Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: rsGZg8ZjlAY1X3ABCPyG9th/sMf9ZUU2V2k1tZ8xWxM=
Subject key identifier: 7F:28:EF:15:99:9A:8D:76:C3:18:22:83:F2:A4:01:90:15:18:A3:47
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019D28BB39023AF64A64F932D3366E5D7F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 09D3
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: sYu/wZeXwkpanTkmvYK6w5AVeNEwfwqmu5h0S3d4O9U=)
2: NOWoB23HEmYTdKdWzMjUjIfX-lI.roa (hash: EDavFVGDb3OfWrkmMLQ28ZnqwmFb4R8GgQs19jLuWJg=)
3: yXuHFZic38WtbGut6KbE1pBnfLI.roa (hash: kTl3ByAmOWMgoe4Kjt6fNNQpG4a7GQvCOfYlBUiosjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:39:02:3a:f6:4a:64:f9:32:d3:36:6e:5d:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=7f28ef15999a8d76c3182283f2a401901518a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:21:43:d8:45:0b:e4:44:05:84:7d:e7:86:
1b:57:23:4f:53:29:d1:0e:bd:3b:ef:2e:d2:79:6a:
10:26:f5:d0:5c:e5:9a:15:47:36:36:78:84:2c:d8:
61:7a:25:63:8b:b0:69:af:8a:c1:02:4b:00:99:21:
3d:2e:b7:9b:12:ba:5e:c2:07:ca:d7:d3:d3:ff:be:
cf:35:3b:22:44:ab:48:28:8b:6d:d0:ed:03:af:e3:
73:da:69:53:0c:b1:c9:55:9e:8b:91:3e:8e:ed:22:
32:b4:c1:62:68:c0:84:24:ee:7e:a8:b6:ea:c3:f8:
3a:41:9e:75:5b:76:87:7f:01:5f:eb:d6:5f:87:de:
d4:7e:d2:b1:ea:fe:c1:5d:fb:0f:20:cc:a8:00:06:
1a:ef:96:82:77:b4:a3:ae:5c:97:b6:c5:26:f0:97:
39:cb:6a:ec:6b:60:53:09:1d:e2:81:47:db:49:18:
5c:85:9c:c9:3d:88:d0:85:77:b3:ae:4e:4f:d6:ac:
16:86:83:da:92:9b:50:ce:47:b0:67:1f:aa:7f:f3:
fd:cd:90:ff:11:7a:23:10:c8:4b:74:be:ba:05:ee:
e7:14:6e:2f:17:1b:6c:56:5d:e6:f7:b0:c8:23:04:
07:d9:82:88:16:d4:8f:2b:a5:e0:e9:98:1a:a0:b6:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:EF:15:99:9A:8D:76:C3:18:22:83:F2:A4:01:90:15:18:A3:47
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b7:e5:f5:eb:b8:dd:27:68:0b:62:96:14:1c:4d:93:6d:6d:
91:15:c1:61:89:3e:0c:46:91:0d:82:30:c5:63:e9:65:79:60:
78:dc:6c:00:fb:1b:37:7b:a3:72:bc:1b:75:c7:6e:c0:08:29:
98:43:63:23:7a:6d:0e:14:d5:af:c9:26:f0:05:5f:f8:a6:5a:
98:2f:8a:e0:48:16:d0:b3:10:91:b5:95:6f:b8:d2:d8:5e:5d:
03:9a:56:fc:e4:ce:a2:70:ea:66:9e:6a:6a:91:e3:6c:ac:4b:
bf:e3:75:71:42:39:56:15:19:93:c0:2a:07:ac:79:a4:b3:2d:
7e:eb:ab:f2:e5:48:a1:62:ba:ab:f0:1a:2d:30:a8:fe:f2:23:
90:6e:22:1e:47:63:6b:4a:45:99:88:a8:53:a6:7f:c9:de:11:
d6:b2:8b:5c:cc:be:c0:a5:e9:57:5b:c8:c7:a6:14:c1:b6:c8:
7a:75:92:c5:84:e3:ac:98:6c:74:94:82:dc:ea:42:ec:8d:93:
1e:79:7e:e2:02:79:db:57:42:a9:fd:1d:fa:43:84:70:54:b0:
a8:b4:7b:32:8d:64:1c:5c:d2:d5:57:f8:34:73:14:5d:47:99:
94:43:99:fa:77:5b:09:1b:61:eb:84:f3:4d:69:1b:14:c4:1a:
43:a0:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:20 2026 by rpki-client