Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: CWw7kIVRBFJCw0Zs9zY3gChNiJOUomoLK3qmKrv4kKU=
Subject key identifier: BA:8F:EE:23:2C:63:67:DF:8C:24:50:A2:47:3A:42:13:19:66:B9:E7
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 01A136DA9A9A359C06A588CCF9325112D476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 1579
Signing time: Tue 13 Oct 2026 20:00:58 +0000
Manifest this update: Tue 13 Oct 2026 20:00:58 +0000
Manifest next update: Wed 14 Oct 2026 20:00:58 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: zpqCewJqpOlZj8cV2Ucs/b5W4xJWLeWNLcKrhG2wJw4=)
2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:9a:9a:35:9c:06:a5:88:cc:f9:32:51:12:d4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Oct 13 20:00:58 2026 GMT
Not After : Oct 14 20:00:58 2026 GMT
Subject: CN=ba8fee232c6367df8c2450a2473a42131966b9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:b7:d8:26:33:32:17:7d:bf:e3:4d:a9:96:
77:a6:67:a3:20:d7:30:67:65:92:79:f8:57:63:5f:
9b:0c:52:3a:48:0d:28:14:bd:50:ff:b6:51:9c:f6:
86:9a:eb:32:35:06:0a:fb:14:d6:cd:b8:7f:14:67:
6b:45:9f:1d:4a:92:0c:29:b7:b3:1a:a7:73:4f:ff:
d4:5e:4e:8b:78:c4:f6:2e:fa:a1:05:61:ec:79:4f:
f0:f6:81:32:b4:e4:e0:02:8d:ca:2c:f6:d6:1f:e5:
19:a5:b0:cd:7a:4d:b0:14:40:c0:02:28:34:87:44:
56:cc:4a:e4:8c:54:f8:8b:10:4d:1e:54:f5:c6:23:
e0:72:21:44:22:42:aa:fa:c8:83:88:9f:da:f0:67:
76:6e:09:f0:11:4a:b3:b4:5e:fa:dc:2d:7a:24:d1:
dd:df:3b:94:14:41:60:2f:30:36:c6:97:3e:6b:47:
f6:ef:be:06:fe:59:67:5a:c1:88:21:4c:79:79:da:
82:c4:93:16:5c:55:ad:66:09:80:38:c6:dc:75:85:
fc:c7:8d:fb:34:4c:73:bc:a3:68:b7:35:9d:2a:a5:
98:58:f9:e2:86:37:b4:b5:7f:16:43:00:94:89:fc:
c0:38:db:34:a6:10:ec:6f:b2:22:15:eb:bd:fe:dc:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:EE:23:2C:63:67:DF:8C:24:50:A2:47:3A:42:13:19:66:B9:E7
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:67:7d:4c:88:fc:b9:c1:e9:cd:e4:b8:94:a4:62:2e:a0:28:
c4:87:c4:33:0b:ac:0a:17:52:f5:c1:51:8d:ba:cb:20:2e:b9:
cf:88:eb:14:fe:f6:0e:31:64:a2:ca:82:8d:cf:cb:a5:0f:0f:
09:60:7f:08:9c:ae:61:ac:3f:c4:5c:a6:1d:ba:88:5f:5a:a9:
ab:b0:ae:5e:02:ca:bd:72:80:4a:3a:75:c8:ed:c5:0f:09:f8:
d4:f0:87:86:04:ed:a4:c1:7f:7a:04:8e:fd:19:05:6e:a8:cd:
6f:2c:5b:51:cd:6d:14:e4:d5:6e:96:16:1b:d2:52:e2:c5:4a:
21:80:0a:34:db:f2:64:6b:ff:2f:46:eb:e4:3f:ad:bc:65:2d:
94:25:a0:13:a1:82:35:0d:88:23:27:da:bc:7b:20:8b:75:2f:
26:a2:a3:19:e1:c3:26:c4:af:41:67:b8:83:d3:fe:79:9a:df:
e2:d9:b2:56:de:4c:47:91:76:4d:e3:c6:f0:df:41:17:b5:52:
18:8e:c2:df:28:ba:1a:71:47:dd:b7:15:b2:2c:69:10:78:a7:
75:5d:ac:c2:51:9c:dd:7f:58:de:fa:a4:da:b0:1a:62:e0:87:
09:d9:25:01:4d:56:57:29:48:1a:a8:75:fa:ff:ed:07:96:e5:
fc:91:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:59:40 2026 by rpki-client