Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: juk4brqAwIQw/ukDs4uS4WhKUKRgduzd7Fn2hAPo3RU=
Subject key identifier: B7:CB:95:8F:74:3B:AC:31:E4:09:F3:BE:9C:5B:D9:70:F4:B5:48:65
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A0CA472C1B263B2B075052F8F8379DAE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1A97
Signing time: Tue 22 Sep 2026 18:00:56 +0000
Manifest this update: Tue 22 Sep 2026 18:00:56 +0000
Manifest next update: Wed 23 Sep 2026 18:00:56 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: HmrI+eBV7jO8WfrQ0LJr5QCLTmEodjRjhDI8iG5t5oM=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:2c:1b:26:3b:2b:07:50:52:f8:f8:37:9d:ae:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Sep 22 18:00:56 2026 GMT
Not After : Sep 23 18:00:56 2026 GMT
Subject: CN=b7cb958f743bac31e409f3be9c5bd970f4b54865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:3a:1a:07:29:9b:9b:b9:c4:08:05:3c:a5:
90:23:cd:8c:f1:f4:8b:8f:5e:14:45:31:c5:e3:4a:
80:e3:63:bc:5b:a3:36:c4:b1:a4:e0:a4:d6:25:97:
f4:0e:e5:72:2e:e6:5b:f9:2d:44:4f:25:93:66:4b:
37:a4:46:66:8a:ae:c2:62:4d:62:f3:61:70:63:e8:
d5:94:0e:53:2a:25:ed:15:70:31:71:7e:21:a9:bf:
44:2c:ce:cd:5b:52:e0:65:7d:c6:de:3b:8b:0d:29:
2a:52:9a:54:0d:3c:a4:33:70:5b:ad:dd:43:f8:34:
f8:31:fd:61:6b:0a:b1:b0:49:31:a9:6d:85:1a:c8:
0c:a0:fa:95:25:f3:26:47:a0:3e:1c:35:4c:3a:79:
92:d7:c5:8e:db:d4:d1:83:e1:ec:35:68:f6:b4:95:
87:3f:d0:df:cc:b5:b7:85:76:52:5b:97:ca:af:55:
db:99:d5:df:ec:a4:0d:22:95:11:e2:0c:dc:2f:51:
95:a5:6f:13:f5:7f:91:94:12:af:f4:e6:a1:fd:e4:
67:a3:eb:16:e9:2f:e6:7b:9c:64:c8:d9:18:de:26:
1e:c0:ff:73:ec:fd:d7:96:94:72:8c:c0:82:ec:d8:
2c:34:7b:a3:57:74:a9:88:3b:e4:e9:4d:ab:3a:92:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:95:8F:74:3B:AC:31:E4:09:F3:BE:9C:5B:D9:70:F4:B5:48:65
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d5:3e:e6:6d:f1:2e:c7:f3:b0:4e:aa:77:bb:61:9b:4b:89:
df:6d:9b:09:af:57:56:cb:65:25:15:11:bb:6d:65:fc:f6:4a:
67:7c:23:3d:27:44:c9:11:57:43:be:e4:2a:b3:e0:fb:8e:0a:
c6:39:3d:26:d0:4f:4c:9c:47:59:b0:49:f2:01:9d:79:73:e2:
c3:7b:4c:76:28:ae:a9:76:7a:8b:93:8d:70:ab:8f:2e:ef:84:
02:c9:47:9a:04:07:53:06:fa:82:06:f1:58:0f:1e:3f:76:c7:
07:83:fb:46:f2:fc:7d:2e:65:c1:03:30:54:36:7e:0e:20:79:
9e:03:d9:e2:25:85:29:53:7a:38:b1:e5:a4:5b:34:3f:3b:b8:
a8:4e:e2:f2:d7:9d:0b:4e:3c:a6:7b:0e:53:ad:a7:28:74:81:
46:e2:67:f8:51:bb:da:70:44:29:58:27:75:a8:38:dd:c5:15:
6e:df:f0:a6:58:2a:42:ae:14:c0:e5:58:41:e6:ac:65:4b:6f:
34:e8:e3:06:39:98:32:15:58:4c:72:69:93:17:f8:46:ea:3b:
84:3b:92:fb:12:3f:be:b5:93:f0:2a:d4:be:d2:76:bd:74:09:
71:92:1a:c7:85:fa:7a:6b:b8:7a:af:37:f8:39:ff:b1:af:b3:
e2:10:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:27:14 2026 by rpki-client