Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: IliiDtAlT23yYhwuVfT8UB0F6U8WDKDSujCFVashk2k=
Subject key identifier: ED:FE:84:0E:2D:85:01:94:93:17:29:04:CC:4D:91:7F:EB:5C:75:40
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019E3004EACABD7FA9E03F148CC2732E9DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0A5D
Signing time: Sat 16 May 2026 09:01:29 +0000
Manifest this update: Sat 16 May 2026 09:01:29 +0000
Manifest next update: Sun 17 May 2026 09:01:29 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: BI9TqCUQaEqnBnWvV0HftW0OPGCDj0zFE5rzqIFvY3E=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:ea:ca:bd:7f:a9:e0:3f:14:8c:c2:73:2e:9d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: May 16 09:01:29 2026 GMT
Not After : May 17 09:01:29 2026 GMT
Subject: CN=edfe840e2d85019493172904cc4d917feb5c7540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:ae:cf:9d:02:ee:1f:9f:86:2d:f2:7c:fb:
6e:34:ec:89:4f:9e:b4:eb:53:13:78:2f:f2:dc:31:
b6:ab:d4:cd:a6:97:03:da:2a:a4:aa:77:4f:9e:90:
62:bf:fb:59:3f:a2:b2:8d:a5:f8:f2:e4:f1:f7:4a:
6c:3e:99:3d:16:ea:97:32:32:59:97:6e:aa:b6:7d:
22:c3:0e:43:7b:a5:e1:6b:ba:ec:c2:ad:62:eb:06:
24:33:68:d1:df:5e:89:b4:d1:d6:08:a5:f5:38:bb:
ce:5f:69:2f:23:a4:64:75:20:86:26:d9:bf:28:77:
99:14:8c:d9:fc:ee:33:8a:ba:90:30:d3:59:57:1a:
14:10:ac:1d:7b:ec:59:44:dd:74:0f:8b:06:25:9f:
72:38:74:e6:8d:1d:14:df:52:f6:a9:c6:b2:9c:2d:
af:2b:eb:94:f0:dc:de:0c:e9:cb:c1:ff:cb:9a:af:
5f:50:7a:42:c4:c5:30:8d:59:8f:d6:82:78:0f:92:
40:a0:4f:05:19:7b:f3:cc:9d:a8:cf:eb:71:d8:19:
3b:a1:02:7f:67:28:89:7e:df:26:6e:97:e5:f3:88:
e6:80:ae:de:6a:c5:39:5c:bc:4d:9e:48:6a:21:ff:
c6:a7:4b:c8:90:60:28:cf:7b:8e:93:95:4b:2c:b5:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:84:0E:2D:85:01:94:93:17:29:04:CC:4D:91:7F:EB:5C:75:40
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:70:7c:82:62:6b:c8:8c:05:c2:37:3d:f4:92:a5:a7:9c:
88:ec:f9:35:cc:80:12:d6:39:68:c5:e1:88:0c:19:2b:3a:e9:
4e:9f:d4:9e:7a:bf:f8:33:2e:ac:27:4e:0e:d8:37:5b:e7:57:
1a:31:49:99:66:56:b2:86:76:06:7c:bc:f5:52:3a:c6:fd:ef:
5d:78:60:61:6d:64:88:ef:53:24:61:45:96:b3:30:03:aa:3c:
ac:12:9b:4c:52:99:05:a1:5a:55:01:43:64:66:2e:0e:4b:88:
89:eb:73:1b:e7:97:73:f6:8e:0c:35:ca:3d:d4:1b:40:f2:9d:
b1:18:bb:3e:04:f7:27:ae:f3:b5:9b:48:34:bc:5e:e5:df:5d:
31:e8:9e:e2:c5:0d:32:26:5a:76:5a:4f:a4:7b:1a:52:33:7c:
1a:ae:fa:ee:9f:0f:78:73:f3:47:9d:32:69:2d:c5:54:7b:66:
2b:43:cc:60:a2:2d:9e:54:f6:71:13:1a:a8:d6:f3:d2:1a:25:
41:75:da:6f:24:cf:30:ed:bc:9a:4c:64:8d:13:b9:58:1e:90:
59:8a:68:ed:03:52:55:f8:bc:93:0e:3f:19:47:40:92:4a:3b:
2a:ff:85:f4:f0:82:b6:6c:c3:3f:b0:ba:7e:a2:d5:90:9f:45:
bc:0d:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:47 2026 by rpki-client