Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: KshohDItPNXTITh0AD4e6FEQP0aNC/9iYXwiHZPMHAo=
Subject key identifier: 36:B0:F5:DB:79:3A:55:AA:1B:64:5F:FA:4E:A0:11:8F:22:80:59:5C
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A1DE71219CB7144E984038BE02FCBA1F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1B26
Signing time: Sun 15 Nov 2026 09:01:58 +0000
Manifest this update: Sun 15 Nov 2026 09:01:58 +0000
Manifest next update: Mon 16 Nov 2026 09:01:58 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: mIYTf+Q4ZAjl9pndFigkeKY+mexBw9XQwTmX7RJUS2M=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:21:9c:b7:14:4e:98:40:38:be:02:fc:ba:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Nov 15 09:01:58 2026 GMT
Not After : Nov 16 09:01:58 2026 GMT
Subject: CN=36b0f5db793a55aa1b645ffa4ea0118f2280595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:28:26:18:aa:d3:1a:9c:e4:e2:cb:90:2b:
2c:38:65:b1:60:e3:8f:16:89:54:5d:73:48:8f:75:
4c:70:f9:fe:3e:8e:50:1a:eb:f4:69:fc:fd:72:08:
7f:12:2d:58:74:a1:fe:2a:ab:6a:2b:46:48:e6:66:
9c:0a:69:0c:20:0b:98:b2:77:79:bf:05:f6:28:20:
47:fe:19:75:07:14:d8:30:5d:7f:76:3c:e4:ca:29:
9b:3b:83:b0:3e:03:12:a2:ec:39:d4:a7:95:26:80:
d1:07:c5:fd:c2:b9:7e:27:98:b5:e6:b1:80:8b:3f:
fe:7c:7c:88:1c:e3:44:f1:26:75:a3:10:bd:08:7d:
bb:84:12:a1:7c:49:a8:d3:4a:34:f5:42:8f:62:53:
be:c2:81:8f:bd:15:f9:99:5f:03:e1:f0:23:c3:b5:
a7:b8:fb:8e:e0:48:74:53:72:1c:fb:81:5f:1b:4d:
dc:ed:af:07:2c:a4:31:fb:70:1c:ac:37:ed:ad:ff:
c5:14:1b:24:77:8f:24:15:45:5d:0c:40:e6:4f:4b:
47:93:74:e5:0a:0a:7c:8e:81:c5:a1:61:ef:17:a7:
1f:91:00:24:c8:5b:75:77:e9:b0:e4:d9:8b:39:25:
ac:e3:dc:b1:81:8a:3c:c9:c6:ca:fd:60:e1:6b:b6:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:F5:DB:79:3A:55:AA:1B:64:5F:FA:4E:A0:11:8F:22:80:59:5C
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:25:58:9e:bd:6a:ee:2f:4e:a1:c1:5b:4e:20:cd:55:40:0f:
cd:17:14:58:a9:72:33:73:f9:92:e8:0b:87:d4:c6:d0:9d:cc:
97:b4:6d:96:e3:5b:be:99:1f:5e:32:74:5d:4b:76:8d:ec:09:
dd:2c:17:2b:2c:07:29:e3:60:49:c0:3a:04:3f:fb:61:0f:6d:
51:92:a7:89:55:ec:b1:92:4b:e0:6e:4a:33:10:7d:c4:a1:3e:
58:90:7d:17:d7:d3:fe:49:a1:24:0f:75:81:23:33:71:4e:64:
ce:6e:6a:b3:f6:38:d8:a5:8e:80:0d:aa:ec:a8:f4:da:c2:d5:
e8:0f:2d:76:2c:98:0e:7c:ef:9b:4e:71:fa:0f:12:e6:bc:e2:
11:68:35:32:80:a1:38:80:c0:d3:0f:bb:a1:0f:80:4f:df:d7:
71:8c:3b:f0:50:36:b5:97:f5:fa:d3:4c:9f:4a:a0:55:44:3c:
c2:e1:e8:99:ba:20:18:d6:4b:f0:f5:71:fc:ff:61:7e:e3:96:
94:f5:98:1e:54:fd:17:47:34:d0:2c:57:a0:13:c3:55:1b:d4:
1b:f0:00:5b:aa:59:3e:a1:65:6d:14:b8:2d:9a:02:2a:86:52:
7d:73:a1:b5:43:c1:a7:83:27:7e:18:ce:f1:ab:4a:59:a5:e2:
04:c9:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:05:37 2026 by rpki-client