Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: WZnK0qQpgloNGCBgW/iRxFVNFycqR0MitV23iwYahVQ=
Subject key identifier: EB:44:6B:3B:4E:79:7A:A5:5B:8E:96:08:8B:42:29:E5:F5:E7:F4:F6
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019CABA1F32304697307FD0B3F65DB3F16FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 1328
Signing time: Sun 01 Mar 2026 23:00:43 +0000
Manifest this update: Sun 01 Mar 2026 23:00:43 +0000
Manifest next update: Mon 02 Mar 2026 23:00:43 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: ltFLGiougr54kiqrHl2KRrHuOCLPG2nWwXg7piTTIs8=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f3:23:04:69:73:07:fd:0b:3f:65:db:3f:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Mar 1 23:00:43 2026 GMT
Not After : Mar 2 23:00:43 2026 GMT
Subject: CN=eb446b3b4e797aa55b8e96088b4229e5f5e7f4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:8d:e1:64:d3:b2:f8:c5:00:8d:c2:05:7c:
df:c6:ae:ae:bb:7e:df:78:f3:0c:d5:37:72:83:20:
df:9c:ba:fe:4e:91:9d:f4:95:ad:5b:45:22:c0:32:
98:0d:d9:b0:44:37:6a:04:12:75:61:99:52:0c:b6:
d8:6a:ee:9d:55:e8:b6:0e:0a:27:c0:67:61:1c:d2:
42:3d:d3:80:52:28:5d:1c:fe:b3:76:07:d3:b7:7d:
99:c1:36:0c:99:b3:14:f0:77:31:bb:b7:d0:d3:97:
fe:19:ba:26:ea:0a:37:d0:98:fc:f1:12:5b:81:93:
f8:d7:60:dd:98:39:c3:d7:78:7c:b8:fc:36:d2:8e:
b3:da:1c:85:a1:ad:37:c4:12:a8:0f:d9:ea:9f:92:
cc:64:92:0b:40:32:ea:69:ca:81:a3:84:25:db:b3:
c2:92:d9:3b:ef:24:11:4f:e1:07:41:1f:8d:35:f8:
41:74:d3:7b:b9:6c:44:82:7a:72:16:87:2c:71:b4:
9c:38:ef:b3:22:35:0b:7b:6e:66:73:87:44:fe:06:
fe:bf:0a:f5:15:72:4f:7f:29:ab:5c:3c:e5:f5:3a:
b1:68:23:b8:e6:2b:65:8f:1e:d4:3b:b3:02:80:f3:
45:04:f9:b3:4a:11:2a:b7:ec:d7:61:37:29:28:a7:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:6B:3B:4E:79:7A:A5:5B:8E:96:08:8B:42:29:E5:F5:E7:F4:F6
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:c2:4a:bc:90:3e:8c:b5:8b:10:5d:e9:54:e4:56:ef:6f:
ca:80:ee:cf:34:cd:bf:27:55:5e:b0:5c:cc:22:fb:7d:71:72:
7c:97:0f:e8:b8:7d:57:8c:81:f0:62:62:42:53:7c:4d:af:11:
94:85:ea:38:05:20:31:e3:34:18:92:f1:1c:bf:d9:e8:75:2a:
b4:49:5b:44:a9:35:e2:f3:89:8e:6a:ac:60:f9:28:d5:69:2c:
2d:06:a3:45:d7:41:c6:94:1f:17:15:71:07:d0:2b:0c:06:fa:
ef:6c:ed:7c:b6:01:9c:fe:25:e8:56:26:55:8a:36:49:af:ff:
38:6f:08:64:7e:17:2b:ea:7d:c8:e6:81:2d:e0:18:88:05:ac:
b5:a9:99:be:58:b0:62:40:fa:58:1d:65:6b:7b:39:e9:a2:68:
ae:3b:48:49:8a:de:43:2d:66:28:ec:1f:5e:6d:1d:92:ec:30:
e1:60:b8:4f:e5:5e:b8:81:65:96:c6:05:e2:e6:bf:45:09:a1:
e5:f7:ee:a0:05:87:e7:8d:57:3a:b5:78:2d:b9:d2:10:a1:ac:
f6:a2:7a:8d:5a:95:dd:9c:9f:d4:22:e8:49:19:42:70:6b:73:
d7:d3:82:87:ce:30:35:84:62:40:7a:47:0f:43:0c:0e:4c:5a:
64:7f:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:41 2026 by rpki-client