Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: YgO6Tm1wBAf7Mk1ntOvbSYyPfkV0goWkAqy/OtD433w=
Subject key identifier: 38:07:CD:DC:5A:40:C7:3A:D6:3D:32:5E:EB:7C:97:9C:A8:3E:EB:2C
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A1950D5C6BA9DD48A396CF3CC23E725A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1B00
Signing time: Sun 01 Nov 2026 03:00:43 +0000
Manifest this update: Sun 01 Nov 2026 03:00:43 +0000
Manifest next update: Mon 02 Nov 2026 03:00:43 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: 7aWmr9+JBR9ASU32BL2U5eq2uEYhWhgYP2jrIhb0ios=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:5c:6b:a9:dd:48:a3:96:cf:3c:c2:3e:72:5a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Nov 1 03:00:43 2026 GMT
Not After : Nov 2 03:00:43 2026 GMT
Subject: CN=3807cddc5a40c73ad63d325eeb7c979ca83eeb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:1a:03:2d:fa:e8:f0:73:98:79:e4:28:0b:
d9:68:4d:25:db:5d:b5:70:87:52:50:a5:8f:fb:aa:
2b:47:e2:bd:d7:6c:a1:33:a6:cd:a9:52:e8:0f:c9:
e4:58:5f:1d:25:9e:1a:69:39:40:3f:50:d3:b8:22:
d2:e2:0a:78:2f:00:7f:d8:50:72:1a:85:5f:8b:16:
d9:bc:3a:fb:29:df:7d:3d:3c:0a:36:ff:11:d3:73:
3c:f9:61:db:2d:82:59:d6:22:c6:2a:98:d5:47:96:
e7:2f:5b:93:87:e4:00:27:53:8d:08:cb:97:2b:02:
b3:46:b9:32:8f:2a:c1:34:e3:9a:ee:8e:69:ce:a0:
ba:37:c9:78:d4:cf:1c:17:ae:32:64:23:6f:cd:c1:
ec:34:fe:37:a6:80:32:9b:dc:55:31:ed:b4:c6:a6:
8f:4b:bd:30:86:fe:63:03:fb:15:2b:35:47:20:c9:
12:7e:b6:ad:84:7a:7c:6c:56:e4:a6:32:0e:2c:e8:
4d:3a:0d:30:71:c8:a7:b1:5e:d7:4b:c6:19:c8:8d:
1e:31:33:77:5d:47:b6:70:b1:d8:de:64:14:1f:55:
9f:61:a3:c5:40:c7:e1:02:7b:d0:b2:ef:5c:0e:7b:
d4:65:98:19:29:ef:f6:60:fc:8c:14:4c:ff:69:32:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:07:CD:DC:5A:40:C7:3A:D6:3D:32:5E:EB:7C:97:9C:A8:3E:EB:2C
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:2f:34:b7:04:cb:3b:48:13:16:d1:b7:74:12:bb:57:fc:
32:b1:b6:2d:62:3c:60:21:55:c9:e6:80:c7:ce:b8:c1:e1:0c:
a1:62:65:46:11:1a:ec:c3:6d:4a:c5:17:f8:01:97:51:01:da:
94:80:90:ad:b2:a0:9f:14:31:96:2d:e5:44:7d:32:7a:ff:48:
fb:10:de:91:a6:26:4d:b9:62:f5:23:b1:c5:5a:29:e3:b1:c6:
a5:a2:63:ad:6e:ce:87:d6:6d:a3:dd:05:bb:9a:fa:a9:d4:09:
b1:20:90:69:39:fa:7f:2f:3a:2f:1f:2b:12:d3:ed:6a:25:70:
ce:cb:cc:3d:d0:20:22:52:36:2a:21:5f:59:cc:04:63:b1:8d:
49:dd:ee:ac:c5:a6:fc:bc:42:c7:68:4d:03:12:60:ee:b4:83:
23:d4:1c:3c:49:95:57:09:11:9b:0c:88:7f:88:f5:82:03:67:
a2:04:3d:8e:62:c5:e8:69:00:be:f3:28:db:92:dd:90:85:05:
68:73:94:e8:db:b7:45:9c:78:d9:7d:60:dd:85:fc:eb:8f:f7:
38:31:90:13:3e:68:1b:04:d7:2d:ea:52:17:49:03:d2:5f:4d:
0e:46:83:14:22:fb:c8:d8:e3:9b:89:10:72:c3:9c:2a:44:ed:
18:e0:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:32 2026 by rpki-client