Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: hEcZi3lKKEkU4x/Z9Cvw+2nYPy3/9CLFbsBEmyp73/g=
Subject key identifier: 86:86:FB:79:0F:03:19:48:D2:87:23:1D:CF:CB:57:AB:AA:51:14:F6
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019D27A8903A255F076899EF903956FA0421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 81
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: hj3ElOULni/ojTaO2iyGsfH/LgtIJetS+tmQXrqcwxg=)
2: qS1_3wEIQuVYlhTs3iloYf1YjMc.roa (hash: Uzfr9K7CjY3AFHyO0zyI/Bv4ovC6HD2V9T5Yebzh90M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:90:3a:25:5f:07:68:99:ef:90:39:56:fa:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=8686fb790f031948d287231dcfcb57abaa5114f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:af:31:62:64:be:fe:9b:69:a6:12:b2:d1:
a1:a0:dd:ff:76:ec:67:c1:77:1d:1c:9f:ed:03:b4:
28:5a:3e:35:64:8b:97:0b:c8:15:e9:5c:4d:1d:43:
bf:14:26:35:25:33:05:9e:1b:b4:0f:be:35:9e:c1:
ff:d5:d9:82:80:17:65:ef:96:d8:5b:22:0e:79:a5:
42:ad:7c:02:be:ae:9b:a6:de:75:8b:d0:60:16:69:
f8:ee:e0:6a:ab:45:51:17:0f:76:e6:90:de:c2:ce:
6d:a3:32:27:2c:9d:e1:88:45:97:32:eb:23:ef:0b:
cb:0f:67:74:5d:bf:ef:f1:06:63:4a:22:5e:71:eb:
55:b4:bd:51:61:84:78:9b:33:6a:dc:4a:14:17:6a:
d8:9f:0c:29:95:2d:19:da:ab:db:a5:12:e6:43:86:
d5:37:62:50:79:01:ec:04:b3:91:e3:63:60:2c:15:
b3:4f:3b:84:1a:44:78:6c:65:e2:83:8d:cb:0e:96:
f3:c6:85:3d:a4:b7:cb:d5:68:93:03:59:65:5f:d9:
88:74:c5:2b:18:31:8d:9a:95:74:ba:2b:a9:b4:fd:
fb:72:19:1b:79:cd:a9:fa:98:d5:8f:4b:4f:14:e0:
06:3a:af:b7:2f:d3:37:c9:57:3f:6d:df:b0:54:54:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:FB:79:0F:03:19:48:D2:87:23:1D:CF:CB:57:AB:AA:51:14:F6
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0c:07:0e:0d:1f:96:e4:cf:49:9a:2c:55:ed:34:79:96:ff:
82:db:47:75:ba:a3:34:76:23:68:01:52:14:20:33:df:62:02:
b4:b8:98:97:11:2a:d1:41:60:7e:de:71:50:e8:ff:c5:16:68:
a1:61:11:33:1e:fd:b1:0d:0b:7c:73:49:05:fa:5c:a2:9c:3a:
bf:ef:8d:da:2d:42:26:0e:ed:76:55:f0:3e:ad:83:71:c2:25:
4d:a5:4b:ce:c9:16:01:43:0a:86:4b:b2:ed:82:55:b6:f0:84:
b1:32:44:32:49:28:1c:7c:5d:46:bc:02:84:15:bf:5d:0b:dc:
f8:28:eb:76:bb:c0:33:ad:42:83:c5:ff:15:19:a3:69:25:41:
c6:bb:bf:00:4c:ea:d5:28:9e:45:8f:3e:4e:1f:0c:2c:d6:db:
2b:ae:e1:32:e9:b1:a2:23:66:a9:93:13:24:12:c2:78:87:4a:
b2:41:02:8e:c1:05:a4:2c:ba:68:82:7d:3c:12:1e:03:f5:ad:
a0:23:f4:ff:61:47:ff:1e:08:e0:64:cb:4d:11:f9:98:0c:92:
73:92:4c:4c:61:3a:b3:36:2d:72:6f:27:6a:ef:50:c4:85:71:
60:8c:36:42:fb:ad:e6:cd:52:a4:8d:c7:f0:ac:7f:55:4e:47:
35:34:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:51 2026 by rpki-client