Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: n9OrhF051Aobr2jF30SGKornJ2xWKYW+DuEhh7xy8zQ=
Subject key identifier: 6D:CC:BC:14:AB:AA:CC:69:37:4E:C2:82:1E:81:08:90:D7:35:FB:39
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 019D28BBF1BD1E644489525A5F720EC67104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 99
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: 2HTYbjPbHidFvXmJ206NvGZ2Wz/SLuXCQBXf8TSVaIY=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f1:bd:1e:64:44:89:52:5a:5f:72:0e:c6:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=6dccbc14abaacc69374ec2821e810890d735fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ba:60:f8:95:4b:8b:8b:ae:bb:fb:4a:e5:d0:
78:7a:21:6b:11:ed:23:71:86:5e:e5:c0:5b:d6:59:
3f:00:a6:47:59:57:95:e6:58:0e:59:25:5b:3f:eb:
6a:1b:29:5f:c5:d1:e1:7f:e1:9e:0a:88:bb:ab:9b:
f7:da:49:44:ac:40:72:b4:80:33:68:cc:d5:b4:03:
0d:ac:0c:0f:d1:48:c6:12:64:0c:6f:e1:54:f8:17:
0b:1c:b0:4c:ac:b2:b6:99:b3:80:47:44:44:83:76:
7f:dc:f1:98:06:47:f4:a1:c2:6f:f9:94:4f:f1:59:
fe:e0:51:a6:a2:b0:e0:8d:a0:a6:46:13:78:b8:d2:
54:5c:10:0f:33:ed:bf:f3:79:c4:b7:1c:fc:0f:d5:
66:4f:6d:2a:78:ca:eb:b9:7e:32:72:60:32:93:74:
44:f9:81:a3:13:fe:38:d5:bd:21:52:33:bb:dd:71:
3b:7f:27:91:5e:7b:80:07:30:68:58:38:a3:74:7d:
22:8a:49:e1:50:44:a9:03:dd:2c:f0:75:eb:b1:d3:
34:36:b4:18:4f:fc:c0:da:af:ff:6f:f8:1b:df:00:
cc:08:da:db:ca:37:0a:81:36:6a:6f:ee:ca:38:09:
13:7f:a1:2d:28:a1:23:56:1c:03:4b:fe:2f:c0:34:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CC:BC:14:AB:AA:CC:69:37:4E:C2:82:1E:81:08:90:D7:35:FB:39
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:f4:3c:d8:68:58:e2:7c:76:54:6d:77:ab:59:6c:b7:93:
0b:7b:8b:fc:11:ba:65:c4:d5:f0:fc:96:c2:6a:50:8b:55:9a:
53:ef:05:1f:ed:07:7a:c8:f0:e0:ce:14:d8:f2:a7:9f:42:7f:
d1:be:88:b1:b2:fe:34:41:13:75:ba:a8:b1:c3:46:f8:60:d2:
2a:59:c2:aa:e4:0d:3b:46:fd:98:11:40:9e:6e:06:6a:3f:9c:
cc:51:b8:08:23:15:a4:4f:be:1e:44:be:c7:58:13:d1:a0:32:
02:09:75:e2:fe:69:fd:e6:ca:a8:d9:c8:f5:9f:fa:2d:0e:2d:
44:d6:a5:da:14:eb:8c:2b:51:7d:ed:05:5d:05:91:b5:49:cf:
ed:a9:55:00:74:4a:c2:59:61:a1:78:4a:11:e0:95:6f:ad:13:
4c:54:ad:e9:2e:d3:b0:c0:65:29:8b:3f:46:82:aa:f1:e0:51:
75:9d:68:a3:27:cc:29:90:a1:e7:78:d2:4f:ed:e2:e5:51:df:
07:e1:93:a9:02:28:82:67:87:a7:3e:05:b3:8b:5c:c3:91:e6:
30:08:e6:c0:52:8e:83:44:af:a0:82:5f:83:c6:b9:fc:ed:5f:
83:6d:a5:c5:4e:e2:f0:10:01:b2:7a:72:8d:7e:a1:3f:fc:72:
ca:59:3a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou/G9HmREiVJaX3IOxnEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MmI4MjM3YjNmNmQxZDFiZWFjMjlkMjk2OTY0MGIzOWRj
Yjk0M2UwHhcNMjYwMzI2MDYwMTM4WhcNMjYwMzI3MDYwMTM4WjAzMTEwLwYDVQQD
Eyg2ZGNjYmMxNGFiYWFjYzY5Mzc0ZWMyODIxZTgxMDg5MGQ3MzVmYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bpg+JVLi4uuu/tK5dB4eiFrEe0j
cYZe5cBb1lk/AKZHWVeV5lgOWSVbP+tqGylfxdHhf+GeCoi7q5v32klErEBytIAz
aMzVtAMNrAwP0UjGEmQMb+FU+BcLHLBMrLK2mbOAR0REg3Z/3PGYBkf0ocJv+ZRP
8Vn+4FGmorDgjaCmRhN4uNJUXBAPM+2/83nEtxz8D9VmT20qeMrruX4ycmAyk3RE
+YGjE/441b0hUjO73XE7fyeRXnuABzBoWDijdH0iiknhUESpA90s8HXrsdM0NrQY
T/zA2q//b/gb3wDMCNrbyjcKgTZqb+7KOAkTf6EtKKEjVhwDS/4vwDTcnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3MvBSrqsxpN07Cgh6BCJDXNfs5MB8GA1UdIwQY
MBaAFNcrgjez9tHRvqwp0paWQLOdy5Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgt
ZTY4ZDlhNTY0NTJjLzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgtZTY4ZDlhNTY0NTJj
LzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWP0PNho
WOJ8dlRtd6tZbLeTC3uL/BG6ZcTV8PyWwmpQi1WaU+8FH+0Hesjw4M4U2PKnn0J/
0b6IsbL+NEETdbqoscNG+GDSKlnCquQNO0b9mBFAnm4Gaj+czFG4CCMVpE++HkS+
x1gT0aAyAgl14v5p/ebKqNnI9Z/6LQ4tRNal2hTrjCtRfe0FXQWRtUnP7alVAHRK
wllhoXhKEeCVb60TTFSt6S7TsMBlKYs/RoKq8eBRdZ1ooyfMKZCh53jST+3i5VHf
B+GTqQIogmeHpz4Fs4tcw5HmMAjmwFKOg0SvoIJfg8a5/O1fg22lxU7i8BABsnpy
jX6hP/xyylk6ig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:53 2026 by rpki-client