Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: FGJznZtvfGjg9DrsJfTs4xN5YSROQOBBsBWFhMrwPTM=
Subject key identifier: F5:B2:32:AB:8F:EE:A8:02:1F:1D:0C:2B:DC:85:7B:BB:41:20:C4:2C
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 01A0C9A22A15AB2E2C12D7EFE49EB127318A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: 027A
Signing time: Tue 22 Sep 2026 15:00:43 +0000
Manifest this update: Tue 22 Sep 2026 15:00:43 +0000
Manifest next update: Wed 23 Sep 2026 15:00:43 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: pPmUlfITkWwGNDAHnWd7ahvrvXkc4SYE9iKeNrO6wOg=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:2a:15:ab:2e:2c:12:d7:ef:e4:9e:b1:27:31:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Sep 22 15:00:43 2026 GMT
Not After : Sep 23 15:00:43 2026 GMT
Subject: CN=f5b232ab8feea8021f1d0c2bdc857bbb4120c42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:fd:42:2c:9f:cc:d1:c5:ff:20:f0:5e:a3:
fb:81:c6:d6:a8:95:4e:33:85:9f:cd:7f:14:e4:0a:
ec:d2:9d:aa:5c:ae:ee:9c:69:77:d4:ff:ca:b3:26:
94:c3:22:15:35:ef:84:7c:8f:f7:4a:4d:5a:3a:25:
e1:d0:cf:e9:c8:b3:66:cd:8e:da:05:98:64:59:b4:
a2:ce:9f:be:3b:7d:59:43:5f:57:9e:c0:72:65:68:
39:2a:61:25:97:95:2e:b8:19:4a:52:bd:dd:c3:28:
2a:53:8c:1d:c3:2f:33:d4:73:e7:fd:45:a0:97:3d:
7b:fe:9e:57:c2:77:df:7e:f0:4b:b4:79:52:e5:e7:
86:cc:dc:d0:99:11:f4:cb:c4:2d:39:02:dd:2c:d0:
f8:18:c6:f4:fd:10:da:92:46:9c:33:6e:3d:74:b6:
21:73:6d:e1:90:b8:56:9b:9c:e0:92:58:ae:db:c0:
d8:e3:4e:43:8e:00:83:83:84:f8:78:69:ae:4d:39:
47:4a:b7:f1:ba:df:d6:13:fd:92:58:84:aa:04:4c:
e3:93:1a:65:00:24:ac:aa:28:52:be:01:85:77:86:
c5:73:b4:26:4c:67:e1:bd:a3:7e:23:82:c1:2e:f8:
c7:44:95:0c:18:c8:a7:13:00:02:cb:96:36:d3:07:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:32:AB:8F:EE:A8:02:1F:1D:0C:2B:DC:85:7B:BB:41:20:C4:2C
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d2:f0:9e:ec:c6:e0:68:2f:58:fe:91:06:8c:6d:15:4f:ee:
a5:89:69:be:5c:56:ea:e3:c1:96:1b:11:4d:dc:a5:c4:0a:a8:
d6:20:d4:58:1d:7e:78:dc:59:53:8e:47:d7:97:f5:41:c9:b9:
8b:05:6f:7a:34:46:06:6b:0d:f5:2b:8c:ff:85:ae:86:70:02:
4f:42:aa:e9:cb:e1:c7:79:0d:ea:b0:76:32:81:17:c1:e8:85:
bd:53:dc:58:22:aa:a9:04:0e:51:2c:c0:c1:19:59:5b:83:f3:
f0:56:60:f0:3b:77:b1:1b:a2:c0:5c:61:2d:6b:ed:dc:8e:f4:
ca:53:61:f7:21:65:27:47:72:b3:cc:72:b2:74:65:49:00:6d:
ba:48:8d:a8:ab:76:54:af:88:f3:f1:40:4f:c0:55:13:38:80:
7f:b4:e6:63:ab:04:a0:c9:db:b8:97:7c:72:cb:3f:d8:99:75:
c8:fc:c6:78:2a:3d:61:99:f3:da:cd:19:97:2e:02:8f:e0:5c:
2a:1c:f7:e6:53:29:b4:02:5d:61:53:31:89:3d:46:9f:af:e8:
cb:64:d5:3d:d7:ad:ff:d1:c9:ec:d2:50:7f:90:68:28:dd:e9:
e1:b4:48:9b:56:c2:0b:fc:d6:c4:eb:b1:84:87:26:b1:6e:fa:
8f:ff:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:27:00 2026 by rpki-client