Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: +S/BUnMSx1gXTyIWSDvSKsYOsgQ6Ez94XnGk+Strtlc=
Subject key identifier: 9C:5C:25:BE:FB:C0:2B:AB:09:A8:AD:D0:9E:C0:95:ED:24:F8:6B:29
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019FAA504DAEA61AB962ABBDBC5B8D1B1E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 14B5
Signing time: Tue 28 Jul 2026 20:00:17 +0000
Manifest this update: Tue 28 Jul 2026 20:00:17 +0000
Manifest next update: Wed 29 Jul 2026 20:00:17 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: CJVGLpLkYEwFfR2+BJp+2M6Ug3rVQfkegAfqe8x5vnM=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:4d:ae:a6:1a:b9:62:ab:bd:bc:5b:8d:1b:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jul 28 20:00:17 2026 GMT
Not After : Jul 29 20:00:17 2026 GMT
Subject: CN=9c5c25befbc02bab09a8add09ec095ed24f86b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:cb:5d:84:e4:10:84:ce:bf:72:76:ba:65:
31:39:07:6e:3f:56:47:b7:90:6a:17:2b:f5:88:42:
4a:f0:82:23:41:e3:4d:6b:4d:b0:8c:48:de:3b:d9:
41:15:f7:f7:56:94:90:e7:59:e6:4a:74:fe:50:b8:
a1:13:63:31:9f:3b:ca:b4:04:71:ba:e6:58:c8:29:
c8:27:3f:e6:3d:5c:bb:ea:ea:6d:3c:9b:78:f9:05:
8f:68:09:3e:0b:dc:f6:39:3b:a0:fb:b8:15:d9:4b:
ab:31:a4:e1:b5:4d:dd:78:76:ef:c4:e3:c7:ed:6b:
2b:95:b9:27:e4:fa:3c:88:ff:22:b9:55:d2:9c:85:
3f:69:32:a0:d8:19:b7:82:26:25:f6:96:49:f3:39:
e5:86:13:b8:0a:b8:ca:e1:04:47:66:68:bc:22:d6:
60:19:66:ff:76:1c:56:d7:70:2f:b5:e1:3c:48:31:
b3:66:0b:6e:f2:52:5a:a8:8e:4e:a1:91:4a:a4:7c:
9b:50:bc:f4:5f:fd:1b:1e:ae:34:d5:a7:1d:a7:0d:
e8:d8:22:11:2c:5e:08:61:71:1b:1a:7e:ed:ab:0f:
9a:bc:4a:2e:cf:b0:54:38:1e:15:1f:c8:72:d0:76:
7e:17:04:c3:25:b4:5e:01:2c:e4:48:f9:b9:bf:6c:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:25:BE:FB:C0:2B:AB:09:A8:AD:D0:9E:C0:95:ED:24:F8:6B:29
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:26:34:fb:bc:a2:ec:71:a4:0a:26:75:40:52:c5:3d:03:
b0:73:21:bc:7f:f3:84:fe:8f:1c:e9:92:4d:12:0c:c5:96:bf:
35:99:12:bb:5c:57:62:40:07:86:9f:01:6e:dc:48:b2:87:b7:
1b:cf:7f:0d:3b:a5:c2:ea:c9:09:80:fd:24:d9:11:3d:5a:1f:
ad:7c:49:1a:01:88:f8:ec:62:5f:02:26:20:3c:2d:7c:0c:cf:
df:03:85:cc:c0:8b:d7:bd:ab:10:67:33:7e:b1:89:cc:f6:6b:
e9:54:10:21:95:1e:85:f8:b2:9e:ae:e2:9c:82:0c:f5:e5:3c:
f1:40:e3:96:5f:3d:27:bb:2d:78:3d:aa:15:a4:10:fa:71:d9:
48:b2:36:79:1b:7e:4b:c2:5e:71:1c:98:61:21:da:c6:de:a3:
f8:b6:50:cf:c1:d1:0f:2b:f5:d4:29:dc:21:c1:b9:64:d1:fa:
68:e7:6d:13:17:84:56:a1:e6:c6:64:54:0b:92:17:b7:87:c3:
9f:64:47:1a:c3:69:7a:28:97:af:4c:26:53:ce:52:a3:5e:1b:
bb:23:70:23:22:36:f6:76:e1:29:7f:d0:b6:c2:03:d7:bc:0d:
cb:86:46:9a:76:06:a4:2a:86:65:73:7d:89:3d:8d:d0:ff:92:
49:da:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:44 2026 by rpki-client