Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: /R+EKvB+8ZQnoekPVdDLN/w7rxozakMA/JYB6+DQTGw=
Subject key identifier: D2:57:ED:1D:AB:87:EF:F6:06:BC:C5:A1:D3:9C:28:17:71:0A:A9:72
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019D2C60C88F4CCC5A995DABA78B1899F4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0DAA
Signing time: Thu 26 Mar 2026 23:00:33 +0000
Manifest this update: Thu 26 Mar 2026 23:00:33 +0000
Manifest next update: Fri 27 Mar 2026 23:00:33 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: yLXFYF3T+WQuPdIpHSNrbRlLZy9V9gS80zJkFuPzbI8=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:c8:8f:4c:cc:5a:99:5d:ab:a7:8b:18:99:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Mar 26 23:00:33 2026 GMT
Not After : Mar 27 23:00:33 2026 GMT
Subject: CN=d257ed1dab87eff606bcc5a1d39c2817710aa972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ff:72:46:a5:f5:b3:75:02:8a:5a:db:bb:e2:
e4:1a:42:4d:89:26:05:28:34:0d:79:12:61:0c:ad:
41:5a:02:04:61:7d:2a:ef:61:79:ad:44:01:be:0b:
63:c8:64:8b:29:79:4b:7f:f6:9c:d7:08:97:d7:63:
ab:8f:7a:fb:f0:d7:ae:b9:2d:33:e9:32:52:da:85:
21:f2:e7:ee:99:26:1a:4b:1e:0f:fc:52:c9:da:3d:
a1:86:eb:72:c2:71:fd:da:fe:c9:c9:5a:28:2a:6c:
00:09:7f:15:4f:8b:71:cd:03:da:4c:d8:bd:02:18:
4a:5b:98:15:0a:cb:1f:78:a8:62:47:f7:f3:c1:1b:
ad:67:bd:cb:05:73:0c:57:e7:81:42:97:5b:b6:cf:
66:b0:42:dd:66:b1:e8:6f:88:c7:a9:eb:3e:ca:16:
0d:81:6b:81:bc:81:de:02:57:d8:13:b3:bd:74:f4:
99:45:84:f1:70:7a:a6:f8:1c:d5:26:74:2b:6c:a7:
60:b8:df:43:3d:f8:ec:e3:1c:d3:fc:e5:6b:64:f2:
8a:97:14:f2:8d:fe:ab:6b:4a:a9:78:2d:9a:ad:c0:
11:94:f7:ed:e5:ae:24:47:5b:55:11:ac:8e:c9:61:
d5:21:7b:14:e3:9c:40:68:3b:76:eb:a7:e3:0b:ba:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:ED:1D:AB:87:EF:F6:06:BC:C5:A1:D3:9C:28:17:71:0A:A9:72
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:2c:19:ed:da:83:f1:33:6c:c9:1a:04:29:cd:a6:d9:cf:
de:97:8b:e8:91:46:c9:f9:fb:56:e3:be:62:ac:1d:2b:87:3e:
da:97:d3:54:25:c2:b8:7b:83:80:e2:99:9a:d6:dc:73:ea:02:
39:1d:57:5f:a9:aa:b7:99:42:5f:6d:7c:91:15:7a:d9:95:44:
45:c6:f3:1a:8e:70:77:c3:9c:a4:a6:0c:ac:78:bb:4d:5b:49:
c9:f1:fc:15:c3:49:50:64:3a:bb:be:59:37:11:02:fd:53:71:
49:0a:bd:9c:d3:c2:2d:41:bc:2e:b6:f6:dc:ac:46:be:06:98:
2c:58:71:f0:c2:01:eb:64:d4:b2:2f:d8:cc:b9:d3:8d:b8:26:
5a:4f:29:b6:01:88:64:7d:94:5c:30:ec:61:14:9e:19:a8:64:
50:47:fc:29:cf:7d:83:46:67:3a:72:4f:8e:bf:3d:c7:7f:7a:
de:ba:1d:73:d6:eb:e6:10:8e:4c:fb:ec:1b:86:21:8d:c2:07:
9d:7e:a4:a8:13:d5:e8:0c:b1:c4:ba:73:96:45:8c:de:7d:ea:
e3:76:50:3c:fb:af:30:1f:e0:5f:44:97:38:5a:cc:97:66:59:
73:0b:45:07:67:42:f8:2e:82:bb:a9:a3:f7:46:dc:38:e9:23:
e6:32:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:07 2026 by rpki-client