Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: 34JUyHWjW0t1Tz+w6vhArjtQo820cJFWujSbOVlBt6s=
Subject key identifier: B9:1B:C6:94:6B:DD:09:0D:64:87:F7:C6:16:BE:5B:E7:59:F5:51:06
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 01A12F8EDCBA5A20ED539F68B6A8C40D6544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 0298
Signing time: Mon 12 Oct 2026 10:00:54 +0000
Manifest this update: Mon 12 Oct 2026 10:00:54 +0000
Manifest next update: Tue 13 Oct 2026 10:00:54 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: LbsM6/Gj7Yu1/tk+ZXFtl1sv4fExbx55cylo92B6kLY=)
2: RkMX5Ozt-aBvg83tpif5dYWlIs8.roa (hash: sE97AqRK+jdlW0OvHBvltFQHWQ2HKYV5m9H+8L8sv/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:dc:ba:5a:20:ed:53:9f:68:b6:a8:c4:0d:65:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Oct 12 10:00:54 2026 GMT
Not After : Oct 13 10:00:54 2026 GMT
Subject: CN=b91bc6946bdd090d6487f7c616be5be759f55106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:88:fc:39:95:fa:64:ea:7c:d3:c7:aa:6b:
b3:4b:b5:30:e9:10:5c:71:35:ae:59:e2:10:cb:73:
cd:28:d5:c2:f5:b9:a8:98:74:0e:30:7d:2b:2a:0e:
9c:3b:5e:b4:eb:e8:3d:65:ac:7f:01:9f:8c:0c:e8:
96:98:81:e9:12:40:b5:cf:96:3c:60:f5:24:2a:4b:
f9:b7:fa:62:78:c8:ed:3c:a7:88:ad:de:b6:73:01:
92:f6:58:8f:47:33:e0:30:7d:d3:4a:80:60:8d:a7:
68:11:81:f5:fb:a0:dc:4a:a3:4f:94:06:f4:3d:3c:
f7:23:26:08:40:ee:d5:93:e9:49:3f:37:1b:f6:0e:
1e:fd:f5:8c:29:b1:be:a1:5b:8c:d9:22:a7:81:81:
8e:bd:94:19:06:c5:1a:ae:c9:f8:90:ff:55:07:31:
cc:2b:50:de:cc:09:2b:14:6d:4e:64:20:08:f6:74:
4f:5f:57:18:86:4e:d6:8d:2c:c8:6d:86:80:a9:0f:
fb:60:4c:52:18:a1:73:b5:4d:e1:e2:7f:1a:90:a9:
61:26:56:69:a5:42:8d:e8:bc:4a:88:86:ac:0a:9b:
01:21:d0:c9:0a:39:93:61:23:08:40:31:3e:63:3b:
84:50:74:0a:7b:57:43:f0:28:4f:02:0c:dd:44:d8:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:C6:94:6B:DD:09:0D:64:87:F7:C6:16:BE:5B:E7:59:F5:51:06
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4a:f6:b4:1f:a0:b9:14:46:bb:5b:79:18:de:e2:50:0c:2b:
00:25:76:12:07:53:70:d6:1b:d6:fe:45:af:8e:65:3d:96:77:
1e:47:a3:6a:42:83:36:a0:45:9b:96:ce:4b:e6:90:8a:d3:41:
98:77:34:2e:13:06:50:6a:e9:e0:51:dd:22:06:68:8c:bf:d0:
25:09:a7:73:c3:6f:73:f3:6f:cc:e5:62:07:12:a0:ff:87:6c:
1b:2d:a9:d3:52:08:13:df:c1:de:6e:9a:43:7e:d2:27:8a:10:
18:53:ed:8a:eb:19:63:df:68:74:1e:89:ce:68:4e:22:2c:cc:
50:31:da:fa:48:19:19:8c:d8:55:c6:1c:0f:61:45:d6:fb:7e:
e6:10:6e:0c:71:f8:3a:50:53:83:8c:4e:ed:ff:8d:0f:7c:cc:
7e:f1:35:97:fc:c7:ca:bc:e0:92:b0:9b:6b:56:58:6e:93:79:
0c:39:aa:63:12:d3:7f:c7:f5:34:d1:4a:80:e4:e2:ec:fe:52:
b5:70:b4:4e:fd:44:e0:f1:ff:e9:da:c3:ca:2c:8c:44:65:23:
15:87:8c:9f:43:74:62:fb:a1:24:3f:19:4c:e5:57:27:4a:7a:
60:58:a8:de:f2:c8:9c:93:6c:2a:48:4c:54:13:10:d2:97:bb:
f9:20:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:09:48 2026 by rpki-client