Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: 1faVJMaEbYCDJg3IzEijrWJSfy+WSBcC0Ctqz0qFbOg=
Subject key identifier: B2:D8:68:45:F7:85:6D:F1:3E:73:2A:77:E3:30:37:3C:9E:1F:DF:FC
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 019F8ED956C4110726FDF16EBD16C1CCE41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 01D7
Signing time: Thu 23 Jul 2026 12:00:35 +0000
Manifest this update: Thu 23 Jul 2026 12:00:35 +0000
Manifest next update: Fri 24 Jul 2026 12:00:35 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: T6HZ/XPWr+fxCKI9+JhLMIPEXrTOqaxeiEHIi3ZQ1rI=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:56:c4:11:07:26:fd:f1:6e:bd:16:c1:cc:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Jul 23 12:00:35 2026 GMT
Not After : Jul 24 12:00:35 2026 GMT
Subject: CN=b2d86845f7856df13e732a77e330373c9e1fdffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:16:14:57:97:b1:77:06:be:f8:2b:90:98:
01:77:13:98:22:bd:eb:59:1e:f3:c0:b5:31:54:2f:
c6:ef:e5:ca:c3:77:a1:06:79:04:45:f5:f1:8d:d9:
73:ff:1b:29:c1:78:cf:ce:ec:92:cc:95:c7:76:28:
42:01:d2:56:74:b5:07:ae:8c:dd:97:87:66:11:aa:
90:d6:93:ea:3b:e5:d4:0c:c1:e9:99:33:25:70:f9:
45:0f:8c:22:4f:09:12:85:47:f3:61:17:a2:31:b6:
0f:5c:01:f9:af:eb:73:af:a7:c8:9e:df:d9:94:34:
08:35:c5:9b:93:6b:2d:b8:86:68:7e:55:7e:45:f8:
44:f1:74:11:f7:36:29:28:c8:f3:4b:ce:fe:83:3a:
34:8f:20:57:fb:0d:b3:88:19:2c:5a:99:5d:cb:56:
bd:36:c3:e5:24:82:71:60:49:4b:af:59:9a:33:3c:
c7:0d:47:a6:7d:3c:2d:f1:da:dc:70:62:ec:4b:cf:
42:1c:09:5b:ce:89:24:f1:57:a5:3e:71:49:0c:34:
09:45:c8:ce:ec:0d:35:3e:08:f8:af:19:ab:bb:f0:
49:23:3e:9b:09:bb:34:64:d9:da:90:ef:fe:b1:be:
77:8e:fc:d6:a2:a1:b3:bf:80:44:33:64:44:1f:91:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:68:45:F7:85:6D:F1:3E:73:2A:77:E3:30:37:3C:9E:1F:DF:FC
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:a7:42:04:78:a4:ab:1b:30:3d:7a:fa:eb:3c:1b:c5:2d:
e9:16:d3:40:15:9a:93:79:a0:56:45:59:48:99:4a:b7:66:c6:
08:00:44:e5:56:37:bb:22:c6:b3:bf:18:ce:a2:8e:f6:0b:8a:
ea:0a:af:ab:9c:4f:99:f0:c2:3d:a3:f8:97:84:4f:d4:43:07:
1c:b1:16:ca:53:08:d0:12:d1:d5:2e:02:d8:f9:41:47:78:34:
28:d4:b7:b8:f0:a8:73:14:c2:3a:29:9d:a1:f3:dd:6c:a8:73:
87:ea:e0:4d:30:e1:29:5e:da:d8:dc:b2:56:1e:f5:f4:15:ca:
6b:b4:4a:6b:55:2b:1c:b1:1f:5f:c0:27:c0:ad:9b:f3:34:5b:
a2:6a:c0:5b:6c:83:58:15:40:1d:1e:ff:06:c6:d0:50:c6:01:
70:00:6c:a6:b5:cc:80:4b:6a:94:1d:87:bd:97:93:37:c0:1c:
f7:3c:f8:f3:a6:de:fa:08:df:95:f6:52:ce:66:eb:35:67:ab:
be:13:da:6b:1c:07:fa:bb:ef:a5:af:6e:fe:7a:f4:4a:86:fd:
07:e3:44:6e:e9:2d:b6:e9:d1:43:d9:33:4f:15:09:8d:20:4f:
7f:14:97:cb:f3:5a:5e:d6:d5:3e:02:22:67:2b:2a:c1:4e:47:
9d:c2:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:36 2026 by rpki-client