Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: D4WdQaIHikFfKviXXUqehslFUewh8oSiq35yeO/fDZI=
Subject key identifier: 68:C3:BA:AB:7E:D1:B2:6E:EF:03:1B:9C:8C:0F:B4:A3:60:33:A2:70
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019D39AF88D87304D3AEC151AB15FEA47152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 1415
Signing time: Sun 29 Mar 2026 13:01:38 +0000
Manifest this update: Sun 29 Mar 2026 13:01:38 +0000
Manifest next update: Mon 30 Mar 2026 13:01:38 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: neb/r8TWNe4WViNVc6I5qJpYwA45hVdgld7vCRdLqng=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:88:d8:73:04:d3:ae:c1:51:ab:15:fe:a4:71:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Mar 29 13:01:38 2026 GMT
Not After : Mar 30 13:01:38 2026 GMT
Subject: CN=68c3baab7ed1b26eef031b9c8c0fb4a36033a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:84:e9:a5:7a:f4:36:c9:8c:fd:68:3f:56:
90:70:76:71:ee:f8:de:7c:0e:48:54:71:fa:f9:65:
79:fd:85:0f:bf:04:cc:b5:fe:92:2f:85:1c:ff:94:
a0:fd:60:61:9c:1a:35:26:e0:bf:69:89:fa:4a:6a:
ce:36:77:dd:ef:d0:7e:4d:a2:b6:f5:55:89:a4:4f:
86:28:1b:98:87:ad:f8:ef:87:93:51:55:75:e7:cd:
aa:aa:60:cc:07:2f:a1:51:06:ef:66:8c:b2:80:37:
21:e8:dd:5e:57:6f:87:f0:4e:bd:24:37:1d:b0:20:
89:42:5e:6f:17:1f:8c:89:be:0e:b5:e6:ab:58:59:
71:74:32:7b:3c:f0:a2:aa:4a:a9:93:8c:40:06:05:
5e:16:75:0f:73:3a:ff:b8:77:05:a4:e3:c5:ad:9a:
ad:03:c6:e5:f9:24:05:73:b8:4a:88:32:50:08:4c:
66:17:da:9e:94:fc:d4:f5:cf:c7:89:38:48:df:70:
5e:f1:8a:ac:c4:68:0e:2c:b9:06:46:ee:94:f3:e5:
e1:59:5e:4b:db:ed:3c:c8:cd:b7:70:8c:26:b8:08:
2c:34:29:30:44:39:2f:59:f2:2c:f7:a8:94:ee:16:
98:ab:9e:cb:0d:2a:32:90:4e:36:0b:da:c5:29:3b:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:BA:AB:7E:D1:B2:6E:EF:03:1B:9C:8C:0F:B4:A3:60:33:A2:70
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:a2:b5:12:b1:7a:15:b3:fd:b3:d4:c5:8b:f9:a0:35:48:
5e:f3:85:83:1a:81:c6:22:9d:54:93:5e:8c:7b:6b:10:47:fe:
0e:75:64:5e:f8:5c:89:80:43:58:76:ad:4a:de:00:4f:5b:96:
31:61:65:2d:9d:d5:25:7c:73:e4:f3:63:0f:77:1e:c6:c5:2f:
4c:7c:c1:96:e2:a8:2c:d0:5f:7e:f8:6b:eb:99:e8:15:a7:68:
09:4d:6c:82:ee:be:85:19:e4:12:c0:35:dd:ca:23:3a:a4:83:
3b:6a:86:53:2d:01:40:37:98:18:fa:52:03:23:49:28:69:c8:
cb:48:dd:d7:b2:2b:1f:07:5f:f6:57:31:ed:5f:1f:8b:ef:42:
1a:88:20:ea:0a:d4:5c:dc:cd:be:0e:9c:87:43:ee:e3:d2:1f:
0b:35:00:07:08:79:13:34:6e:02:5d:43:e9:a6:a0:f5:64:17:
03:ba:27:44:bf:5b:cf:56:0f:43:bb:c8:38:35:be:e9:94:7a:
78:a4:0e:69:e9:60:7b:2b:91:9f:97:7e:af:16:89:c4:86:87:
39:65:bd:86:bd:25:67:67:ba:37:44:1a:ed:d2:04:76:f7:d0:
52:03:83:6f:2d:a2:25:f5:62:a6:6d:64:e4:3e:85:87:67:ad:
27:ef:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:43 2026 by rpki-client