Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: c2ylDipb+88lfCtdSNUaKwbGWUoP6GnKSMzfPPbORm4=
Subject key identifier: F3:90:51:2F:CC:85:B1:9A:E2:B4:F5:18:FF:12:E0:79:23:9B:F5:D0
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019D296135D3A3775D28CBFAF03DDD73EB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 07D5
Signing time: Thu 26 Mar 2026 09:02:09 +0000
Manifest this update: Thu 26 Mar 2026 09:02:09 +0000
Manifest next update: Fri 27 Mar 2026 09:02:09 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: e1ZYdkQwMWFAsm16oB/zcbDJAVb4LYPX42/hGhFvf0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:35:d3:a3:77:5d:28:cb:fa:f0:3d:dd:73:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Mar 26 09:02:09 2026 GMT
Not After : Mar 27 09:02:09 2026 GMT
Subject: CN=f390512fcc85b19ae2b4f518ff12e079239bf5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:79:7f:4e:3f:0c:03:ed:15:b0:9a:34:0c:
26:23:67:82:f9:e9:79:c6:9b:9d:80:75:77:8b:00:
f9:8a:b9:db:70:23:04:4f:70:23:43:6c:44:d4:25:
6f:f3:a8:c2:83:a5:a9:0b:f5:1a:aa:4a:dc:2c:cb:
25:dd:af:f1:2b:55:bb:69:08:8d:73:c2:dc:81:bf:
aa:51:ba:61:8b:1b:e9:9a:6b:72:4a:16:3c:3f:ca:
1e:cf:b8:d9:ba:2f:5f:3e:ab:36:3f:3e:68:00:80:
f1:2a:35:39:0a:5a:ea:2c:7e:86:53:39:70:b3:3e:
a0:00:50:8b:8b:94:42:ac:f8:d8:d1:83:52:bf:52:
aa:8a:30:20:08:16:af:6c:a0:40:92:f5:ac:ab:87:
92:3f:33:af:7d:cc:32:4d:b0:4a:dd:ad:e4:02:7a:
be:86:f2:f6:be:37:47:52:e7:e4:28:46:17:ac:38:
b9:05:5a:1a:29:76:96:e0:74:68:30:92:ca:da:a1:
8d:f1:a7:ca:31:3f:cc:3e:7b:23:35:a4:63:80:08:
41:69:b5:30:be:79:18:42:7d:2e:47:ba:f0:7c:2c:
9c:87:ac:08:8c:d9:5c:d7:04:4f:0b:f0:12:56:27:
ef:5e:e1:49:9a:00:df:b5:de:db:c1:8d:64:79:76:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:90:51:2F:CC:85:B1:9A:E2:B4:F5:18:FF:12:E0:79:23:9B:F5:D0
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:a5:8b:d1:73:25:8b:10:c7:ac:ce:eb:b0:fa:18:30:cd:
b3:1d:44:45:e3:d9:24:db:4f:6a:34:ab:69:80:28:30:e3:1c:
20:ba:41:0e:4e:88:96:ee:69:29:17:7b:b0:22:25:f1:fc:a1:
44:97:86:f1:25:cb:10:4f:e3:ab:dc:ae:c1:e3:c3:4d:ce:ca:
ae:c2:7b:ae:39:49:dd:c7:33:0a:a2:2a:c2:b7:de:51:c9:ea:
24:6b:ad:4d:33:67:42:b4:a8:34:2f:ea:88:0c:24:8e:33:be:
4a:9a:68:13:47:1e:a8:3d:cd:c6:05:f9:99:87:fe:bc:67:69:
67:8c:46:c4:af:ee:69:e6:1e:8a:68:18:c1:ed:2d:76:7d:c8:
42:8d:dc:b6:ce:1c:ae:0a:58:73:d8:c4:b0:bb:21:44:58:8a:
ee:e2:ff:2e:41:46:d4:b7:b1:84:a1:e6:21:fe:96:40:32:57:
ba:cb:2e:86:5a:51:a3:4a:23:f3:87:02:d6:36:6c:da:08:4e:
e9:eb:6c:2d:42:52:78:b9:b6:08:6b:5d:9f:ed:15:f8:15:98:
fb:81:cf:8a:bd:c6:30:c1:be:e2:8d:f6:31:24:86:69:82:03:
28:28:78:6b:02:92:30:6c:cc:4e:5a:9a:da:99:a7:2b:e1:6d:
58:58:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:52 2026 by rpki-client