Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: MMWoChyU84zY+GvSV1ml1gHka/KH2nMMt6kU3ti/SVU=
Subject key identifier: 17:C7:C7:37:4D:84:70:C8:69:23:88:2E:6A:FD:B7:E9:BF:EC:55:EC
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 01A0E853754138AEC61E1DA32C2227E0B029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0F99
Signing time: Mon 28 Sep 2026 14:02:58 +0000
Manifest this update: Mon 28 Sep 2026 14:02:58 +0000
Manifest next update: Tue 29 Sep 2026 14:02:58 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: NKYAjfKwHezopftiHZZVZ5pFvTj3l6Qx7U8gHIEofcw=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:75:41:38:ae:c6:1e:1d:a3:2c:22:27:e0:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Sep 28 14:02:58 2026 GMT
Not After : Sep 29 14:02:58 2026 GMT
Subject: CN=17c7c7374d8470c86923882e6afdb7e9bfec55ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:a4:dd:09:8a:43:f9:27:d6:b2:96:28:1a:
7d:63:3b:9f:91:db:42:33:f4:bc:dc:b5:d2:67:f9:
80:a7:3d:8b:7f:39:34:c5:ac:74:d4:b9:6c:c9:a7:
ff:2f:d7:b5:ec:77:84:ce:f3:66:8f:46:9a:5f:ef:
08:f4:bc:83:83:f8:ea:68:99:54:bd:08:33:a5:70:
40:57:f6:01:96:09:a5:47:e8:a3:38:af:aa:a6:6b:
35:ed:dd:31:01:d2:ed:f4:92:8b:26:c9:a0:fe:9c:
89:b6:28:0a:6a:e7:07:47:9b:c9:7f:6e:5d:f7:27:
30:8a:e0:f4:74:fe:f6:d1:4d:94:ff:3d:be:9b:4b:
e9:df:8e:69:89:dd:68:75:59:02:b6:e7:ad:48:c3:
c5:7f:48:1d:cf:ff:3c:06:ae:8a:f0:7f:c6:86:ae:
c3:e5:75:8e:e8:83:b3:ac:55:ec:09:37:b5:3c:28:
2d:4b:fd:fa:a2:b3:62:84:35:81:dd:4a:b0:0b:3e:
4e:6e:2f:e8:93:e7:46:d0:28:23:5b:21:99:6d:80:
82:6f:65:28:2e:70:7d:6f:4d:f8:da:b1:38:af:dd:
94:58:81:da:cc:39:19:e5:be:e6:42:30:2f:a1:c9:
d1:7d:28:6d:cb:46:1d:c0:43:ef:6d:e6:43:ee:ad:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:C7:37:4D:84:70:C8:69:23:88:2E:6A:FD:B7:E9:BF:EC:55:EC
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:24:90:e3:fa:34:62:7b:7b:72:6c:6f:99:31:64:44:ef:2b:
d4:21:15:1e:96:fe:ef:06:35:3d:fa:7d:5f:5a:d6:de:de:c6:
cd:58:f2:26:08:17:09:e0:20:a1:bb:53:5b:49:63:e3:e8:b9:
ef:0a:4b:8e:3f:28:37:dc:82:8b:9f:fd:fe:42:55:a6:ae:91:
5a:c2:a7:fd:bb:a5:64:d1:ea:26:e8:a8:7a:df:54:d2:16:fe:
9d:29:06:75:5a:b7:e2:c1:cb:10:48:5c:ba:b9:bf:0d:62:5e:
12:19:ae:89:a1:22:5c:42:d7:91:a9:d3:2a:f4:ec:d1:fe:45:
f5:64:22:84:fc:09:ad:be:15:68:a1:e9:49:76:b7:68:5f:36:
67:0e:ec:cd:bf:3d:f4:00:c9:a3:6c:0f:c6:2f:56:36:1a:ce:
cb:3d:04:89:7e:c7:ae:32:c0:e8:3f:9e:18:f4:64:29:ed:d5:
1a:7e:17:83:0b:a8:bc:c0:32:5d:5f:64:61:e6:31:f8:96:f7:
9a:23:2d:a9:98:e3:73:ba:7d:6a:7a:b4:a2:07:8c:e7:c7:37:
f9:a5:c4:d7:84:b6:e4:39:97:33:ca:b3:c7:53:7f:c3:af:3d:
64:6c:83:9c:52:3f:70:81:83:c9:98:19:da:76:2d:02:f3:7f:
98:ae:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:14:40 2026 by rpki-client