Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: XcFZvXi/UDqdIiT0wZ6kpeizwKxqOh4to4jRmHpvbt0=
Subject key identifier: 79:3C:E1:2C:2E:43:C0:FD:00:45:D2:27:BB:D4:3A:13:2C:3E:1C:F7
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019E1CB52EAD3AFEAFBD97883DD961C9F164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0A53
Signing time: Tue 12 May 2026 15:01:36 +0000
Manifest this update: Tue 12 May 2026 15:01:36 +0000
Manifest next update: Wed 13 May 2026 15:01:36 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 7b8na1Ckq7JcmQDmh4Aeo7+xIoIXDNXZGU0i/dg4PW0=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:2e:ad:3a:fe:af:bd:97:88:3d:d9:61:c9:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: May 12 15:01:36 2026 GMT
Not After : May 13 15:01:36 2026 GMT
Subject: CN=793ce12c2e43c0fd0045d227bbd43a132c3e1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:dc:55:ee:d7:db:1c:15:8d:aa:aa:02:da:
c1:14:70:95:75:94:7e:21:23:7e:75:8b:30:07:44:
49:d7:63:47:07:a8:74:72:ee:95:41:89:0f:81:1c:
d8:a8:89:11:f0:4d:d3:31:66:34:31:34:b0:54:4d:
89:e7:45:09:e6:f2:43:bf:58:1e:0b:9e:77:cd:25:
6c:9d:be:55:ec:53:bf:21:0b:c7:6b:3d:59:6f:0f:
8c:67:21:fe:6b:63:d1:0d:94:a9:a2:41:e1:18:b1:
ae:2f:19:41:8f:1b:a3:2c:5a:d7:d0:8f:10:06:ee:
38:4d:b1:76:fd:5f:cb:90:ba:49:36:64:94:62:c5:
3c:8b:09:2b:e5:8a:b7:5f:bd:f5:c2:37:a7:f9:3f:
90:9e:a0:2d:df:87:7f:8c:09:a6:cd:37:e7:47:ea:
c5:f4:e8:4b:93:8c:c7:7d:d9:0a:7e:30:fa:4e:63:
04:f8:da:8e:c9:c6:ae:3a:b2:26:a4:7c:fb:cc:f4:
95:b6:13:71:ad:d1:e5:44:ba:de:cc:b7:1d:bb:00:
13:72:b5:bd:4c:8c:33:da:3e:60:7a:52:52:72:0c:
1c:9b:fe:d5:54:7d:fd:83:ab:eb:7a:55:c2:7e:47:
f6:e0:46:df:40:3d:30:be:cb:ac:6d:5d:73:c5:d1:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:E1:2C:2E:43:C0:FD:00:45:D2:27:BB:D4:3A:13:2C:3E:1C:F7
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c2:40:be:66:25:41:c4:b6:4f:70:9a:bf:85:fb:9b:d9:23:
fb:ff:95:f0:8e:b5:97:31:71:61:26:d9:33:ac:93:49:41:bb:
ec:f4:d2:c1:ba:86:70:fa:61:c5:5e:5b:49:ff:39:f2:29:c5:
ef:49:7c:5c:fd:50:1a:ef:e7:18:b9:c0:ea:54:50:92:0e:75:
be:57:9e:5c:66:c1:7f:65:11:b2:3a:a7:ba:b5:c8:23:60:24:
b9:40:c7:46:7b:67:2d:32:34:29:d3:c3:bb:fb:06:8d:2e:14:
16:c1:fe:3c:e4:4e:b1:69:61:44:91:6e:6c:2e:91:2f:7b:ff:
b2:81:dc:84:c2:ad:40:e8:07:68:4d:f4:6c:e6:db:af:01:92:
ba:cd:12:f3:29:42:d4:07:ab:80:1f:d6:bf:94:27:f0:83:be:
2e:65:2c:9f:c1:d8:42:0f:2f:c3:3c:8d:6d:85:6a:ce:44:53:
0d:96:a7:9d:56:bd:c2:44:d1:8a:08:a7:81:fa:89:64:00:21:
d1:81:36:bf:07:e8:32:2e:82:70:d9:6e:45:0d:8a:0b:e5:4b:
c5:08:82:65:8c:f0:4c:b2:3c:72:91:fc:ca:21:37:a4:a5:c6:
0f:34:8d:1a:4e:84:b9:7e:47:b8:da:4f:ba:7d:a7:15:38:1d:
c2:31:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:51 2026 by rpki-client