Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: yDBsoTaQBGktL1QEV8g2SmvTiEIPahIpOFSP3t2H8E8=
Subject key identifier: BD:C1:F9:0E:DE:BE:63:68:0C:36:1F:DD:1D:1F:07:10:5D:60:E3:12
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 01A0CF6CF7A68D325E9AD6607DEF0B7E3ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 027D
Signing time: Wed 23 Sep 2026 18:00:19 +0000
Manifest this update: Wed 23 Sep 2026 18:00:19 +0000
Manifest next update: Thu 24 Sep 2026 18:00:19 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: 5l74NwPyEu+OjxPxS5Hp2UOVXAfjsxDBX5dzu+fn85U=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:f7:a6:8d:32:5e:9a:d6:60:7d:ef:0b:7e:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Sep 23 18:00:19 2026 GMT
Not After : Sep 24 18:00:19 2026 GMT
Subject: CN=bdc1f90edebe63680c361fdd1d1f07105d60e312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:a2:16:0e:03:b9:6a:ac:24:24:ca:6f:4f:
cc:8f:ad:b7:dd:ff:ee:98:cf:8c:25:90:50:bd:30:
98:55:e4:5f:48:94:a4:94:0d:3d:4a:b0:0f:36:40:
58:2c:9c:5d:79:2b:5c:f9:57:cb:7d:cc:43:66:47:
d7:44:38:a6:0f:1a:0c:bc:fa:88:05:25:1b:43:77:
fb:42:c3:60:71:12:5a:35:f3:5d:64:45:40:91:c6:
f3:d9:ce:3f:c9:92:fe:c1:a9:9c:63:2c:a6:35:b2:
23:b3:6b:8a:93:f4:e1:9b:c5:ac:d6:5b:ad:45:ae:
ed:97:ef:c5:cc:27:0d:9c:60:57:e4:5c:44:fb:49:
cc:ae:5d:e0:41:ec:9f:22:e8:07:f8:4e:52:17:e5:
7a:c1:4a:25:92:66:d7:98:29:62:a5:3f:0f:ab:72:
3b:f3:3b:e4:e6:15:e0:41:aa:f7:d0:da:9d:5f:96:
d6:69:8a:e8:8f:e4:b8:94:bc:79:c9:47:8b:28:37:
29:b3:31:91:57:ae:bd:e9:2d:0b:df:f7:04:eb:cf:
ae:e7:32:a7:e7:aa:a2:54:a3:7f:59:26:68:07:b5:
41:f3:a8:59:a6:df:cb:0a:36:7c:4d:ed:4a:42:0f:
10:2b:76:2d:6d:60:0a:e6:9a:fe:5a:83:aa:b7:41:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:F9:0E:DE:BE:63:68:0C:36:1F:DD:1D:1F:07:10:5D:60:E3:12
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:20:ed:ef:49:50:5e:6d:fc:8a:f1:56:6d:d8:40:c5:3d:7e:
65:e5:48:91:f6:94:9c:9a:f3:f1:f4:52:a9:a2:5d:fb:9d:7e:
73:50:09:77:6c:02:25:1d:b8:9d:fc:a7:f2:1e:7f:1c:da:1f:
a0:55:97:a0:46:79:da:11:c6:29:f9:c2:2a:48:55:c0:d6:47:
aa:0a:d3:55:b0:67:0c:9b:43:ce:d4:85:5a:85:b8:90:fc:d5:
51:8d:5d:65:79:ce:3b:47:61:6f:cc:2b:eb:73:24:30:df:d4:
70:27:b8:22:b3:0d:14:86:03:b3:0b:b7:5d:34:46:43:ee:9a:
53:f9:84:ac:7b:74:a4:59:e7:0e:9d:b8:68:df:12:6e:77:6c:
c1:e5:db:97:1f:03:a1:9b:5a:40:1f:7d:72:01:53:e4:8f:08:
6d:13:f0:2b:56:b4:3a:95:df:a6:9a:28:29:b8:41:d7:4a:c7:
b4:fc:fc:37:31:d6:a4:e1:9f:6e:3e:ec:38:d0:78:a7:64:eb:
fa:ee:00:e4:99:18:1e:26:8b:da:75:ec:3e:44:01:88:9b:a7:
3d:8a:db:73:98:20:6b:bf:9e:6a:ef:0e:ae:74:24:84:1f:63:
f7:1d:c3:77:f1:b9:2a:6f:de:bc:aa:7c:45:8e:7d:1f:46:38:
b3:29:e7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:34 2026 by rpki-client