Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.mft (raw, json)
Hash identifier: BAcAwdBw/n3Vpb82opnSsDtHxohjbb0rThyAzAXLw7k=
Subject key identifier: AC:98:70:ED:06:56:FF:7A:2C:92:AB:F9:3B:70:E9:FD:2E:35:35:38
Authority key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Certificate issuer: /CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Certificate serial: 019D2772D294EE20B81E85CD0B28D0D55F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
Manifest number: 42
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 1-YUzm9bktvZypnyvdxbuQMFLlWk.crl (hash: OImN+yPu7xA4nu65fD9DlLR5+b9GOLT/6E3GUdfMUvc=)
2: vTv6Y9pYzSLa4y30BsFSU3zUkkI.roa (hash: W0KsvSQFE2TKZ3eONDLazVIwQ+vxG34zEx4WZk3Nw8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d2:94:ee:20:b8:1e:85:cd:0b:28:d0:d5:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=ac9870ed0656ff7a2c92abf93b70e9fd2e353538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:9e:8d:9e:26:11:84:f9:26:bd:10:34:0e:
54:e5:d3:44:b0:c0:8c:93:35:ec:5d:6b:5b:ca:44:
78:38:9b:c0:04:d3:08:db:c9:6e:f7:0a:ad:8d:2d:
d8:7a:53:74:b0:63:2a:03:60:da:a4:5f:d0:12:b9:
08:2f:76:9e:cf:19:58:ea:d1:de:a4:0c:6e:59:0f:
e0:b8:2d:9e:f4:de:a3:72:62:82:2e:5b:86:8c:e0:
19:41:25:99:9f:2f:88:b9:e5:a0:25:0a:ba:7e:68:
1d:f0:3f:a4:17:3f:d1:b3:2a:4e:6c:b8:48:93:9d:
10:aa:76:ea:44:e3:cb:22:e2:0e:14:9a:bd:19:47:
3b:76:c1:7d:87:5d:d6:9e:81:4a:a0:2a:7f:e3:23:
bb:41:be:d3:b0:6c:50:fb:8b:38:15:af:be:df:7d:
c3:53:0c:82:55:60:19:5e:53:ab:e5:ef:a3:d2:26:
2a:d0:62:ac:24:51:8a:b8:e7:5a:e0:a4:dc:9b:40:
47:7d:a9:17:cc:08:8f:49:38:da:dc:cf:65:22:ca:
4d:07:af:5b:11:1d:a6:bd:4f:fd:43:6c:5c:f8:84:
93:2e:06:1b:ee:db:5c:16:36:10:15:97:54:bc:8b:
e2:e6:47:3f:ec:99:b5:80:a2:6a:46:e8:2d:36:71:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:70:ED:06:56:FF:7A:2C:92:AB:F9:3B:70:E9:FD:2E:35:35:38
X509v3 Authority Key Identifier:
keyid:F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1b:b6:7e:04:4c:73:be:b3:fa:de:96:6e:45:a8:49:93:d2:
d6:49:51:31:e5:03:b1:c6:f9:49:9d:3f:47:82:f0:32:ad:7a:
44:63:48:04:44:fd:e1:d9:89:33:fe:cd:81:90:4b:bd:99:da:
51:f5:e1:4e:0b:fb:ed:05:b2:ba:80:2e:d2:8f:7f:24:b6:f4:
97:e0:90:2c:6b:33:04:2d:5d:f9:5f:e2:0a:92:69:80:6b:2b:
87:b6:ac:9f:70:a9:f1:83:4e:cf:c4:4f:52:e3:26:54:0a:57:
89:c3:ab:98:80:07:b4:10:64:4b:d2:c3:2a:a9:02:42:66:a9:
e1:63:9c:fd:08:5c:f9:57:bf:5f:f9:ba:e1:75:83:e1:56:c8:
21:6b:63:d1:73:13:2d:fb:fc:59:b4:ce:98:c7:f3:e8:9c:35:
38:22:b7:d2:e4:38:74:c0:d3:f0:73:39:6d:ac:4b:45:f9:9c:
4a:e7:38:1d:2f:6d:7d:06:17:81:7a:43:93:bd:ee:29:15:13:
b1:9f:b0:eb:51:a5:71:54:ad:77:64:99:53:dd:f7:43:03:bd:
68:d6:93:2b:97:4d:0f:db:c7:b9:d3:d4:b8:a5:e1:bd:f8:dc:
41:d3:95:c9:40:5c:fd:83:6a:cc:f5:ba:9a:9f:de:4e:16:92:
97:34:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:17 2026 by rpki-client