Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: pnBkqpWFhcIxVHuVb+7dG38zUJzIHp7Q6zcp14/cbas=
Subject key identifier: 12:B7:92:91:9C:D2:76:EB:A9:B6:E0:E3:D9:62:62:48:DE:08:F4:7C
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01A0DA966EB393C0983B7F8A80EE973388D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0AD6
Signing time: Fri 25 Sep 2026 22:01:26 +0000
Manifest this update: Fri 25 Sep 2026 22:01:26 +0000
Manifest next update: Sat 26 Sep 2026 22:01:26 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: B3Z5xtPvYJSuBjlemDYwizbbbOPuqryb4yZxLUcRXtg=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:6e:b3:93:c0:98:3b:7f:8a:80:ee:97:33:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Sep 25 22:01:26 2026 GMT
Not After : Sep 26 22:01:26 2026 GMT
Subject: CN=12b792919cd276eba9b6e0e3d9626248de08f47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:f3:bf:4b:a4:01:c9:e1:c6:70:f4:b8:40:
00:6d:56:ab:5f:f5:d7:ee:72:5d:97:14:cd:35:5c:
f6:5a:ba:10:39:69:75:42:f8:66:35:5b:61:bf:1c:
54:63:d3:5b:d7:0f:7a:6b:b9:ae:72:c3:ad:28:95:
99:d6:cb:e2:30:d5:f7:e3:9d:93:ef:72:57:28:db:
f2:b6:34:bf:5c:56:a3:42:44:21:e9:7f:fe:c5:90:
a3:8f:82:5a:11:2d:2c:97:25:48:9c:b3:91:8e:ce:
b7:ba:6c:68:df:8c:39:59:e6:d6:f4:cf:86:85:af:
c9:4f:cf:cb:e1:d3:e0:e3:bc:01:de:d4:bd:65:4c:
27:02:ff:66:83:12:8e:6b:7a:c8:e4:ce:60:60:12:
44:ce:5c:27:b5:4d:91:68:a3:61:9b:a7:0a:a5:67:
d5:f5:80:16:00:19:4e:0b:1b:e9:f4:22:a4:17:99:
ad:fb:19:f8:d0:97:55:a0:f5:91:a6:1d:02:30:85:
81:c9:c5:b9:82:d4:8b:8c:5b:b9:4b:aa:4e:51:10:
9a:45:62:65:10:67:2f:fa:e7:9c:75:41:0d:95:07:
ee:74:9a:75:f6:09:8a:79:fe:34:8a:b4:9e:64:ac:
2c:1e:6c:54:c9:1f:49:15:33:61:90:27:2e:b5:47:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B7:92:91:9C:D2:76:EB:A9:B6:E0:E3:D9:62:62:48:DE:08:F4:7C
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:1f:cb:b0:52:81:00:ce:1e:ce:5e:b8:11:84:c8:18:84:
e6:a2:bc:f4:d7:68:c3:ed:c8:be:c0:21:63:e5:eb:f4:a2:41:
a8:26:ca:ae:bf:81:22:57:68:3b:ef:46:36:5e:0d:c1:24:0b:
39:b1:b1:62:84:fc:26:ae:51:0b:c7:01:12:c7:2d:98:59:19:
45:67:92:35:93:61:1e:4d:3c:08:46:27:92:95:aa:78:f1:dc:
c2:1f:ff:2f:b4:2b:b6:75:af:ba:3b:10:13:02:c3:9d:e0:a4:
6b:c5:9a:fd:6e:a9:cb:77:c9:48:1c:00:fe:e6:21:e5:25:fe:
37:42:e5:a6:29:a0:68:a4:43:12:00:f4:ca:a2:85:f3:ed:43:
0c:2b:22:15:0d:92:ba:f5:76:63:22:12:48:b3:91:6c:84:70:
e8:e4:c2:7d:f0:05:a4:14:a1:ab:15:f6:58:60:1f:e2:47:0b:
f4:d8:cf:f3:3b:bc:67:97:f5:f7:d4:aa:e8:56:98:14:db:dd:
b1:d3:9b:8d:46:08:a2:16:8b:a7:6a:01:72:77:3b:d4:43:d6:
e9:5e:ef:98:60:c9:4c:ab:c4:06:94:22:05:b9:c7:f5:b5:e1:
52:a9:22:47:e9:a3:57:10:c2:a0:e0:eb:fd:fe:07:3a:9c:50:
87:86:c4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:57 2026 by rpki-client