Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: hQuqoOJqIbmXEZISoT8pF6ueL38s4/3WtrY0rNhrSjo=
Subject key identifier: 05:BC:4B:56:47:81:B2:CF:3E:4E:A9:9C:8D:EC:88:92:35:27:E4:6D
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019D2B170AF44D76BF5DD0EB3926CC77F23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 136A
Signing time: Thu 26 Mar 2026 17:00:23 +0000
Manifest this update: Thu 26 Mar 2026 17:00:23 +0000
Manifest next update: Fri 27 Mar 2026 17:00:23 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: otFRF1OgpMSS/AMi99Rg+OxWEqPyKPc8v0TqmODaCTk=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:0a:f4:4d:76:bf:5d:d0:eb:39:26:cc:77:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Mar 26 17:00:23 2026 GMT
Not After : Mar 27 17:00:23 2026 GMT
Subject: CN=05bc4b564781b2cf3e4ea99c8dec88923527e46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:43:f4:eb:8c:db:53:f3:52:2d:a9:ed:c8:
9e:40:65:a9:68:9a:3f:bc:2c:4e:37:a6:5d:8c:53:
7e:fe:b8:77:b5:77:d3:3f:22:ad:36:59:d6:0d:b2:
19:d3:a2:e6:6f:00:c1:38:fe:71:fd:ae:53:7d:25:
81:e8:57:02:81:68:93:37:7e:82:a2:5d:7e:96:29:
de:b3:b0:db:0f:2c:73:8d:b5:35:cc:4f:ec:32:8f:
20:70:72:34:8d:66:cc:7a:50:57:cd:2b:69:56:af:
0b:d5:5d:da:c1:7a:b0:be:89:d9:a6:b4:67:c4:97:
48:2a:06:6d:65:4a:6e:ef:6f:f4:05:c0:08:e8:2c:
02:9f:37:c9:37:78:db:67:d9:85:b6:5f:95:36:e5:
47:c8:3f:bd:70:24:d8:1d:e7:42:d6:1b:dc:08:7f:
20:ff:fc:76:77:ce:c7:73:5d:4d:d1:9b:65:bf:ea:
79:70:37:7f:a1:8f:ed:59:7c:5f:be:44:3e:c7:d2:
37:9c:33:4d:94:e9:ea:4a:6e:4d:71:50:c4:af:2c:
14:20:84:a9:b2:6c:21:49:ec:c7:31:ce:04:59:25:
3a:f6:b9:14:0f:eb:97:70:52:80:e7:b4:13:ea:a5:
9c:f0:99:df:23:4e:cd:32:06:53:11:1e:23:29:89:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:4B:56:47:81:B2:CF:3E:4E:A9:9C:8D:EC:88:92:35:27:E4:6D
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:dc:82:15:ba:89:6e:cf:f2:c6:87:10:f0:6e:57:d0:5e:
ed:04:13:2f:99:3c:91:11:20:47:98:bf:2b:ec:d7:3f:03:ef:
80:ff:c0:78:88:c1:de:45:45:92:b3:c7:55:9c:68:89:78:d3:
3b:eb:f5:42:c5:3e:a2:27:fc:26:71:da:b2:34:91:ad:7c:cc:
f6:c5:6c:c3:fb:da:a6:dc:98:eb:18:d3:0c:d9:eb:36:ad:4c:
81:8a:2e:db:54:b6:4b:bc:a5:8b:84:cd:43:0a:17:3a:36:e9:
25:f0:e9:bb:df:09:d2:b2:b1:d0:20:59:53:d5:25:3c:de:a1:
c7:c0:21:60:eb:cf:6a:06:74:df:16:77:64:35:b6:ae:66:38:
15:c4:07:ed:39:67:8d:db:3f:e7:ff:ce:76:e3:2a:3d:03:af:
bd:fb:9e:9e:97:35:4b:21:86:27:f7:cc:61:9d:55:11:26:9e:
65:85:87:26:bc:ae:26:a3:1d:1a:3e:63:cd:21:6f:dd:62:6f:
3f:7b:5c:ae:a5:bb:7b:9c:a5:bd:da:b0:6c:17:2d:a6:f8:56:
dd:e6:55:4a:a6:6c:0e:e3:ad:f5:ec:4d:49:b5:cd:e7:a9:2a:
a5:2d:a5:c2:01:a6:9f:8b:1f:ef:67:65:86:d9:d6:09:18:09:
04:5a:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:11 2026 by rpki-client