Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: wRCw2iju9gboeZxikaJTWRjqFpzybhXR7rlkMViEBSM=
Subject key identifier: 79:EC:BE:BF:68:B0:70:AE:C3:BD:2C:B7:89:21:47:6E:AB:DB:CD:0D
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 019CAD2267EC4BBA26B476AA9500EF5A4EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 59
Signing time: Mon 02 Mar 2026 06:00:39 +0000
Manifest this update: Mon 02 Mar 2026 06:00:39 +0000
Manifest next update: Tue 03 Mar 2026 06:00:39 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: Mw/7yAnQ3g6UzOWBDDQfgoXJOf9BJON9Ts1Jc9+lWbg=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:67:ec:4b:ba:26:b4:76:aa:95:00:ef:5a:4e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Mar 2 06:00:39 2026 GMT
Not After : Mar 3 06:00:39 2026 GMT
Subject: CN=79ecbebf68b070aec3bd2cb78921476eabdbcd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:10:ad:a0:06:2f:0c:fe:bd:17:81:2f:57:
af:7e:7e:5b:39:b3:37:92:28:fa:38:75:d1:99:ca:
1b:39:1c:10:aa:5d:31:b3:30:5b:38:f4:80:85:53:
8b:25:e1:ee:a2:72:7c:5a:da:58:bf:e5:3a:2d:2b:
8d:a6:fb:71:f7:f0:e8:ed:47:c9:ee:08:63:26:39:
65:85:7d:45:0d:b0:99:fa:34:01:36:7a:05:c8:f3:
3b:35:d7:3f:a1:a8:32:4a:52:13:d9:12:ce:cf:27:
87:0e:9b:57:1c:c5:55:23:a8:11:3a:71:f7:67:08:
d0:91:83:04:95:ae:19:92:65:ed:22:0f:c5:47:cf:
35:7a:19:63:53:69:26:6c:d2:ea:bd:28:10:46:7b:
a8:c5:64:48:fa:66:df:76:65:9e:76:a6:69:d1:b3:
44:5c:eb:7d:18:76:ce:0e:c9:fc:fd:ef:b0:f2:34:
ed:63:2d:f3:28:cc:b2:c1:6c:fa:78:a1:d5:21:02:
00:e3:b8:81:e2:26:c0:59:48:8f:2b:1d:7f:dd:9c:
db:3e:94:4c:a4:9c:09:3a:63:d9:58:90:8c:e3:42:
67:bc:dd:9a:a1:a8:65:c3:8f:af:ea:67:2c:95:c3:
8c:56:d7:ec:13:bf:8d:32:1d:af:2e:8b:46:c7:88:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:BE:BF:68:B0:70:AE:C3:BD:2C:B7:89:21:47:6E:AB:DB:CD:0D
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:be:be:d8:b8:09:dd:dc:13:c4:bd:63:db:65:1a:07:9d:
a6:e4:4a:23:f9:25:e8:b7:ad:77:64:f3:0f:a3:4d:48:23:18:
05:fa:15:2c:ef:9d:66:02:4f:95:2e:bd:9c:49:82:85:65:23:
67:0a:99:5c:70:a2:d1:d0:05:0e:fe:2e:83:e6:8d:3b:c0:23:
75:6a:58:01:09:93:51:92:88:35:72:80:30:0d:fd:a5:7a:9f:
0b:78:f0:15:6d:c1:a6:11:0d:d6:23:04:8f:9e:40:95:ff:8b:
07:0b:83:f1:2e:d2:20:23:a4:e2:81:11:89:9c:f8:60:a1:0a:
1c:57:10:c8:af:74:49:4d:89:bd:65:91:2d:23:cc:47:cc:ce:
ce:f5:ca:5c:08:4f:4c:ce:8b:a1:7a:f0:ff:e0:aa:dd:3e:88:
8e:10:1b:ed:e8:34:5f:5c:e3:f6:7c:32:4c:58:71:bd:4a:a2:
6f:e1:7a:f3:58:9e:58:95:26:bd:79:c3:96:3d:96:29:f6:38:
5c:a4:11:bf:3b:d4:e4:1b:79:91:bf:70:8c:1b:d0:70:14:9b:
93:51:97:25:f5:d6:3b:45:35:e0:94:46:a2:45:9a:d5:fc:d6:
01:dc:38:2b:c8:f9:bd:04:e5:1f:7c:11:a5:3a:21:7f:92:0d:
12:e8:06:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytImfsS7omtHaqlQDvWk7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MmI4MjM3YjNmNmQxZDFiZWFjMjlkMjk2OTY0MGIzOWRj
Yjk0M2UwHhcNMjYwMzAyMDYwMDM5WhcNMjYwMzAzMDYwMDM5WjAzMTEwLwYDVQQD
Eyg3OWVjYmViZjY4YjA3MGFlYzNiZDJjYjc4OTIxNDc2ZWFiZGJjZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMEQraAGLwz+vReBL1evfn5bObM3
kij6OHXRmcobORwQql0xszBbOPSAhVOLJeHuonJ8WtpYv+U6LSuNpvtx9/Do7UfJ
7ghjJjllhX1FDbCZ+jQBNnoFyPM7Ndc/oagySlIT2RLOzyeHDptXHMVVI6gROnH3
ZwjQkYMEla4ZkmXtIg/FR881ehljU2kmbNLqvSgQRnuoxWRI+mbfdmWedqZp0bNE
XOt9GHbODsn8/e+w8jTtYy3zKMyywWz6eKHVIQIA47iB4ibAWUiPKx1/3ZzbPpRM
pJwJOmPZWJCM40JnvN2aoahlw4+v6mcslcOMVtfsE7+NMh2vLotGx4jzQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnsvr9osHCuw70st4khR26r280NMB8GA1UdIwQY
MBaAFNcrgjez9tHRvqwp0paWQLOdy5Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgt
ZTY4ZDlhNTY0NTJjLzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgtZTY4ZDlhNTY0NTJj
LzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMW+vti4
Cd3cE8S9Y9tlGgedpuRKI/kl6Letd2TzD6NNSCMYBfoVLO+dZgJPlS69nEmChWUj
ZwqZXHCi0dAFDv4ug+aNO8AjdWpYAQmTUZKINXKAMA39pXqfC3jwFW3BphEN1iME
j55Alf+LBwuD8S7SICOk4oERiZz4YKEKHFcQyK90SU2JvWWRLSPMR8zOzvXKXAhP
TM6LoXrw/+Cq3T6IjhAb7eg0X1zj9nwyTFhxvUqib+F681ieWJUmvXnDlj2WKfY4
XKQRvzvU5Bt5kb9wjBvQcBSbk1GXJfXWO0U14JRGokWa1fzWAdw4K8j5vQTlH3wR
pTohf5INEugGfw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:26 2026 by rpki-client