Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier: tRItr+AKh8WtZg4r7t3kSzesu3nsVRK4T8qk3eI+DCQ=
Subject key identifier: 42:1C:C1:0A:16:0D:6C:85:C4:A8:B8:22:B3:A9:23:2C:A7:C9:D9:E3
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019FAA1969E135883C66F353118D7DD63B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number: 0B5D
Signing time: Tue 28 Jul 2026 19:00:19 +0000
Manifest this update: Tue 28 Jul 2026 19:00:19 +0000
Manifest next update: Wed 29 Jul 2026 19:00:19 +0000
Files and hashes: 1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: Lj45fGLECGc6DC9p4z+7Sf4xWPjaftwlxWyhpIoRtkA=)
3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:69:e1:35:88:3c:66:f3:53:11:8d:7d:d6:3b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jul 28 19:00:19 2026 GMT
Not After : Jul 29 19:00:19 2026 GMT
Subject: CN=421cc10a160d6c85c4a8b822b3a9232ca7c9d9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:88:fd:44:45:e0:6d:ce:10:f0:70:37:d7:
b3:f6:40:a7:0f:ed:cd:42:83:01:8a:95:93:60:c2:
b6:f9:87:8f:e6:b1:41:78:49:1e:20:95:d7:69:18:
4f:a0:fb:cb:65:45:c2:d9:35:fc:5a:be:e2:9d:58:
b4:4a:f2:a9:37:6c:47:b2:fb:15:55:d5:24:9e:a8:
64:5c:78:2c:72:8b:fd:bc:bf:43:f3:6f:ff:fb:2d:
9a:10:4f:db:dd:fe:8f:27:0d:9b:e7:c7:b2:98:fc:
0d:21:04:8a:73:5d:71:2e:6d:f4:c5:5e:9d:86:0e:
20:01:e6:a2:6d:ae:2b:38:64:d7:9d:49:4f:e1:2a:
97:f4:16:74:74:ac:da:ae:64:40:b5:a8:47:5e:4e:
25:16:4b:1e:42:ae:ab:ba:da:c7:f4:02:86:be:f6:
1f:0d:0e:c5:9c:ae:dc:50:7c:7c:cb:98:aa:3d:a8:
4e:b3:9c:54:47:37:54:21:47:99:9f:db:4d:e4:ee:
ba:02:67:ad:e2:45:7d:d7:c7:ae:39:7c:aa:2f:35:
a8:ec:fb:76:c6:df:ca:5e:cb:9d:4d:ef:25:3d:8a:
61:b8:39:eb:3c:c3:fd:64:98:0e:c2:42:18:21:d9:
5d:20:b7:7d:cc:1e:d7:74:01:7c:33:5d:cf:85:f2:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:C1:0A:16:0D:6C:85:C4:A8:B8:22:B3:A9:23:2C:A7:C9:D9:E3
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:af:8c:a2:d3:ff:87:1e:c4:df:0d:5c:dc:cd:67:30:30:a1:
b4:c4:23:e8:35:c3:53:21:d6:48:f3:dc:9f:f8:0d:56:6a:23:
cb:04:b8:38:c5:28:ce:cc:a3:0c:dc:bd:a5:64:4a:9a:ad:e6:
3c:2c:0b:92:46:e1:b8:01:ae:85:6a:85:cb:0e:16:9c:9a:2a:
06:80:52:e6:2d:19:22:6d:f9:5f:34:b7:6c:5b:ea:78:9f:3e:
19:b0:f3:33:fc:9e:af:fe:45:14:d2:1b:c1:d2:57:c3:a1:fa:
c5:05:d7:a4:dc:89:11:d7:4b:ec:bb:9b:9d:54:f3:f8:81:6c:
93:34:2d:f4:71:59:14:69:e9:eb:ab:b7:56:7d:52:2e:32:7f:
dc:c4:8e:c2:45:91:52:f4:17:07:bc:a5:36:f7:85:f5:3f:6e:
53:ff:5a:85:cb:1c:f1:a4:c3:da:84:39:07:e1:5d:13:cd:bf:
20:7c:8b:ad:20:90:ad:bc:0f:fb:b0:c4:07:19:ee:2d:c1:47:
9f:8f:87:2c:8e:aa:1c:43:d4:af:eb:ca:b7:35:3b:03:c2:ce:
98:26:76:fc:17:6b:4a:57:bc:fb:7e:1d:18:58:27:8f:25:d8:
c8:6d:20:71:08:20:23:5c:cd:88:ae:75:ba:b8:c6:d7:75:00:
ae:bb:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:42 2026 by rpki-client