Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: 4IKKEbfm2CitWL7o68shvAeu47KWtHupqDivh6zvaSo=
Subject key identifier: 4C:89:1C:36:4B:24:F5:98:A5:74:F4:A8:D3:EC:3B:47:89:FA:DF:8D
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 019D29CE0ED1ACDFB139870A87DACA96C171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 1360
Signing time: Thu 26 Mar 2026 11:01:03 +0000
Manifest this update: Thu 26 Mar 2026 11:01:03 +0000
Manifest next update: Fri 27 Mar 2026 11:01:03 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: 8qv5CJQX6boaE4DE6bGlIgflLFJjr4LU2G6fL9De31Y=)
2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:0e:d1:ac:df:b1:39:87:0a:87:da:ca:96:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Mar 26 11:01:03 2026 GMT
Not After : Mar 27 11:01:03 2026 GMT
Subject: CN=4c891c364b24f598a574f4a8d3ec3b4789fadf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:d9:e2:54:16:23:ed:60:e6:47:58:3f:9b:
c8:e7:56:90:b9:10:e3:b6:2e:57:eb:13:b2:5d:52:
d7:db:3c:d0:22:f0:a2:be:10:69:3f:c6:d2:03:37:
9b:33:a5:45:fc:82:f2:35:1c:e8:10:c4:c5:b8:58:
2b:f8:4b:b2:3f:6f:cd:16:93:9d:89:1c:99:05:4c:
07:25:a5:7d:e1:71:28:7e:4b:ab:78:37:90:02:95:
c9:d2:35:d2:27:3a:06:b7:b6:9c:9e:3c:c1:2b:54:
22:ed:aa:aa:41:8e:2d:20:57:cd:6c:51:e0:1c:7e:
a5:99:4f:4c:d7:f9:63:5d:18:ba:83:70:70:4f:8f:
8d:5d:93:de:be:d0:79:80:4d:f2:f7:6b:50:b1:7c:
f1:43:db:a1:87:73:b2:5d:90:ba:c2:59:35:19:40:
9c:e4:06:82:cb:85:fa:fe:43:c8:f2:96:5f:54:3b:
74:74:36:e6:dd:25:25:fe:69:5c:57:42:0d:c6:6e:
21:58:ea:fa:32:2a:21:7a:8c:3d:b2:4f:0c:1c:2c:
55:7c:75:0e:4f:59:16:07:9f:b6:ea:c5:f8:b7:f8:
44:2e:54:71:12:dd:e3:f9:3d:93:3e:f1:fa:e6:e8:
3d:a6:99:be:b1:f6:44:0b:68:e0:3c:32:e6:a1:5f:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:1C:36:4B:24:F5:98:A5:74:F4:A8:D3:EC:3B:47:89:FA:DF:8D
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:8e:6b:f2:86:22:2a:c1:e5:8f:71:72:70:93:85:7f:e9:
05:37:bf:2d:48:5f:bb:bf:1a:94:8e:46:ae:f0:75:a1:61:0e:
a9:35:2d:61:62:43:de:1f:33:2b:1f:c1:96:e8:18:7f:cd:fc:
69:3e:ce:39:49:0b:3a:cf:d3:f1:8d:57:44:70:68:0b:f6:0a:
32:a8:b7:31:11:ca:4e:45:14:55:97:d0:12:22:50:83:d1:18:
5b:c4:6f:51:c0:d7:d8:d0:ee:8a:6f:94:b9:27:36:35:95:24:
15:4d:19:ea:8c:b5:59:16:73:8b:ff:c5:ab:fb:b2:a2:01:36:
bf:68:0c:62:8a:c7:c9:56:ec:83:b6:4f:62:9e:1d:58:56:1a:
79:6f:7e:b1:c7:06:8f:b9:a7:b3:da:ed:cb:e0:f2:98:2a:10:
43:8c:aa:f4:1d:af:61:0a:90:63:46:a1:bb:36:90:2a:f7:63:
bc:22:bb:12:b2:78:1b:b7:94:11:46:25:11:66:16:9c:82:37:
16:1c:eb:37:23:65:11:5e:f9:23:84:e3:09:53:4a:af:2f:79:
61:56:60:20:7c:59:92:ce:35:5c:d8:88:b7:b5:0f:eb:80:2b:
4b:82:09:2d:df:23:cb:cf:86:6c:bb:66:4e:1a:02:5e:30:7d:
bc:ac:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:57 2026 by rpki-client