Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: T+KtoeNP9pUw+osh4lO1FFgytlmonT9fvN5t3ADp97A=
Subject key identifier: D8:D8:E3:19:78:DF:9E:07:D8:9C:7C:88:AB:61:DF:05:FA:3C:E5:01
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 01A0D1C8FB10722E8F71A2D65B165F6478B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 154E
Signing time: Thu 24 Sep 2026 05:00:04 +0000
Manifest this update: Thu 24 Sep 2026 05:00:04 +0000
Manifest next update: Fri 25 Sep 2026 05:00:04 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: PVWvg9pf5kBEs2AdLWCkBGGPhBpk5qgCLZD/hUR38gU=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c8:fb:10:72:2e:8f:71:a2:d6:5b:16:5f:64:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Sep 24 05:00:04 2026 GMT
Not After : Sep 25 05:00:04 2026 GMT
Subject: CN=d8d8e31978df9e07d89c7c88ab61df05fa3ce501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:42:ab:48:41:de:ef:1c:16:f1:e1:94:02:
04:7a:1c:09:18:91:9b:2e:f6:d4:4b:0d:69:c0:76:
12:6a:40:57:81:c0:66:03:c0:d6:d4:5d:d4:4c:26:
f7:5f:04:cd:de:9f:f6:f8:cf:f9:2b:9c:95:01:a0:
8c:80:ea:33:a1:29:e7:69:f4:5f:45:71:b0:c6:21:
28:50:9c:ad:7f:1c:32:5f:c1:a1:1f:3a:34:43:60:
57:2c:1a:fe:4f:3d:df:43:4d:62:43:8f:c1:62:2a:
64:28:d2:3e:73:40:1a:a9:27:a5:c3:07:52:ff:a1:
f2:c4:26:e2:fe:d0:00:c5:e2:96:48:fc:85:c0:a2:
09:c4:ec:f8:70:5e:c4:69:85:8b:1b:2a:94:a2:72:
12:86:54:d1:d9:b1:80:87:b2:63:7a:b5:b8:15:f5:
af:20:d6:14:05:45:08:44:db:2b:7c:5e:7a:2e:ec:
17:5a:18:bd:39:e9:60:60:ee:63:69:7c:c3:86:da:
f2:6f:33:a9:b2:7f:84:a8:23:52:e6:dc:d9:0a:0a:
d4:cf:36:ac:ec:96:3c:4a:30:4a:cc:b8:68:14:95:
1b:71:b4:2b:80:a2:2c:af:97:26:91:9d:21:ca:86:
61:5a:95:1d:0e:ae:09:fd:4f:a2:5f:bc:e7:0d:7b:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:E3:19:78:DF:9E:07:D8:9C:7C:88:AB:61:DF:05:FA:3C:E5:01
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:83:6d:cc:7a:cc:e6:d3:f5:10:b9:75:c6:41:55:6d:3e:
48:0c:a0:0a:d4:3a:47:c6:4d:2b:f8:a7:72:7b:60:fe:b3:f5:
9c:b3:ff:fa:dc:14:2a:69:e2:1e:38:22:7a:49:76:e5:99:06:
4b:61:38:09:54:d4:d8:d7:4e:24:7c:2f:c7:8d:78:45:19:aa:
4b:cf:2f:b7:ab:b9:70:c1:40:fc:01:a6:e2:56:3a:7c:3e:76:
29:9d:ed:7a:d4:ba:f1:30:b3:5d:b7:7d:19:9c:16:ad:db:61:
44:4f:34:45:5f:b0:73:71:bc:e5:8f:d7:8a:00:8e:fd:43:69:
52:83:df:53:58:94:a6:4d:3c:e6:cd:f3:c5:db:09:0b:68:80:
34:47:bc:7d:1c:74:bd:ce:74:b5:50:0a:df:2b:37:df:41:dc:
c1:82:c7:95:4e:08:77:83:27:e3:d4:cd:45:a3:8c:ec:1b:18:
24:27:c6:22:07:db:2f:1a:47:22:a8:a0:07:0e:7e:93:8d:79:
ab:94:0c:af:fa:4d:0e:e8:2c:f1:d8:dc:df:65:ef:55:70:bc:
e6:0a:f3:87:ff:f9:e9:ff:c6:ad:fd:f2:43:64:da:31:a3:50:
2c:39:5d:50:93:b4:14:5c:15:78:30:ce:70:26:e6:7e:c8:10:
cb:b1:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:26:11 2026 by rpki-client