Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: /VCB1mIk8NzJJt8j+gsycs9ZzzK73/yJ8gpcWk8IqMM=
Subject key identifier: 90:32:71:77:BE:9C:E6:2B:0A:21:FA:01:42:39:83:98:B7:5E:13:61
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 01A1D9EECF2B684E64F6ECD322AF5CF0BC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 0307
Signing time: Sat 14 Nov 2026 12:01:08 +0000
Manifest this update: Sat 14 Nov 2026 12:01:08 +0000
Manifest next update: Sun 15 Nov 2026 12:01:08 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: C1whT8fqYtluCNA7Fq0aZ3xtOcwp1vnJIfIn6P5i3uI=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:cf:2b:68:4e:64:f6:ec:d3:22:af:5c:f0:bc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Nov 14 12:01:08 2026 GMT
Not After : Nov 15 12:01:08 2026 GMT
Subject: CN=90327177be9ce62b0a21fa0142398398b75e1361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:17:b4:36:8e:c1:cb:e4:34:75:e9:5d:a5:
72:3b:bf:86:4f:58:f1:88:39:0d:eb:c2:39:9c:45:
17:5f:c5:38:24:ef:08:91:7d:20:24:7c:d0:fa:fd:
33:8d:58:95:7f:8e:26:f6:e2:90:e8:ab:c5:01:43:
ea:fc:aa:3a:99:3d:4c:5e:a9:87:f3:5c:4c:83:b7:
fb:15:58:68:99:a4:9f:c7:a3:07:f9:8a:fa:b4:7a:
80:ab:b2:80:73:f5:74:07:7b:f5:48:41:f0:4a:29:
77:02:26:98:97:67:1d:60:ae:79:4c:00:fd:3a:38:
45:f7:e0:ec:87:72:50:ad:49:75:fc:ed:37:3a:3d:
e9:53:7d:62:56:dd:70:7c:f5:a4:d3:ce:89:aa:d8:
62:d3:78:34:03:22:55:38:5a:11:11:ac:05:98:20:
7d:fd:e2:70:4d:d0:fd:ff:58:f4:23:f1:ff:d9:02:
b9:5d:11:42:2a:0b:0c:a9:88:b9:60:e9:54:97:d6:
35:e2:97:f8:c1:bc:ad:17:fc:94:21:51:3e:e0:0c:
cb:8b:e7:e5:9c:fc:7a:36:ac:a1:71:5e:48:0a:6d:
f4:49:ed:f1:21:86:61:69:e6:d1:57:80:00:43:53:
da:80:59:59:de:48:52:8d:d5:9b:b2:99:b2:e5:56:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:71:77:BE:9C:E6:2B:0A:21:FA:01:42:39:83:98:B7:5E:13:61
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:40:07:df:cc:34:18:92:32:96:a8:64:80:c2:b3:1a:3e:2a:
20:0b:74:3a:47:fe:53:c5:a3:80:34:c4:16:fc:9c:20:7d:dc:
5a:86:1d:88:c4:7b:a4:4d:ef:44:43:e2:c0:b3:15:3a:4f:40:
61:e9:7e:24:c7:66:39:40:4c:40:3a:13:82:b7:97:f2:56:7e:
b4:cf:5d:f1:af:e4:a8:8f:73:3d:5b:d2:48:06:71:ac:5f:8d:
e7:b3:68:cf:72:85:f1:d8:57:b6:67:66:c5:82:f5:82:40:65:
f0:cc:17:18:d3:46:1b:c1:00:59:f3:df:8c:4a:04:7d:55:62:
50:46:e6:11:4c:1a:8e:a3:e4:49:cd:ea:2b:a2:92:32:f0:01:
e4:86:0b:d0:af:cb:08:b0:e5:7b:75:dd:c8:54:d1:33:5f:2e:
e2:39:c2:9b:6c:76:93:d1:ec:5c:2a:53:ea:9d:62:b7:ff:12:
2c:5a:38:eb:1a:de:de:29:82:6f:70:75:05:e0:ad:f3:9b:d9:
ce:a4:99:11:08:61:61:a4:4b:17:09:d4:1a:22:94:91:42:be:
fd:8a:6a:54:1b:78:fd:45:5b:ce:e7:2a:8e:25:0f:bd:7c:7f:
43:4e:16:41:8b:7e:83:92:e2:7b:bd:f7:93:c7:e0:51:36:25:
b9:8d:71:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZ7s8raE5k9uzTIq9c8LwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MmI4MjM3YjNmNmQxZDFiZWFjMjlkMjk2OTY0MGIzOWRj
Yjk0M2UwHhcNMjYxMTE0MTIwMTA4WhcNMjYxMTE1MTIwMTA4WjAzMTEwLwYDVQQD
Eyg5MDMyNzE3N2JlOWNlNjJiMGEyMWZhMDE0MjM5ODM5OGI3NWUxMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26UXtDaOwcvkNHXpXaVyO7+GT1jx
iDkN68I5nEUXX8U4JO8IkX0gJHzQ+v0zjViVf44m9uKQ6KvFAUPq/Ko6mT1MXqmH
81xMg7f7FVhomaSfx6MH+Yr6tHqAq7KAc/V0B3v1SEHwSil3AiaYl2cdYK55TAD9
OjhF9+Dsh3JQrUl1/O03Oj3pU31iVt1wfPWk086Jqthi03g0AyJVOFoREawFmCB9
/eJwTdD9/1j0I/H/2QK5XRFCKgsMqYi5YOlUl9Y14pf4wbytF/yUIVE+4AzLi+fl
nPx6NqyhcV5ICm30Se3xIYZhaebRV4AAQ1PagFlZ3khSjdWbspmy5VYRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAycXe+nOYrCiH6AUI5g5i3XhNhMB8GA1UdIwQY
MBaAFNcrgjez9tHRvqwp0paWQLOdy5Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgt
ZTY4ZDlhNTY0NTJjLzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgtZTY4ZDlhNTY0NTJj
LzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUAH38w0
GJIylqhkgMKzGj4qIAt0Okf+U8WjgDTEFvycIH3cWoYdiMR7pE3vREPiwLMVOk9A
Yel+JMdmOUBMQDoTgreX8lZ+tM9d8a/kqI9zPVvSSAZxrF+N57Noz3KF8dhXtmdm
xYL1gkBl8MwXGNNGG8EAWfPfjEoEfVViUEbmEUwajqPkSc3qK6KSMvAB5IYL0K/L
CLDle3XdyFTRM18u4jnCm2x2k9HsXCpT6p1it/8SLFo46xre3imCb3B1BeCt85vZ
zqSZEQhhYaRLFwnUGiKUkUK+/YpqVBt4/UVbzucqjiUPvXx/Q04WQYt+g5Lie733
k8fgUTYluY1x1A==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:17 2026 by rpki-client