Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: 59aUFWhciP2Ean8LlicNyejl83afRHQriVNMvy+1uY8=
Subject key identifier: 58:73:9C:46:CD:1D:37:17:6F:50:B2:AC:A8:E2:30:BD:B7:9E:78:ED
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019FA974F9C42B64279C63E7D9D068B347A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 1558
Signing time: Tue 28 Jul 2026 16:00:43 +0000
Manifest this update: Tue 28 Jul 2026 16:00:43 +0000
Manifest next update: Wed 29 Jul 2026 16:00:43 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: HWpwBWNfXC/+41wON9t28sinzybp/SGxCdiEaoRwhfY=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:f9:c4:2b:64:27:9c:63:e7:d9:d0:68:b3:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jul 28 16:00:43 2026 GMT
Not After : Jul 29 16:00:43 2026 GMT
Subject: CN=58739c46cd1d37176f50b2aca8e230bdb79e78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:86:dd:47:90:8f:6d:a2:79:05:18:4c:f9:
b0:d1:dc:66:49:8d:e4:15:5e:2a:a0:95:82:58:92:
0d:96:0a:15:a6:90:fe:30:80:60:4d:99:30:20:9b:
7d:80:2b:f7:3f:27:cf:93:47:ea:6f:fa:44:28:98:
0f:ca:a6:ab:28:ca:0d:29:bd:17:2e:56:b0:9b:c8:
9b:65:dd:24:01:59:7d:7e:80:8f:17:22:88:da:4f:
56:8e:12:3c:09:1c:92:00:1d:8b:5e:0e:53:26:67:
8f:53:ba:53:1b:07:c3:1a:29:84:f8:98:09:77:34:
11:e6:50:39:fe:64:7a:02:02:74:97:1c:61:99:57:
4d:5c:f4:4e:5b:25:3a:2a:fa:29:72:14:a6:c0:32:
1b:62:63:ae:f7:27:09:f3:0d:c2:3c:b7:c9:00:31:
62:46:3c:3f:f7:44:08:41:b6:4a:ff:b8:a1:9d:a1:
41:6b:b3:3f:17:bd:66:dd:e0:be:22:1c:ae:3a:97:
a6:66:14:0f:6c:63:dc:78:41:b4:0a:f8:0b:4d:a3:
62:47:f5:de:a0:40:ea:ca:af:95:2d:a7:10:54:f8:
53:a5:bb:da:b5:d4:6e:9f:7b:64:a3:a4:27:7a:63:
9b:d8:6c:a8:8f:e5:14:98:ae:5d:ed:f7:3e:10:84:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:9C:46:CD:1D:37:17:6F:50:B2:AC:A8:E2:30:BD:B7:9E:78:ED
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:e5:d0:cb:18:60:80:48:c0:b7:e7:08:7f:4b:f3:23:c6:
b2:d5:73:e9:1c:a2:d0:83:00:eb:b1:49:2f:ba:94:dc:c5:66:
db:a6:3d:c7:16:b8:8c:c4:f6:c1:dc:f6:52:d8:43:ca:34:21:
8c:1e:9f:bf:76:e2:fe:31:5a:47:dc:24:72:32:e8:57:04:3e:
6a:ec:48:8e:6c:e1:01:70:6a:d1:29:43:29:6e:59:44:c9:45:
d4:c2:a6:d9:e7:1f:70:ee:7e:e1:27:5c:05:b6:46:81:cc:a5:
fc:30:e9:83:ac:ad:aa:15:80:50:00:d6:f1:79:f4:66:86:8e:
a0:7a:c4:06:88:43:20:3e:00:4d:12:ab:58:3a:75:f1:4f:3a:
10:6f:81:fb:8d:77:63:54:c1:05:fb:b6:a4:ec:d9:3b:00:c2:
74:30:fb:3e:4f:15:35:2c:26:11:7c:7a:e1:fd:1e:84:e1:21:
51:cc:02:63:10:49:d6:46:2c:4f:0a:4b:44:dd:e4:42:5a:d1:
7d:08:cd:3b:67:f4:1b:97:f0:30:19:57:b7:07:86:8a:85:0f:
bd:25:2a:98:5f:a2:6b:1c:c9:36:f1:4f:8b:ee:d7:7a:e0:32:
0d:e9:98:ac:be:33:ec:97:43:8f:7e:f6:d6:f7:ed:6c:27:11:
7e:d2:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:42 2026 by rpki-client