Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: OqnpuWqwVDe+yZs6BH/OJXNdB48bJQFBR2ve2Ah9mcM=
Subject key identifier: 4E:D1:CE:09:83:67:CE:58:58:51:18:8A:39:D1:5D:01:CB:4E:5E:1D
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019D375239FDE2D62A5073FA6DFB70B1C340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 1466
Signing time: Sun 29 Mar 2026 02:00:28 +0000
Manifest this update: Sun 29 Mar 2026 02:00:28 +0000
Manifest next update: Mon 30 Mar 2026 02:00:28 +0000
Files and hashes: 1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: Po9Rujpw86qjlriubc/l6++ITpCPHXORWrN16sd4XQ4=)
2: l6hhFXm91_1hUHfqAiTC3reWmvc.roa (hash: g7ZHYlhYjCzwKg6ri+src+vOXxkbh94Rt78zZvtYmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:39:fd:e2:d6:2a:50:73:fa:6d:fb:70:b1:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Mar 29 02:00:28 2026 GMT
Not After : Mar 30 02:00:28 2026 GMT
Subject: CN=4ed1ce098367ce585851188a39d15d01cb4e5e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:12:0d:56:09:99:26:19:83:b8:c6:a9:a6:
a8:62:bb:3e:ba:45:4f:4e:5b:2d:a8:27:2a:89:8b:
ba:7c:28:8a:29:cb:ed:0c:c0:cb:b4:a2:b6:44:e6:
19:d5:aa:55:29:31:c6:49:9b:f3:e3:50:99:9c:4d:
d5:d8:b1:c4:65:fe:05:ed:6a:ae:99:2c:cc:c4:fc:
ff:d3:88:89:25:58:97:2e:57:c3:31:ff:1b:db:da:
20:fc:68:19:81:ba:60:42:00:72:cd:4e:ef:8c:14:
1d:91:fc:96:35:21:73:79:db:f0:0b:86:36:46:d5:
2b:89:60:f1:13:89:57:e7:36:32:64:1b:6c:1b:9f:
30:27:89:e3:ad:4c:8d:56:25:37:9d:f7:2b:77:03:
47:66:31:80:01:3c:d3:b2:a3:e0:f2:6a:0e:83:46:
2d:ee:05:70:ce:ca:5f:9d:50:a4:b1:4a:8e:85:02:
5c:67:6c:df:0f:63:9c:ea:a0:4c:36:40:76:cd:1a:
ca:0e:c0:78:fe:6c:7a:7d:c5:f1:7c:84:05:76:16:
91:90:6e:06:ba:b6:da:a8:79:85:92:73:f4:a9:ab:
76:a4:63:15:b7:73:21:b9:20:ca:bd:fd:93:48:ac:
a1:04:7a:f0:21:c6:7b:4b:f7:ad:0a:42:83:1e:fe:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:CE:09:83:67:CE:58:58:51:18:8A:39:D1:5D:01:CB:4E:5E:1D
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e7:e5:e6:23:aa:f2:55:d7:35:42:20:e8:a5:e8:12:ef:58:
90:65:9d:f5:97:75:5f:93:e4:8b:07:48:ff:d6:97:e2:e8:17:
f8:be:05:51:e5:76:7c:7f:16:a6:bf:88:bb:05:8b:6b:7a:52:
c7:24:18:65:07:91:7f:e9:72:e9:a3:f1:f9:30:7a:2f:49:c8:
4e:c7:99:c2:56:b3:65:78:bf:bd:30:f2:44:67:08:55:88:cb:
05:a9:7a:b6:15:e0:b7:40:1d:7e:e0:ba:8e:e1:d2:fc:ff:bd:
67:f4:cd:76:44:8a:c9:8d:37:7d:d8:92:9f:6a:d3:80:ca:40:
f2:2a:fe:73:a0:d2:bc:4c:8a:c5:97:2e:01:19:18:0b:1f:cb:
1c:37:be:e5:f3:97:3d:cc:11:4b:16:b3:c9:67:e7:71:97:ce:
a2:59:4a:09:e9:39:cc:57:e7:20:a9:4b:dc:64:6c:9d:06:be:
e2:c3:d0:ec:1a:ae:37:2c:5c:d4:cb:da:9d:5c:d8:06:c8:a5:
ea:d0:1e:b4:69:ae:8c:0d:0a:e6:0c:c4:8c:af:b4:aa:fe:19:
f6:77:76:cb:91:e0:bd:f9:db:37:2e:fb:a1:69:77:a2:8d:18:
46:17:87:47:61:7b:b4:c0:52:61:47:ee:ea:63:d5:dd:e5:77:
95:6b:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client