Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: 7krlYcGcu8oU1hhxa6VAaTpEGr5iDbOyeE3m74NnKNs=
Subject key identifier: A5:A0:EE:F4:CC:9B:B9:E2:EA:4A:22:0D:10:25:1F:DC:F7:79:CA:F8
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019D284E6960D0208A08E8D960D3E99CC4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 140C
Signing time: Thu 26 Mar 2026 04:02:00 +0000
Manifest this update: Thu 26 Mar 2026 04:02:00 +0000
Manifest next update: Fri 27 Mar 2026 04:02:00 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: +8puruJ/FktFAT1s/Wb1vN3ddh2slunNZ17TdT60T5w=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:69:60:d0:20:8a:08:e8:d9:60:d3:e9:9c:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Mar 26 04:02:00 2026 GMT
Not After : Mar 27 04:02:00 2026 GMT
Subject: CN=a5a0eef4cc9bb9e2ea4a220d10251fdcf779caf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:f6:a5:ca:58:bb:ea:33:2e:f0:5e:60:70:
41:c0:12:f9:8d:87:c9:c8:de:5a:f1:3e:7b:7c:c2:
60:f1:a0:83:2a:07:72:61:43:e6:cb:ff:f8:0d:83:
1d:32:d0:ae:4c:9d:22:76:50:a8:3f:5f:7a:b3:88:
85:99:a3:15:ca:f0:7e:bb:31:83:c2:dc:92:d6:76:
8e:6a:d2:5f:1c:d2:b4:40:e2:0b:ba:91:72:24:30:
73:9a:0e:a9:e4:b4:8b:83:91:d1:e2:2a:bc:e0:52:
13:97:33:f5:68:e4:05:dd:ff:79:de:df:04:53:27:
5b:b3:96:6f:0f:79:fa:43:8d:87:90:12:f9:14:cb:
bc:ec:19:a2:a2:af:b2:f4:80:df:b6:04:43:97:40:
e3:2f:b3:92:67:4a:5d:1e:09:fa:ab:97:54:56:29:
85:43:4c:e2:48:2f:37:29:15:4e:e6:70:3c:1d:fe:
9d:93:79:df:cc:4d:2d:4d:0c:b2:e7:bb:7b:fb:de:
5c:27:fa:91:90:9f:2a:3d:41:f3:e9:f2:63:18:19:
de:ed:44:e8:a2:b5:fe:61:c6:1b:dc:cb:3d:1d:ee:
0d:5f:79:38:b7:67:3a:5a:da:0b:00:5a:94:25:a9:
57:11:77:8b:49:7b:1a:1b:fd:7b:ae:f0:aa:c1:72:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:EE:F4:CC:9B:B9:E2:EA:4A:22:0D:10:25:1F:DC:F7:79:CA:F8
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:19:31:fb:ab:ad:7b:20:2d:90:43:61:82:17:80:3a:4f:13:
d6:79:27:25:5c:36:cd:c8:5c:90:32:8e:2d:01:a6:6d:f3:f5:
e2:9c:8e:23:63:21:9f:c8:0b:eb:15:7b:67:f8:d7:88:6d:0c:
25:43:d0:75:3e:23:e4:e2:4c:a9:56:71:ed:56:3b:04:8a:1c:
60:08:f9:fc:30:7f:0d:02:58:cd:d8:c2:ac:d8:3b:d1:08:28:
9c:72:4c:bb:13:32:c9:1b:d4:d2:02:dd:6b:ab:cf:02:5f:93:
12:77:4b:7a:59:78:87:9e:22:f8:9a:a3:bc:f9:d9:a9:f6:fa:
f6:10:10:39:12:c6:d6:87:97:63:a2:a2:cf:07:b4:7f:7d:ae:
e7:d5:40:6d:0e:a9:2d:5a:16:11:37:9d:1a:bb:c2:29:69:47:
91:49:b5:f9:76:45:f1:a7:c7:a6:ff:a4:66:0b:c9:a6:16:2e:
d9:c9:ec:2b:46:01:a2:2b:38:39:3f:ef:8e:36:9c:63:64:60:
e8:08:09:61:30:c8:20:b6:9e:45:ea:5c:7d:28:ed:d0:ab:bf:
6f:ec:d0:9e:e4:b6:33:77:b4:7f:ca:a4:03:9f:11:c3:73:4e:
e5:4b:8f:f1:50:ad:a5:b2:15:d3:4f:6f:7b:c0:9a:27:2b:6c:
a4:60:87:aa
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0oTmlg0CCKCOjZYNPpnMT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODRiY2U0NGZhMzI4MDFkN2YxMGNlOTgzOWIwNjA4NGRk
ZmYyYmEwHhcNMjYwMzI2MDQwMjAwWhcNMjYwMzI3MDQwMjAwWjAzMTEwLwYDVQQD
EyhhNWEwZWVmNGNjOWJiOWUyZWE0YTIyMGQxMDI1MWZkY2Y3NzljYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZv2pcpYu+ozLvBeYHBBwBL5jYfJ
yN5a8T57fMJg8aCDKgdyYUPmy//4DYMdMtCuTJ0idlCoP196s4iFmaMVyvB+uzGD
wtyS1naOatJfHNK0QOILupFyJDBzmg6p5LSLg5HR4iq84FITlzP1aOQF3f953t8E
Uydbs5ZvD3n6Q42HkBL5FMu87Bmioq+y9IDftgRDl0DjL7OSZ0pdHgn6q5dUVimF
Q0ziSC83KRVO5nA8Hf6dk3nfzE0tTQyy57t7+95cJ/qRkJ8qPUHz6fJjGBne7UTo
orX+YcYb3Ms9He4NX3k4t2c6WtoLAFqUJalXEXeLSXsaG/17rvCqwXKoswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKWg7vTMm7ni6koiDRAlH9z3ecr4MB8GA1UdIwQY
MBaAFPmEvORPoygB1/EM6YObBghN3/K6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZUzg1RS1qS0FIWDhRenBnNXNHQ0UzZjhyby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYWVjZjJlLTI5YTQtNGEyMC04ZGU1
LWRiMThjMTA0MWE5NS8xLzEtWVM4NUUtaktBSFg4UXpwZzVzR0NFM2Y4cm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U0L2FlY2YyZS0yOWE0LTRhMjAtOGRlNS1kYjE4YzEwNDFh
OTUvMS8xLVlTODVFLWpLQUhYOFF6cGc1c0dDRTNmOHJvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxkx
+6uteyAtkENhgheAOk8T1nknJVw2zchckDKOLQGmbfP14pyOI2Mhn8gL6xV7Z/jX
iG0MJUPQdT4j5OJMqVZx7VY7BIocYAj5/DB/DQJYzdjCrNg70QgonHJMuxMyyRvU
0gLda6vPAl+TEndLell4h54i+JqjvPnZqfb69hAQORLG1oeXY6Kizwe0f32u59VA
bQ6pLVoWETedGrvCKWlHkUm1+XZF8afHpv+kZgvJphYu2cnsK0YBois4OT/vjjac
Y2Rg6AgJYTDIILaeRepcfSjt0Ku/b+zQnuS2M3e0f8qkA58Rw3NO5UuP8VCtpbIV
009ve8CaJytspGCHqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:24 2026 by rpki-client