Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File: sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier: nmA46zI7x8rpduTx3PSfikKbUnl+Klov6+6fm4S48gs=
Subject key identifier: 6E:E8:E3:DA:6A:6F:90:3C:7A:02:7A:05:89:A8:01:2B:E0:DE:A0:4A
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer: /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial: 019D39418F0A7172DB7F7FC4B04A7045450C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number: 1774
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: bQ0UMbsXdltHxsStpLRstv9CTXE.roa (hash: im1T7M/9bEyzU0YTti18gKcB/PDLlDsdZZk+yOh0iEQ=)
2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: wEt2aOOtX8G9TCqlaY8upufdkzDlbY48/mPeSBItDQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8f:0a:71:72:db:7f:7f:c4:b0:4a:70:45:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=6ee8e3da6a6f903c7a027a0589a8012be0dea04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:a8:6c:bd:18:49:46:13:b4:ed:fc:9e:44:
f2:16:d3:c2:4d:8a:f0:2c:a2:55:42:22:71:c6:2c:
6a:3a:83:06:9f:08:cb:a8:f6:8b:78:e8:96:4c:01:
ae:03:63:6b:99:f7:8e:0a:68:78:dc:92:03:41:89:
84:1d:5c:54:f5:4a:b0:d9:4e:40:62:ad:c8:ab:7e:
7a:0c:c3:4c:b0:5f:ab:00:b5:fc:f1:b2:e4:ff:2e:
4a:b8:0d:51:ff:bc:c7:f8:6d:1c:de:b7:d2:74:42:
ab:72:c3:bd:0f:42:e9:3f:15:ac:80:bf:f9:1e:57:
e3:3b:54:a1:72:e4:5d:05:19:0c:c4:91:56:1a:bf:
d1:ce:08:a6:61:13:8f:e0:51:38:5e:b5:8f:ab:22:
5e:4a:4a:5a:9a:57:5c:6b:2b:d0:7e:5d:fe:45:7e:
c1:d0:83:d0:a1:b0:ac:1a:b3:47:e1:ce:d2:86:e7:
ef:a8:86:cd:15:7d:74:1a:ce:cb:26:4f:e4:f1:ff:
fd:f7:73:c4:e4:0e:10:64:53:aa:84:25:0d:54:80:
2f:d4:8f:4d:6b:ce:03:74:0a:41:fc:52:0e:8a:4e:
30:9c:7f:04:ec:1e:d4:30:65:d3:2f:6a:ca:6b:a9:
13:05:5f:81:20:ee:29:46:8d:96:0b:f8:a1:f8:91:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:E3:DA:6A:6F:90:3C:7A:02:7A:05:89:A8:01:2B:E0:DE:A0:4A
X509v3 Authority Key Identifier:
keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0f:fe:d7:fe:60:aa:d3:7c:32:66:91:d4:53:b9:85:e9:8f:
e9:e6:91:68:5b:d9:6f:1f:16:52:17:82:b4:92:01:fd:e7:57:
93:ff:2f:30:d8:16:f6:be:56:62:73:9a:25:f8:c5:28:3c:3f:
e4:c0:1e:0c:38:50:da:a9:81:6d:09:88:9f:5b:2f:25:35:23:
f3:33:68:d1:ef:42:44:b6:11:42:90:c8:74:8a:bc:ef:46:4a:
5a:3d:4d:c6:63:ba:5b:4c:55:83:93:6f:ab:0f:33:f6:b1:28:
4a:d2:5a:13:ce:7d:02:6d:46:e3:6b:23:9d:a8:19:39:72:45:
cd:6f:9e:dd:0b:40:03:46:2f:6e:71:41:e6:1e:c3:58:15:ca:
8d:6f:5a:8a:86:08:34:30:82:a7:60:1f:57:9a:6e:0f:83:2a:
e0:c8:56:f0:03:c5:48:c2:cc:10:b7:36:9c:09:0a:21:30:c9:
5f:84:00:85:a6:13:a6:4b:dd:1d:2c:18:92:ee:37:65:d6:ac:
cd:6f:3a:61:48:23:61:85:cf:ec:87:1e:bc:ab:6b:dc:09:1a:
c3:94:60:10:ee:23:a4:d9:2e:c5:1f:62:b7:ec:6e:ed:2c:68:
df:c4:84:c6:3e:8c:de:6c:a6:7a:80:3b:2b:c6:f0:29:a4:32:
51:a0:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:11 2026 by rpki-client