f6:a8:7a:b0:ac:3e:c1:20:c3:
ec:4e:53:a3:74:1c:26:8b:b5:62:ce:1c:ab:ae:db:
3f:11:6f:16:d1:37:2c:e8:39:a4:03:24:50:bd:1e:
1a:75:a4:6b:49:cc:a5:bc:09:49:97:46:55:a4:a6:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:33:86:A3:3C:7B:9F:B1:13:8C:F3:B1:A6:6D:41:1E:03:5B:3B
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:4a:fa:b4:26:19:e3:c0:9c:73:b1:fb:38:97:6d:d2:11:
03:e5:bc:e3:66:23:04:b2:ec:5c:3c:84:0c:3a:c7:94:8f:5b:
7f:7d:2c:f9:fc:67:2e:17:05:98:b9:44:cb:7c:c1:33:6b:f5:
f8:e1:1e:93:6f:fd:2b:92:1b:7b:07:b9:8f:22:53:54:09:d5:
3b:cf:d9:9a:c6:b5:3f:3b:f7:e5:76:3e:be:e2:1f:22:b8:d5:
fb:73:15:52:54:74:e5:4c:38:83:bf:17:cf:e2:16:26:51:f0:
13:07:83:a0:e5:47:7d:eb:c7:0e:d0:95:c0:08:07:ae:33:54:
95:15:e7:ac:60:34:df:d7:32:d3:29:bf:a3:15:07:1b:ff:f2:
4c:dd:f3:93:2d:63:fd:95:5b:82:b7:14:fa:2c:69:aa:1f:05:
72:6f:d8:1b:a7:73:2e:1e:87:f7:52:62:12:4f:17:57:c6:d5:
52:02:bb:3a:9b:9e:50:08:9d:31:87:85:3d:7b:ca:2f:2b:0c:
a2:ca:56:5f:99:17:73:8d:79:8b:87:cf:a3:fd:10:4f:f1:c5:
41:eb:02:d5:4c:b4:ad:a4:70:aa:05:c8:2f:27:ef:56:4e:2e:
d1:55:a8:77:ac:18:75:ae:13:6f:d4:3d:db:84:e3:e5:cf:66:
11:2f:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:00:13 2026 by rpki-client