Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: sAQ8GgjatN0F1xYyzR0bi2YI6o0PDLK6ZqgTQs18lqc=
Subject key identifier: E8:5B:A4:A7:BD:27:4B:DA:1C:7F:09:56:2E:F0:4E:2A:2E:81:B4:71
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 01A0C444765B44FD2B24781DFB97F40944FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1547
Signing time: Mon 21 Sep 2026 14:00:15 +0000
Manifest this update: Mon 21 Sep 2026 14:00:15 +0000
Manifest next update: Tue 22 Sep 2026 14:00:15 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: /Fcn49PgFAFHpTwDvZhUrDBLhaZa+5E7+bd3gutMT2o=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:76:5b:44:fd:2b:24:78:1d:fb:97:f4:09:44:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Sep 21 14:00:15 2026 GMT
Not After : Sep 22 14:00:15 2026 GMT
Subject: CN=e85ba4a7bd274bda1c7f09562ef04e2a2e81b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:e2:49:22:82:a0:ad:12:2b:64:ae:c2:61:
3a:0e:b2:61:32:a1:a9:1e:fc:39:72:2c:ae:1d:51:
4d:a5:65:f6:e3:20:84:9a:cf:e2:51:0a:ee:b9:05:
74:c6:b8:23:52:2b:01:c0:d2:14:66:96:17:f7:de:
00:ba:26:f4:9f:db:0d:83:14:46:3c:70:11:50:3d:
6f:0f:cb:b0:30:0d:24:95:db:04:b4:ba:3c:c9:f0:
e3:cb:64:1d:ea:f2:6a:07:3c:76:8c:ea:c5:72:ce:
f0:03:93:4c:b5:25:2c:d6:58:5f:54:e1:c5:53:43:
d6:84:8c:8c:6d:76:39:3e:fa:4e:65:14:e3:e4:0a:
7a:48:e8:3d:0d:5b:5e:4f:66:7a:33:d6:13:6c:75:
c9:61:b1:ab:8d:84:00:a5:46:0d:f3:40:89:1d:37:
d5:2f:87:4b:c5:65:3b:b1:9a:59:01:68:ae:f5:a6:
00:03:fe:67:72:75:06:b7:f7:c4:0c:60:79:c1:d5:
65:bc:95:e1:d3:0f:45:f2:18:34:67:5a:f3:54:aa:
c0:a4:ae:e6:50:ff:01:33:7e:3e:a3:22:ac:02:f0:
9d:80:b5:a2:d1:52:63:a0:b9:d1:52:ea:85:aa:0e:
f7:bd:56:b2:de:a1:f2:88:b4:2e:fc:f4:b8:1d:f0:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:A4:A7:BD:27:4B:DA:1C:7F:09:56:2E:F0:4E:2A:2E:81:B4:71
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:7b:8e:fc:fe:c1:d8:55:17:01:00:39:35:31:8b:03:50:
66:56:da:8d:19:bd:ab:9f:1e:5c:96:a8:81:a7:c6:e9:bd:1f:
79:b6:87:bf:59:af:6d:46:ac:ad:b9:ac:c5:ec:c9:ca:71:bf:
45:fa:34:db:e2:8c:fe:af:35:c4:ae:de:47:46:13:ac:4f:9e:
16:f6:74:1f:dd:16:03:ee:35:ed:7b:75:24:6a:ba:b9:db:87:
0d:16:b3:e2:67:8e:fd:88:21:15:6c:e2:47:46:ba:5d:c4:5d:
9b:c2:fc:39:5e:44:3b:93:4f:23:55:20:3c:5e:78:74:b1:c4:
00:35:63:d1:78:72:b7:16:5c:74:b6:58:1c:a1:06:c4:cd:36:
c6:42:7f:5b:c8:63:ad:6d:3a:34:a0:51:1b:45:ae:96:2a:a6:
a5:aa:d0:fa:c5:0e:ad:21:e2:73:55:18:f1:56:7b:3e:f6:fb:
a2:8d:e0:78:d8:80:ab:e8:45:a0:f8:b9:1c:ec:b3:5a:55:b2:
36:e6:d7:62:86:07:48:29:06:71:82:28:51:d5:23:8b:fc:42:
06:5c:cb:5c:5c:c0:b2:09:c1:e1:e3:8b:49:c5:0a:5c:1b:23:
7f:f3:4d:f4:f5:88:25:7c:50:50:15:67:50:d8:60:d1:c7:50:
5e:0a:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:46:43 2026 by rpki-client