Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.mft (raw, json)
Hash identifier: Nfj9hh/6szO/YOkD3iyyHDCxzfni3OFL117S7zceSm8=
Subject key identifier: 5A:39:80:B2:FA:43:DF:18:6E:7E:82:66:46:CC:70:DC:8E:78:51:23
Authority key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Certificate issuer: /CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Certificate serial: 01A0D20141CE435230DE6A5F0CA41D3C2861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
Manifest number: 0228
Signing time: Thu 24 Sep 2026 06:01:32 +0000
Manifest this update: Thu 24 Sep 2026 06:01:32 +0000
Manifest next update: Fri 25 Sep 2026 06:01:32 +0000
Files and hashes: 1: 1-YUzm9bktvZypnyvdxbuQMFLlWk.crl (hash: UIek2hjZ4H6MVlBbgzpPQVUbBWU1NchMW4/QOkPqHso=)
2: vTv6Y9pYzSLa4y30BsFSU3zUkkI.roa (hash: W0KsvSQFE2TKZ3eONDLazVIwQ+vxG34zEx4WZk3Nw8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:41:ce:43:52:30:de:6a:5f:0c:a4:1d:3c:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Validity
Not Before: Sep 24 06:01:32 2026 GMT
Not After : Sep 25 06:01:32 2026 GMT
Subject: CN=5a3980b2fa43df186e7e826646cc70dc8e785123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:64:6c:95:92:37:20:c5:29:72:62:aa:e0:
af:af:cf:f6:77:60:1d:6d:04:af:2f:18:24:4d:29:
af:89:26:ed:ec:8a:cb:1f:5f:72:ba:86:1f:eb:0e:
88:81:41:38:9a:71:c7:50:da:f1:d3:10:50:25:7a:
79:f8:f7:00:6d:58:1c:25:2f:08:d3:03:3f:5f:a5:
1c:c1:14:26:7b:64:b6:9b:6a:31:a0:19:71:41:62:
b5:14:62:11:24:5b:17:2f:49:3c:7c:0f:2e:46:ea:
8d:03:35:22:8d:b8:aa:b7:62:52:54:cf:0e:ae:37:
56:23:18:db:eb:5a:01:63:bf:0e:b7:db:64:26:64:
6a:3d:bd:99:13:0a:23:bf:42:4e:4e:47:66:f7:3f:
49:d7:4e:57:eb:08:45:54:28:50:2e:c0:b7:0d:d8:
5c:99:5c:12:c4:a7:2f:d5:fb:0b:28:17:3c:28:16:
81:a3:fb:22:8a:d5:3e:f1:c9:07:bd:f5:4f:85:38:
05:87:6d:b6:69:c1:d3:eb:b7:f1:d5:5a:d7:4a:44:
e6:89:04:a4:5c:3e:c8:85:77:43:42:b2:9b:56:db:
f7:0b:7e:68:fb:84:73:15:33:a2:0c:50:e0:3f:9d:
3a:1e:9c:1f:6b:cb:36:20:29:c7:fc:5f:98:ea:0d:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:80:B2:FA:43:DF:18:6E:7E:82:66:46:CC:70:DC:8E:78:51:23
X509v3 Authority Key Identifier:
keyid:F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5e:e2:fc:8b:be:bf:71:43:4f:b2:93:4c:12:cc:49:6e:7f:
97:f4:b4:88:5b:07:ba:18:4b:4d:8b:77:7a:20:d2:00:ab:36:
eb:4c:08:61:d1:02:e7:da:58:8f:73:15:3b:1c:fa:02:a2:eb:
77:34:18:f1:38:7c:c6:44:24:97:35:2a:44:31:85:f9:1c:e2:
aa:f9:11:66:1a:ce:0d:7c:74:ef:6d:54:3b:26:4e:85:ef:4e:
fb:f0:39:83:68:9e:23:6a:15:7c:2b:1b:f4:6c:28:dd:b2:af:
51:79:61:81:d2:73:71:51:f3:68:3f:f0:2e:b1:be:85:84:89:
d8:08:cf:28:70:10:82:8c:04:e0:10:a4:85:8f:31:8e:c3:e6:
68:7e:9d:a2:9c:71:3b:a1:e1:7f:79:f8:06:05:c5:2c:d8:0a:
d9:70:55:35:f0:5e:be:8b:f4:4f:88:1b:7c:3f:26:d0:00:af:
4c:0f:80:4b:d8:7b:40:75:f7:75:66:76:f2:6f:4e:1f:8e:ae:
5c:3a:38:ad:0d:6f:04:51:41:be:1f:69:85:e7:d5:b9:86:e2:
1d:a3:14:79:3f:58:60:42:c5:e0:cf:a8:e9:f4:77:65:68:9a:
a5:c9:67:fe:69:37:ff:2c:a5:4e:24:c0:63:eb:04:d2:0d:01:
96:ae:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:55:47 2026 by rpki-client