Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier: dp8VEwsiA9G81xw9dnMbXDVLYfoQ2wc0cz3mdp4FYJQ=
Subject key identifier: F9:BB:67:E7:D6:B0:43:35:A1:64:4B:A6:95:08:9B:40:1A:4B:B8:8F
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial: 019D329A6719DABA64E8958E1B8CBA963457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number: 9F
Signing time: Sat 28 Mar 2026 04:01:12 +0000
Manifest this update: Sat 28 Mar 2026 04:01:12 +0000
Manifest next update: Sun 29 Mar 2026 04:01:12 +0000
Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: kNgKY++jW/Ei20y6dRV2591BbnTu8jw6j/m8hCHVpR8=)
2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:67:19:da:ba:64:e8:95:8e:1b:8c:ba:96:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
Validity
Not Before: Mar 28 04:01:12 2026 GMT
Not After : Mar 29 04:01:12 2026 GMT
Subject: CN=f9bb67e7d6b04335a1644ba695089b401a4bb88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:b5:3a:80:f9:07:77:ee:e8:7c:a4:a7:6e:
29:3d:a8:58:21:81:04:06:1b:47:e9:d5:4a:0a:74:
eb:d9:f5:9d:6c:21:43:d5:18:91:b6:99:9a:e7:bd:
be:79:0a:80:87:03:16:31:33:7b:88:8b:46:12:c1:
a7:09:4e:f9:68:5c:34:9d:4c:e6:6c:d0:fb:e7:88:
3c:0b:51:1d:fa:7b:3b:9e:62:8b:02:40:49:d9:42:
54:78:51:76:49:22:89:1e:18:d3:47:d3:ab:bb:da:
9d:81:5a:0b:ff:d8:d9:95:70:64:a1:3d:24:3b:f3:
ff:db:d5:36:d7:b1:fa:be:36:7e:9d:62:d6:fb:92:
ec:55:d3:6e:25:9d:9b:18:35:fa:68:cb:4e:c1:d6:
fa:45:a8:64:68:7f:86:20:14:e2:89:ed:f5:16:91:
86:b4:ee:b5:67:fc:f3:59:c9:8d:c3:e9:22:17:a2:
fb:59:7d:4a:e4:4d:a6:06:1e:8e:fb:97:49:cd:0f:
1c:d9:71:60:a2:6d:5f:c5:6d:af:3b:70:51:82:96:
c4:bd:c6:c7:37:57:14:04:34:95:e5:76:19:ef:2a:
13:d9:0a:15:47:44:83:67:c7:af:0a:eb:eb:53:77:
0d:b3:d3:11:a8:1e:25:60:c3:1a:4c:d7:26:3b:a9:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:67:E7:D6:B0:43:35:A1:64:4B:A6:95:08:9B:40:1A:4B:B8:8F
X509v3 Authority Key Identifier:
keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e2:88:a9:4b:ff:7b:ef:75:8e:12:25:4d:94:70:4b:4e:87:
0c:ff:aa:1d:8b:12:18:3e:07:21:88:ce:9c:3a:17:50:0e:12:
1c:39:b5:f4:38:16:b3:29:4e:35:4e:d8:1c:83:3f:83:8d:b1:
ca:51:8d:b4:1b:51:ba:32:32:d2:2e:2e:8b:41:b7:c4:d3:57:
68:8a:eb:99:93:73:e5:3c:28:65:e4:75:33:fd:3e:5d:85:2b:
fe:cc:0c:42:56:16:0f:42:32:cf:c9:e4:40:2f:a8:3c:8d:28:
9b:f4:fe:3d:79:35:20:34:49:ff:83:2f:c4:52:22:20:51:e6:
c8:1f:f0:51:12:59:12:85:a8:3f:ec:d7:a1:b3:61:2f:a9:4f:
f7:f7:be:05:a8:3c:a4:71:d4:d6:95:af:0c:61:04:e8:97:f8:
14:00:2d:b1:a2:c7:b9:67:d8:8d:96:eb:c2:8f:8e:22:5c:5a:
7b:f6:05:06:f0:e6:f0:ac:4d:a3:31:92:f5:9e:ce:2b:dc:6d:
63:a7:58:c3:e3:d7:9e:40:c4:4b:55:72:5e:2e:3a:6d:6f:9f:
75:65:73:eb:9e:10:2b:9e:a9:7b:92:85:a0:fe:26:19:63:b5:
3e:1d:6d:e9:b5:37:c5:6b:80:6a:36:24:0e:26:4a:b0:57:c8:
5d:c4:89:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ymmcZ2rpk6JWOG4y6ljRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTYwZTc1YWRkNmViZjZmNDQ1ODEzMjE0NzdmYWI5MmQy
MmU0NGYwHhcNMjYwMzI4MDQwMTEyWhcNMjYwMzI5MDQwMTEyWjAzMTEwLwYDVQQD
EyhmOWJiNjdlN2Q2YjA0MzM1YTE2NDRiYTY5NTA4OWI0MDFhNGJiODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqm1OoD5B3fu6Hykp24pPahYIYEE
BhtH6dVKCnTr2fWdbCFD1RiRtpma572+eQqAhwMWMTN7iItGEsGnCU75aFw0nUzm
bND754g8C1Ed+ns7nmKLAkBJ2UJUeFF2SSKJHhjTR9Oru9qdgVoL/9jZlXBkoT0k
O/P/29U217H6vjZ+nWLW+5LsVdNuJZ2bGDX6aMtOwdb6RahkaH+GIBTiie31FpGG
tO61Z/zzWcmNw+kiF6L7WX1K5E2mBh6O+5dJzQ8c2XFgom1fxW2vO3BRgpbEvcbH
N1cUBDSV5XYZ7yoT2QoVR0SDZ8evCuvrU3cNs9MRqB4lYMMaTNcmO6nU9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPm7Z+fWsEM1oWRLppUIm0AaS7iPMB8GA1UdIwQY
MBaAFPoWDnWt1uv29EWBMhR3+rktIuRPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oWU9kYTNXNl9iMFJZRXlGSGY2dVMwaTVFOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvNDg5ZTgyLTQ3NjktNDZmOC1iNGQ2
LTU5MjBiOTgxNDQxOS8xLzEtaFlPZGEzVzZfYjBSWUV5RkhmNnVTMGk1RTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlmLzQ4OWU4Mi00NzY5LTQ2ZjgtYjRkNi01OTIwYjk4MTQ0
MTkvMS8xLWhZT2RhM1c2X2IwUllFeUZIZjZ1UzBpNUU4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuKI
qUv/e+91jhIlTZRwS06HDP+qHYsSGD4HIYjOnDoXUA4SHDm19DgWsylONU7YHIM/
g42xylGNtBtRujIy0i4ui0G3xNNXaIrrmZNz5TwoZeR1M/0+XYUr/swMQlYWD0Iy
z8nkQC+oPI0om/T+PXk1IDRJ/4MvxFIiIFHmyB/wURJZEoWoP+zXobNhL6lP9/e+
Bag8pHHU1pWvDGEE6Jf4FAAtsaLHuWfYjZbrwo+OIlxae/YFBvDm8KxNozGS9Z7O
K9xtY6dYw+PXnkDES1VyXi46bW+fdWVz654QK56pe5KFoP4mGWO1Ph1t6bU3xWuA
ajYkDiZKsFfIXcSJzw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:14 2026 by rpki-client