Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: 0YdPOwjZ0EXdMVB4yPW09FAJtfPFhJgxkw0XkJY2k/I=
Subject key identifier: D0:72:93:F4:72:F2:B1:BD:74:B3:E2:A5:53:BF:E1:E9:D7:8E:D3:1C
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019D3A5436D17E96E03AFFD5980BCB8E9140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:01:30 +0000
Manifest this update: Sun 29 Mar 2026 16:01:30 +0000
Manifest next update: Mon 30 Mar 2026 16:01:30 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: +kdcITqFqsiHMl9h4bAzkeMUkFpTs/m19soVT6Jjd8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:36:d1:7e:96:e0:3a:ff:d5:98:0b:cb:8e:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Mar 29 16:01:30 2026 GMT
Not After : Mar 30 16:01:30 2026 GMT
Subject: CN=d07293f472f2b1bd74b3e2a553bfe1e9d78ed31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:46:71:21:6b:8c:01:74:95:3b:03:1d:9d:0a:
e1:c8:33:55:9a:ca:05:27:8c:8c:dc:4b:9a:3c:39:
3c:58:a6:4d:2b:b1:3b:84:5f:87:f4:1f:cf:4e:6d:
a2:6d:3f:77:d6:3b:fa:aa:b4:d4:a8:be:70:7d:5f:
71:15:90:e8:12:c3:fa:26:71:28:4d:b4:99:96:53:
7b:70:e7:5c:cd:35:d4:38:6b:a2:11:7b:ec:ae:d5:
39:85:72:a8:90:4d:f9:cb:45:db:44:00:b8:23:53:
4d:b7:cf:58:70:78:fa:4f:6b:3e:77:44:62:32:f2:
57:b7:e0:c0:6f:63:3d:65:f7:03:51:db:b7:55:8e:
c2:be:47:33:91:74:73:c5:31:81:e1:1c:70:ab:a5:
b9:ad:c9:5e:d8:dc:3c:d5:cf:80:b2:f5:d8:44:62:
97:79:f8:57:b3:c3:14:0e:bd:70:b5:8f:21:62:0b:
19:b8:ed:b1:82:c5:93:b9:d5:ac:56:68:81:6f:a9:
76:5c:8e:5e:8e:c8:e8:ee:1d:e9:ab:94:ec:45:73:
3f:4d:63:7a:9d:bf:c2:94:33:f9:99:c2:4b:5c:0b:
7a:40:8b:98:96:71:14:da:eb:f2:1c:cc:de:e3:af:
7c:94:b7:f6:35:ca:ed:f9:a7:43:7a:14:06:6e:e4:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:93:F4:72:F2:B1:BD:74:B3:E2:A5:53:BF:E1:E9:D7:8E:D3:1C
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:92:ed:60:27:1c:11:4b:56:78:21:5c:b8:05:95:4a:06:b2:
b3:67:d3:69:34:12:da:9b:fc:84:0e:88:81:9a:34:01:eb:47:
37:09:6c:8c:04:d0:75:ae:db:f9:39:7e:b3:e7:b8:1c:e2:95:
da:b0:18:8c:a4:c4:94:06:99:3c:52:47:e3:56:b3:cb:3b:b1:
15:ca:4b:36:25:f8:bc:47:2e:04:12:6d:b1:fd:7c:6e:c3:54:
5d:d0:94:21:4c:ac:c7:7b:61:b0:20:e4:f6:96:c4:cb:75:4e:
52:b1:56:9c:83:8d:ee:57:d3:5b:8b:3d:40:25:15:c1:f1:62:
78:f9:8b:71:51:be:10:88:c8:04:e4:0f:0c:1c:89:49:3c:14:
62:19:59:08:fb:c1:34:a8:d2:62:08:b5:4b:11:c7:e2:3f:1c:
b7:6a:db:d2:86:6c:ed:66:fa:67:17:21:51:ab:fb:a2:de:6a:
be:43:7f:2f:e7:ed:b6:7e:5f:4c:64:60:d0:e1:50:5a:0e:e4:
44:53:18:10:9d:68:d0:67:f6:3e:0d:ad:17:15:63:53:56:b8:
8e:1d:66:57:eb:19:c8:5c:b3:4b:3d:0c:86:92:a5:8e:37:9a:
7b:50:44:ca:63:2a:ed:4a:81:a5:52:d6:03:bb:b8:bd:e5:a1:
ae:9a:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:41 2026 by rpki-client