Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: tKoHB6q1dkM0l5nUero7DrWaVfZOZUzDUFfwxjOzzyA=
Subject key identifier: D7:CC:A1:0D:09:8F:43:B7:6B:A1:85:08:CB:80:4E:00:AB:2C:D5:37
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 019D37899337C3D9FF6A98B2FDCD86476095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1510
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: sObAV2s/EXM60we0l6hcma5zTgH6CUiEKVLsdwn0P7Q=)
2: y72QXlfn1iGh89QO3R6WPZp7awU.roa (hash: O6eU6r5oRWPIVud9+sofhzvQc+xlO3/W5yzIFE7k+e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:93:37:c3:d9:ff:6a:98:b2:fd:cd:86:47:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=d7cca10d098f43b76ba18508cb804e00ab2cd537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:f5:81:eb:8d:42:5a:44:19:4e:d6:9c:1c:
27:6c:9f:d2:ea:92:1f:53:df:05:fd:0d:9d:76:55:
db:eb:8c:b0:6f:94:15:87:52:14:a7:58:e2:47:e5:
e4:25:db:40:0e:6c:50:39:52:f7:df:7d:60:ee:a6:
78:30:06:68:81:82:83:9a:eb:a8:eb:3e:12:bc:5a:
4f:e0:f8:7c:a6:18:20:9d:5e:18:52:d5:44:f2:45:
e1:c6:13:ea:af:c1:40:cf:48:4f:9b:aa:fc:7d:da:
45:f7:67:e9:a8:ae:26:8f:09:c7:07:30:98:cc:35:
c5:23:6d:80:af:81:bb:1d:50:c3:a2:18:0e:d2:a9:
4e:2f:f7:e6:41:8f:09:6f:0d:cc:70:2d:c1:8c:d3:
24:87:ab:40:71:72:4e:1e:eb:80:11:4c:5e:73:0c:
98:08:e7:df:c7:be:b6:f1:54:7d:42:61:de:7c:7b:
51:80:5d:46:eb:4e:2b:20:de:e6:ea:18:62:a1:23:
ee:f2:2b:9c:5f:0d:67:a2:fe:a4:88:be:e1:ca:84:
63:e9:61:26:82:fe:89:aa:02:5c:f7:a3:93:50:bd:
52:01:45:9c:68:56:de:a5:cc:61:ab:05:cf:fc:5c:
9c:02:56:eb:1c:af:0b:b5:8a:ee:3d:db:fd:0b:66:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:A1:0D:09:8F:43:B7:6B:A1:85:08:CB:80:4E:00:AB:2C:D5:37
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d6:1b:0e:98:02:e8:f4:5b:b8:6b:57:39:86:df:49:b6:3a:
8d:91:7a:04:4d:ce:f6:0b:0f:34:f4:be:82:14:48:41:76:23:
62:85:96:95:8a:80:10:7f:a3:e4:e0:3d:89:7d:a3:ca:b9:e6:
92:67:1b:45:0b:1b:17:4e:1b:63:af:fa:3f:e0:f7:91:bb:99:
46:4d:13:22:d3:0e:58:23:47:e9:f0:75:30:a1:5a:3c:48:ba:
e0:19:9f:01:3e:2d:14:b9:20:e2:4d:b2:20:ae:a1:a3:fd:1b:
3f:fb:48:63:2d:a0:de:cc:85:25:14:d8:3a:69:fe:ce:82:72:
3e:99:09:b7:82:9b:fd:80:41:73:2b:69:fa:72:18:02:d4:7e:
37:a0:37:c5:67:d7:ec:5f:f9:b8:a8:63:df:c9:f0:f0:15:04:
80:88:a5:bb:4b:2e:63:47:88:de:3c:18:34:98:b3:82:ca:47:
f7:4e:90:53:20:45:c5:99:67:e9:32:1f:aa:06:20:bd:3c:89:
f9:ac:cb:69:44:fa:98:3d:2b:e8:77:08:60:e1:4c:39:1e:5d:
43:15:d4:3c:e4:fe:3f:f5:65:6f:32:13:fd:26:c3:eb:60:63:
d6:de:b7:d5:28:04:a5:c0:e8:80:8b:cf:45:c4:0c:a3:c1:3f:
55:68:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:33 2026 by rpki-client