Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: y1Uvnm/MzkNKUqdScPWJ9nkA0Dq4Rfy6j6H4dLIFW1g=
Subject key identifier: 67:FE:A7:79:35:2F:B1:84:8D:44:BC:48:E1:4E:87:71:EA:99:7C:82
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01A06E706CBD9123A33BF283D358553691F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0A9E
Signing time: Fri 04 Sep 2026 22:00:56 +0000
Manifest this update: Fri 04 Sep 2026 22:00:56 +0000
Manifest next update: Sat 05 Sep 2026 22:00:56 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: oXpScjQgV3NRIfx1qutG4G0Wpdiw/ghMGU6mbSe6qHA=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:6c:bd:91:23:a3:3b:f2:83:d3:58:55:36:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Sep 4 22:00:56 2026 GMT
Not After : Sep 5 22:00:56 2026 GMT
Subject: CN=67fea779352fb1848d44bc48e14e8771ea997c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:a7:3e:f4:cb:f8:a7:8d:af:5e:27:e4:62:
25:8f:99:16:28:c6:53:71:97:61:81:67:04:5f:22:
3b:d2:64:bd:5f:72:fe:c6:2d:30:22:18:08:11:ed:
ac:98:68:84:0a:30:2b:23:7f:2a:de:cb:aa:40:59:
4b:d1:55:28:51:e6:9c:4c:47:63:42:13:94:82:53:
73:a7:12:5d:c0:eb:03:3c:57:c5:f9:ba:27:7a:98:
36:eb:73:97:d9:e9:e3:14:e5:5c:89:a0:92:95:c2:
e3:1f:31:27:14:86:9f:04:6c:b6:a2:b0:e7:69:f4:
00:71:29:7e:38:93:06:4b:97:ac:d2:78:0e:7c:a9:
70:a5:d4:db:75:58:d4:6d:48:95:67:b3:6d:46:a1:
82:11:40:9f:be:f4:38:45:bd:ae:c4:b6:11:31:6b:
bd:71:33:e9:9b:3d:16:59:f7:c4:b2:8d:9d:2d:3c:
35:91:1a:6b:4d:e3:51:1b:87:b2:24:73:ce:65:30:
ac:a1:48:61:f3:ff:a9:ba:e0:a2:2c:bd:33:fb:27:
85:83:2e:a4:1d:5d:d2:74:17:81:4b:7d:b7:c0:9b:
11:e1:08:3a:42:1f:09:38:38:e1:b1:c3:27:cf:bc:
f9:d9:e3:f9:b9:c2:a5:74:bf:60:f9:53:61:47:59:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:A7:79:35:2F:B1:84:8D:44:BC:48:E1:4E:87:71:EA:99:7C:82
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d6:0a:b6:1f:79:d8:5e:37:33:b0:41:56:e2:2a:79:ab:11:
6d:92:8d:7b:88:8e:0e:2a:8d:95:46:8f:3c:b1:13:c7:a5:08:
bb:2f:ec:49:cd:96:82:fb:a4:19:d7:56:91:05:3a:9d:2a:50:
fb:36:c2:6f:4f:5b:f3:3f:f0:95:22:35:6f:1b:8f:58:cb:e2:
51:00:19:ea:5c:f8:3f:2f:6d:03:87:ea:55:24:66:62:e7:a8:
0b:d2:d3:bd:67:32:69:dd:59:b4:22:a0:49:a7:67:bf:44:b5:
26:3a:33:6c:5e:d6:90:cb:79:06:f1:4f:a0:3d:3c:dc:df:e8:
64:99:82:38:cc:8b:7c:c0:33:f0:2f:8f:e6:3b:b2:86:ce:6c:
f9:d6:cf:bf:a0:53:bf:5e:2a:0a:a4:3f:f0:8e:5f:f4:34:c0:
98:14:27:88:14:bc:43:be:0c:5b:7f:1f:49:ec:9e:21:45:d4:
63:ba:1c:7f:e3:ad:89:1c:3f:d0:16:af:6e:78:cb:54:1a:f7:
5d:b1:05:3d:ab:8a:4c:38:63:41:04:ca:3c:e9:7b:24:56:43:
18:5d:f6:37:72:34:04:e1:9e:77:5e:81:0f:1b:c6:00:01:b3:
39:9c:cf:7b:4b:0f:28:17:62:c8:d8:85:ca:c1:dd:aa:f7:94:
ac:28:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:55:27 2026 by rpki-client