Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: 7pimQVkFyLHUkdDj5cn2Z504lL3JCaU4VUE5h5c5D3w=
Subject key identifier: 59:9B:1D:8A:4D:DF:61:D3:AD:26:35:B7:72:62:B2:91:98:D3:72:A5
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019D390A17A8F6F703D62E7B3317954A20DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 8A
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: KeF5YL3HAeu6RC/hFoqR+G66x9kLwGzROPWp7mBi5ok=)
2: qS1_3wEIQuVYlhTs3iloYf1YjMc.roa (hash: Uzfr9K7CjY3AFHyO0zyI/Bv4ovC6HD2V9T5Yebzh90M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:17:a8:f6:f7:03:d6:2e:7b:33:17:95:4a:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=599b1d8a4ddf61d3ad2635b77262b29198d372a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:b0:61:46:66:09:d1:df:80:22:45:dc:d0:
74:e4:b3:de:49:a8:91:fc:0c:36:a0:6b:81:b9:95:
1c:10:ef:ca:30:56:75:59:55:4c:ba:a5:dd:dc:6a:
3f:d6:84:a1:9d:ab:c2:ce:e2:af:ed:99:b3:45:e4:
7f:6b:01:2a:73:d5:45:f6:51:29:f0:54:8c:68:76:
44:25:52:97:f3:7e:b1:3e:cf:12:18:3e:e8:aa:db:
33:c0:2b:73:ad:7a:b5:0f:97:f4:50:b9:17:92:44:
3f:5c:0d:73:fe:88:64:e9:2c:83:ca:11:15:63:04:
a3:42:88:cf:c8:df:9b:20:f5:da:1d:93:02:42:a7:
92:9b:13:2d:d4:d7:e6:f9:6e:9f:92:8c:38:ab:ea:
54:15:e6:e6:a5:d0:6d:54:a7:13:71:ab:46:a9:7c:
72:f3:ba:72:dd:24:4e:01:9a:4b:f5:f8:98:d7:df:
61:98:fc:9b:d5:b1:c6:4d:56:e6:eb:3f:a7:81:31:
95:8c:cf:97:e8:b0:63:46:4c:8f:3d:7a:a0:39:84:
aa:48:d2:6d:79:55:e8:a6:bb:57:2b:e9:83:2b:c2:
f8:25:77:99:39:67:c9:ef:18:a9:5d:0c:79:00:f4:
e8:c9:b3:76:46:9c:5f:ba:44:37:a8:0c:ac:68:e8:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:1D:8A:4D:DF:61:D3:AD:26:35:B7:72:62:B2:91:98:D3:72:A5
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:7b:26:2a:3c:4c:5a:31:88:2e:fa:f4:12:7f:f0:56:d5:e8:
8d:9f:66:04:7e:6e:85:4a:5a:42:ac:52:d1:46:d3:52:18:1b:
3b:77:8d:42:74:46:c5:cf:34:af:76:a0:66:bf:7f:c8:47:d3:
dd:b4:6a:a7:c4:aa:fc:41:2f:19:db:4c:c6:a7:5e:82:59:eb:
5c:4b:cb:6f:5e:97:fe:ee:32:c7:cc:77:ee:cf:36:8d:b9:c0:
d7:89:1d:a5:4d:a1:3a:eb:48:ea:a2:a4:4b:3f:9b:15:37:52:
53:ca:8d:ac:ce:d9:78:ce:f7:62:42:44:3c:4b:f9:f6:5c:68:
7f:1b:3e:31:7c:a8:7a:61:10:43:c8:06:e7:73:61:7e:11:d0:
60:b3:c1:3b:6e:e4:97:f9:73:83:34:c5:2f:5a:53:0a:6d:d1:
27:30:b2:9f:bc:72:df:2d:26:a9:01:35:dc:4a:56:3c:67:c1:
e2:72:4f:5e:f0:79:92:86:9b:44:3c:29:e4:77:cd:20:5d:8b:
5d:8d:70:1d:de:fa:b6:64:a7:19:a1:52:3d:52:35:1d:30:e1:
03:6e:c1:62:45:a9:c1:b3:30:7f:4e:cb:a7:14:94:82:fe:08:
39:42:c0:ad:4f:38:45:29:52:ea:27:36:d2:fb:d6:72:69:0c:
46:30:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:38 2026 by rpki-client