Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: gPbcypnpW/mAJ8VEfhU7R/wlKfqKxljeJqYd6ne74wQ=
Subject key identifier: 23:B0:0F:F8:42:A9:E8:45:3B:68:D1:4F:8F:2A:5D:1A:F2:FA:7A:EA
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019D2929509C46586E5B86FFDF81EE4F9194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 18B5
Signing time: Thu 26 Mar 2026 08:01:06 +0000
Manifest this update: Thu 26 Mar 2026 08:01:06 +0000
Manifest next update: Fri 27 Mar 2026 08:01:06 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: do8I4jc2HKUXcB5675yldpC72KbeXTce3HMZPA0hZrM=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:50:9c:46:58:6e:5b:86:ff:df:81:ee:4f:91:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Mar 26 08:01:06 2026 GMT
Not After : Mar 27 08:01:06 2026 GMT
Subject: CN=23b00ff842a9e8453b68d14f8f2a5d1af2fa7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:65:5b:d1:86:39:fe:52:76:d0:50:11:f8:
f9:3e:90:bb:4d:86:6f:cb:02:42:f1:c1:9e:9d:4b:
80:b4:53:87:9c:51:64:fe:bf:a7:83:7c:89:62:8e:
03:86:3f:08:c8:40:21:6f:7b:6e:7b:e5:77:03:97:
cf:5d:10:72:3b:7b:45:52:06:b6:9d:c1:dc:e5:cc:
22:54:70:1a:41:48:51:9e:7d:9f:3d:43:4f:5d:7c:
74:6e:79:85:fb:7c:15:b5:d2:dc:72:dd:e4:cb:c7:
70:ff:09:3f:b5:7c:04:50:6e:de:2a:c7:fa:43:b7:
f0:ef:0f:c8:4d:3e:76:68:5c:c7:a5:f7:4c:25:62:
2c:50:4a:fb:a2:69:90:a5:54:cf:89:6a:2e:b7:63:
30:50:26:fb:31:55:c7:c4:9d:f1:4c:9c:2b:00:c0:
83:d9:fa:2c:60:c9:24:d7:db:a2:77:26:92:b4:cd:
eb:38:10:52:06:a6:ee:91:80:bd:7f:f6:aa:cd:95:
e5:95:ae:65:9f:5b:49:bb:f3:52:a2:70:71:be:10:
a1:99:a6:49:4a:6e:e2:37:96:23:06:70:6f:07:a0:
04:1c:f1:82:99:70:3e:e3:52:2d:f9:98:bd:27:28:
f8:8f:46:d5:19:f2:2b:ab:2f:eb:8f:49:24:92:bf:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:0F:F8:42:A9:E8:45:3B:68:D1:4F:8F:2A:5D:1A:F2:FA:7A:EA
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d0:32:bb:15:a8:de:03:25:24:8b:17:a1:09:d0:dc:2f:33:
a0:17:d3:4a:b6:7e:94:28:39:6f:c3:5b:b5:ff:83:8c:53:d4:
e5:f9:24:55:91:57:41:31:71:60:b1:47:b8:08:a0:9b:14:68:
85:93:48:04:ce:f8:ac:eb:55:11:33:35:f4:66:b1:84:e5:b7:
9f:db:8f:06:c3:8b:a5:01:61:84:ce:cb:51:a5:7e:9d:3c:02:
20:6e:23:2a:21:50:3a:91:61:25:61:5d:c2:41:1c:82:e9:8e:
2c:ce:7e:8c:b7:d8:36:e4:79:da:0f:a6:b3:e6:5b:b0:1a:ea:
ce:c0:7f:f7:d6:cf:46:d9:eb:99:3a:dc:a5:60:31:dd:03:a3:
49:cf:68:9c:79:d9:80:65:ba:36:8c:a4:eb:30:46:bd:f4:06:
59:02:73:8d:6f:92:39:22:e7:5e:d1:d2:cb:7b:7f:07:fe:f0:
39:14:1b:83:00:33:52:26:0c:a0:4d:19:b7:73:d4:bb:d3:8e:
51:72:c8:b4:00:96:54:5c:fc:b2:a8:90:e2:4d:31:ca:aa:9b:
9e:0a:4f:11:e7:82:0c:3f:2a:6e:16:4c:40:93:f7:b3:e5:22:
fa:41:68:c8:9b:bd:64:1a:dd:39:22:81:30:ee:8c:9d:08:06:
80:64:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:41 2026 by rpki-client