Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: JdKA9IJs0FszP8gvuzBPU5LiphbtPkt4ma38PJbi508=
Subject key identifier: 64:58:C3:15:AD:5E:9E:5D:D9:F7:E8:17:B5:FC:AF:88:77:7D:3A:30
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019F916C70FD55144E790F57147A32D34AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0B14
Signing time: Fri 24 Jul 2026 00:00:30 +0000
Manifest this update: Fri 24 Jul 2026 00:00:30 +0000
Manifest next update: Sat 25 Jul 2026 00:00:30 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: WtggF9rfh1SIoGXgmWk8Aa3v00Wmsm/P5VNfDGqCQmA=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:70:fd:55:14:4e:79:0f:57:14:7a:32:d3:4a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 24 00:00:30 2026 GMT
Not After : Jul 25 00:00:30 2026 GMT
Subject: CN=6458c315ad5e9e5dd9f7e817b5fcaf88777d3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:a9:35:a7:92:c9:81:44:2f:63:c3:fe:3b:
15:2d:9d:b0:8d:45:4b:2d:8e:76:6c:42:ce:a4:aa:
f0:66:fd:a6:51:55:f8:6c:a3:8e:1a:1d:ea:4f:99:
a8:ef:09:b4:10:ee:58:f6:b6:4a:70:10:58:f3:8c:
62:14:5c:58:96:99:95:0f:55:07:96:06:92:da:27:
9b:b3:3d:36:52:1f:75:85:8e:25:df:99:b7:73:b4:
23:4f:b9:e8:30:21:b8:7d:a4:36:68:75:a1:8b:0b:
5a:55:c6:c8:b7:cf:e3:1c:a2:19:45:c6:ab:34:93:
1f:e2:cf:5e:0a:c9:1f:ec:af:70:18:d2:5c:23:9d:
41:3e:27:b8:0a:2a:3c:d4:e3:b8:02:64:85:e3:4d:
1e:88:eb:20:95:64:39:2b:a1:e9:ee:ff:e2:68:87:
89:77:67:1e:f1:3c:f3:b7:1d:3c:06:2f:ae:2f:00:
0f:41:6a:ae:f0:de:96:0b:22:58:4f:e5:95:6e:2f:
46:3e:61:bd:b3:4a:ce:d1:56:3d:f7:fe:cb:fe:d3:
20:d7:6c:1a:78:cc:b0:57:e5:76:3b:6f:e4:0a:6a:
ad:1c:d4:c2:11:6b:0c:57:5b:9f:b0:0d:16:bd:11:
fb:42:26:33:dd:58:4b:42:b6:51:86:15:38:ce:f5:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:C3:15:AD:5E:9E:5D:D9:F7:E8:17:B5:FC:AF:88:77:7D:3A:30
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:3b:a3:ef:f2:05:47:6b:02:9c:e9:ad:40:e7:10:b0:0c:
ce:be:b6:62:3f:16:30:95:a7:7b:88:37:7b:1d:fd:0e:1d:33:
15:d8:dd:41:b1:40:36:ce:94:2a:84:2d:08:6e:72:91:97:d5:
b0:64:01:a5:f3:ec:7e:4f:c2:8d:36:85:54:16:00:02:02:99:
b4:61:cd:d4:ac:26:ca:cc:2b:5a:8c:0e:99:dc:54:d6:a4:e0:
64:9c:a8:9b:fb:9f:e1:e8:91:80:82:88:59:b0:8f:be:64:ca:
6c:10:e9:ca:cf:a0:09:81:9d:87:a4:ce:3d:43:ea:5c:6c:89:
26:05:bf:a5:a7:db:61:51:65:ce:a1:50:c9:7a:df:42:a3:35:
5d:6d:4b:6e:f6:d6:46:60:b9:40:e8:98:3e:76:c4:40:40:59:
1e:b3:80:42:59:83:8e:7b:16:49:39:35:a9:60:6e:92:c9:62:
7c:52:35:65:3f:6d:49:0a:30:ab:78:aa:83:d6:cf:b5:c4:58:
2e:2d:1c:ce:fe:a0:d8:95:83:8a:6a:8b:86:0e:b8:f1:66:a7:
b4:47:24:3f:6d:6b:a3:3f:2d:76:8b:43:bb:91:c3:d0:b1:26:
b0:25:df:66:0f:06:30:de:cf:5d:95:23:90:57:da:24:2b:27:
24:0d:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:08 2026 by rpki-client