Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: Rgs7TdZyKSGKlNRXtTYL1p/M/RjxVFlu7fm/F1m++NQ=
Subject key identifier: FE:15:8B:1F:04:51:C5:E3:24:95:E2:4E:39:C4:15:11:7C:19:F5:EB
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 019DA3AF28E5A0367AD35181ADFD8A235DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 1548
Signing time: Sun 19 Apr 2026 03:00:58 +0000
Manifest this update: Sun 19 Apr 2026 03:00:58 +0000
Manifest next update: Mon 20 Apr 2026 03:00:58 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: 7w3FvVqklP2OmoP7WF5yA9tlISWWLeYUjj0NhPA3My4=)
2: y72QXlfn1iGh89QO3R6WPZp7awU.roa (hash: O6eU6r5oRWPIVud9+sofhzvQc+xlO3/W5yzIFE7k+e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:28:e5:a0:36:7a:d3:51:81:ad:fd:8a:23:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Apr 19 03:00:58 2026 GMT
Not After : Apr 20 03:00:58 2026 GMT
Subject: CN=fe158b1f0451c5e32495e24e39c415117c19f5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:33:ae:12:3e:d9:d9:2c:37:f4:5d:07:f5:
45:44:5e:e9:3b:20:16:1b:84:ca:91:db:13:5e:90:
02:dc:43:ba:19:db:73:e1:15:31:26:e3:d4:36:a0:
5b:a4:fd:c6:b6:2c:9c:bb:54:fe:bb:3d:fb:84:c1:
0f:ec:60:e3:b0:0d:43:08:2f:1b:64:7b:00:e2:8f:
24:63:23:cd:c2:9e:5a:c1:21:5b:e1:b7:85:c1:bd:
f9:b4:06:26:c6:a9:f0:5f:83:55:77:7e:48:0a:ba:
3f:93:88:db:84:64:87:e6:2d:d8:de:61:f0:c9:4c:
13:54:67:00:a4:03:3f:6a:d1:58:97:b5:84:5e:f1:
12:29:1e:14:64:a2:83:31:da:aa:7b:3d:cb:6b:28:
a9:50:15:40:ee:da:9e:2f:b4:e6:df:f6:52:ba:49:
17:79:3c:88:51:33:c8:99:6e:97:3c:1d:97:fc:aa:
ab:e1:37:d4:06:fa:0f:a0:4e:8f:6a:00:92:68:30:
67:c3:82:f1:62:c1:76:24:02:5e:7b:44:28:14:99:
bb:83:43:8e:2b:0a:7b:ca:3f:a8:3c:e2:aa:20:39:
b9:d1:74:c3:6f:42:30:0f:47:76:c0:8a:d8:d7:50:
e3:30:84:9b:61:65:b6:79:84:5e:d4:08:2d:12:1d:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:8B:1F:04:51:C5:E3:24:95:E2:4E:39:C4:15:11:7C:19:F5:EB
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b1:b8:33:19:4f:62:aa:e7:17:03:7b:33:98:14:e8:8a:22:
02:6c:f2:4c:66:88:1a:c9:f3:f8:72:d6:86:87:db:73:ba:3b:
34:7d:27:2e:83:86:c7:a5:60:ec:36:c0:03:e5:71:08:48:1b:
a3:39:bf:53:2e:46:e1:88:ba:4d:9f:2c:b0:bb:00:0e:55:16:
cf:db:de:e6:20:d2:9e:bd:94:a3:23:91:df:66:c7:82:f8:ff:
8e:b7:37:50:49:43:bf:88:d1:b0:4e:48:95:d9:0d:7c:74:f3:
28:2a:4a:f5:16:d3:17:0a:ef:45:e1:e6:cb:cc:d1:f9:c1:d2:
47:86:cd:5f:18:f9:7c:1c:70:1e:82:fb:5a:ff:fa:1b:02:40:
36:f0:c5:ca:2f:c7:d8:13:ab:84:8e:4a:b9:dc:31:b5:41:6b:
9d:fa:dc:7b:4e:70:cf:c5:df:96:a3:18:10:74:07:93:70:81:
73:aa:9b:15:d1:5d:14:c3:ac:d1:5c:f0:e3:c0:00:ad:2a:d0:
a0:67:ae:45:f1:42:6d:4b:af:47:26:e0:e8:39:3e:f3:0b:a9:
b0:54:1a:ef:0b:49:d0:9d:b7:c7:f3:8a:64:57:df:8b:b1:fa:
e7:a0:d9:b2:82:30:66:b3:a9:21:66:7c:65:e2:6d:a8:ee:89:
f5:e7:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:55 2026 by rpki-client