Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: /26398rsa54Mgj0oJC5zLRReBbNCMjfbIF6X8VBkhYY=
Subject key identifier: F0:EF:46:8A:0E:FC:5C:D6:16:E3:7F:25:76:04:E3:5A:B1:00:73:4A
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019F905A80EFDA39092A66A70DFF9FFC93CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0A2B
Signing time: Thu 23 Jul 2026 19:01:18 +0000
Manifest this update: Thu 23 Jul 2026 19:01:18 +0000
Manifest next update: Fri 24 Jul 2026 19:01:18 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: UIcIfwuklQ9E2DSMlt/DUX4GrObi+6FlSvO/10r+vtg=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:80:ef:da:39:09:2a:66:a7:0d:ff:9f:fc:93:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jul 23 19:01:18 2026 GMT
Not After : Jul 24 19:01:18 2026 GMT
Subject: CN=f0ef468a0efc5cd616e37f257604e35ab100734a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:79:9f:d4:d1:fa:d0:d9:20:e0:b0:d8:96:
0b:44:e6:56:1f:8b:5e:1c:1b:9c:25:35:1d:e5:5c:
ff:a0:4b:e0:d0:ca:e7:c7:1c:65:f6:77:cd:7b:25:
39:06:fe:88:74:cc:0a:ac:c9:55:9c:a9:d4:12:82:
09:e1:9d:9a:9a:bc:0f:ac:dc:f9:c1:b5:e2:74:95:
d2:76:db:23:37:5c:f2:8d:c0:95:3a:76:8f:e0:bf:
58:c5:94:cd:89:f1:6b:58:83:27:8f:c9:56:b0:dc:
36:a3:19:bd:71:bd:2c:28:31:a5:d8:55:d1:76:a4:
36:f7:c4:7a:9a:42:7e:f0:dd:2d:a5:58:bb:4e:cd:
ef:d2:11:08:c6:b9:a1:24:86:ef:60:85:31:9e:07:
4a:d2:39:03:8f:6d:2f:c0:ca:9a:9d:43:9c:86:ee:
08:5d:cc:6e:9b:94:5c:6d:e2:47:9c:7e:b8:b2:50:
32:4c:e4:54:7d:70:dd:28:0f:82:d4:ff:e8:ce:dc:
f1:5f:92:77:96:89:33:0d:90:9d:89:41:18:5d:ad:
ea:47:d2:17:aa:3b:eb:b1:64:2a:94:eb:4b:d6:94:
71:16:6b:39:9b:17:15:72:00:8e:2b:72:0c:39:ce:
48:96:eb:a1:55:c2:79:ac:4a:2e:a9:6c:8b:3f:79:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:46:8A:0E:FC:5C:D6:16:E3:7F:25:76:04:E3:5A:B1:00:73:4A
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:16:9a:ac:05:70:ed:ca:6b:39:58:95:06:63:4e:b6:11:
8b:f8:0b:fd:cc:64:56:df:f2:75:23:62:bb:fb:79:0a:c0:d7:
29:05:b5:29:89:2b:c4:0f:a4:1f:b5:fb:d7:ec:bf:51:cf:4c:
d5:6a:92:4b:84:c5:22:ee:a3:19:0a:6e:cd:c6:ac:43:3e:e7:
94:1f:86:9c:69:df:c6:c1:b4:65:69:b4:dc:1c:05:04:40:57:
df:a7:94:98:31:fd:96:e8:ab:7f:d6:d5:1b:7a:84:c4:85:11:
3b:d3:5e:f2:af:9d:02:53:66:ff:79:ae:8d:34:4f:f6:04:d9:
51:9d:82:24:12:83:46:d1:87:40:53:58:57:ae:40:30:74:af:
cf:d7:94:59:92:2c:03:f6:3b:bd:0f:5b:9c:f1:28:a5:79:03:
46:a0:63:9f:eb:95:7f:c7:d3:5d:75:4f:3c:4f:eb:82:bb:36:
12:4b:ba:cb:10:24:29:f7:1a:e7:f9:1b:84:d1:8d:d6:5a:70:
e3:db:3b:7f:e1:fd:ec:c0:ad:f5:71:e0:82:3f:f5:ff:fc:ea:
58:ab:d0:7f:1f:5d:1a:04:80:d9:28:5a:5a:59:a3:e8:fd:b7:
3e:2b:f6:e8:4a:c4:fe:f5:16:a4:15:a0:45:46:ad:d8:7d:c5:
ad:fd:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:01 2026 by rpki-client