Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: v7dN2Sbc6mqoZt9gzjQB4SAXW3HAd1jxUz+uh4lRyos=
Subject key identifier: 93:C2:A3:B9:2E:7A:F8:67:8F:28:98:1D:B9:4A:5E:A7:E7:BB:D2:97
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019D382E76E368C9E658E05B2D9CE90B42A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 09DB
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: gHeBKHJKIMqZjfjWNVLbrsqRHMk5PcFAv8SpIisveQs=)
2: NOWoB23HEmYTdKdWzMjUjIfX-lI.roa (hash: EDavFVGDb3OfWrkmMLQ28ZnqwmFb4R8GgQs19jLuWJg=)
3: yXuHFZic38WtbGut6KbE1pBnfLI.roa (hash: kTl3ByAmOWMgoe4Kjt6fNNQpG4a7GQvCOfYlBUiosjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:76:e3:68:c9:e6:58:e0:5b:2d:9c:e9:0b:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=93c2a3b92e7af8678f28981db94a5ea7e7bbd297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:46:56:35:07:be:09:5d:bf:f9:ed:da:1e:
c9:e3:68:e7:4f:8b:a3:ac:71:a2:1f:cf:29:7d:3c:
c4:cd:d1:5f:1b:af:52:47:51:52:98:b5:fd:10:1e:
7a:8d:e6:80:2d:76:d3:ef:2d:ac:35:f0:67:f9:28:
9a:fc:39:89:8b:09:9d:aa:81:98:f4:00:d2:11:f6:
fd:10:1d:84:4c:9d:ac:a6:9c:33:97:77:44:6a:07:
fa:11:cc:32:4e:d1:5e:4a:35:83:f7:26:6b:93:76:
e6:57:a5:58:14:1a:17:21:7c:f5:4c:ad:ba:89:92:
42:76:1b:37:c2:1a:e6:07:df:bb:74:45:f0:f6:92:
95:c7:0b:6b:1b:f2:a7:a9:3a:d9:2d:d7:fd:2e:5a:
97:c8:d7:b6:b1:2d:19:77:eb:19:a7:de:6c:7a:3d:
b9:99:20:fb:ef:5e:05:ba:8e:05:a0:af:b0:50:6d:
b5:16:01:49:94:1f:c7:e4:e6:f6:26:a9:ec:8d:92:
8a:aa:fc:31:1a:65:5a:05:90:ae:4c:f3:b0:39:a7:
54:a8:38:f3:35:d9:26:6e:61:05:e3:9a:bd:9c:be:
ed:69:bc:87:31:05:c8:28:5a:91:91:b9:32:3e:fc:
37:03:5e:a9:3c:4c:11:d2:7c:1e:41:1e:8e:f4:56:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:A3:B9:2E:7A:F8:67:8F:28:98:1D:B9:4A:5E:A7:E7:BB:D2:97
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0d:7d:4f:fb:95:2f:4e:5e:ae:fe:e5:76:b6:dd:e5:38:24:
33:53:a1:13:3b:94:7c:13:42:e6:bf:6c:8a:2e:20:bf:d5:99:
02:88:22:7f:96:8f:db:cb:dd:22:d5:76:86:13:1e:9d:8c:23:
cf:f7:4b:84:62:21:14:66:d5:a0:08:90:b6:32:4c:b0:94:0b:
61:0b:61:70:e6:b8:cb:f1:3b:0e:8b:92:5d:3a:63:11:ff:9e:
ef:a5:f7:4f:d2:8a:dc:27:2a:03:b1:6c:db:f1:7a:8e:d8:c3:
f9:11:15:27:08:25:bd:8c:43:d1:34:5c:51:0b:4e:01:e5:7b:
fa:e9:b8:6c:cd:79:85:4e:78:dd:c4:b2:30:3d:ea:07:f6:0f:
60:c0:67:15:af:17:f0:28:7b:02:b6:63:f6:3b:e9:6e:4d:c5:
b2:ab:bb:59:59:ce:c4:41:46:0a:93:30:6f:ac:0f:73:4a:a5:
fc:8b:64:98:e1:15:cb:d2:53:79:a7:c5:80:4f:36:ba:b3:34:
bf:35:25:15:b6:b0:9b:ef:a2:c7:62:22:7e:f4:36:a2:10:c8:
5b:1b:0c:fe:fc:c4:03:d8:2d:17:ef:23:d4:8e:50:f6:5b:f1:
06:61:10:9d:66:c1:46:d8:18:51:e2:e8:7a:63:0b:50:73:52:
9f:0d:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client