Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: jHbQUnr0jUar+XAJ2v2X8vsFTbXHjh2zA6X7lMDZBdc=
Subject key identifier: 8F:B8:52:60:21:C0:65:95:48:47:A4:44:59:6B:63:C9:0B:ED:23:D7
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A08A8C2B726A90A8532A22A033F7DEC8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1A76
Signing time: Thu 10 Sep 2026 09:00:36 +0000
Manifest this update: Thu 10 Sep 2026 09:00:36 +0000
Manifest next update: Fri 11 Sep 2026 09:00:36 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: LTPK2/TVkeDfHEf5pJtkK9nvQ6+fPc+VASZhjUGCsMw=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2b:72:6a:90:a8:53:2a:22:a0:33:f7:de:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Sep 10 09:00:36 2026 GMT
Not After : Sep 11 09:00:36 2026 GMT
Subject: CN=8fb8526021c065954847a444596b63c90bed23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:ff:fa:44:79:d8:ee:b9:21:82:ec:29:f6:
38:7a:63:16:86:ba:56:ea:88:06:d3:ce:3c:f9:8c:
9b:23:f6:28:75:de:c9:1f:6b:ca:b4:95:12:52:f4:
e0:d2:62:7e:70:2f:3f:ee:9f:a6:fc:02:3c:ae:ce:
75:ec:15:e3:ce:b8:fa:e7:66:fb:ba:4c:3e:49:78:
9b:ff:2d:5f:f9:ae:cd:42:54:d5:f6:1a:a1:b7:1e:
4d:e7:d5:94:26:fa:0f:bf:f7:7a:d9:07:1e:66:80:
bb:a6:bd:84:a8:a2:e2:25:3a:a6:a0:41:bd:e1:e0:
27:fa:ea:65:34:96:f6:2a:d5:59:75:4b:57:05:03:
ad:d9:60:91:76:2e:7b:3a:72:ba:d8:b1:c0:d8:10:
92:14:bf:2b:90:99:df:0e:d1:c7:7b:24:64:95:f5:
9e:1f:6b:f0:9e:d2:e2:c0:ae:5d:dc:3e:df:ee:1b:
3f:75:2c:61:e3:5a:1f:d0:97:7d:ef:ad:9c:4c:5f:
25:6a:6a:86:97:fb:8d:c5:ef:7f:1e:0f:d7:93:b1:
ab:bb:a5:ce:d5:96:23:22:43:96:b6:9b:cd:6e:ab:
f0:d9:28:b7:bd:f7:c2:1c:3b:d3:6a:95:60:42:e2:
9b:2e:2e:f2:8c:c1:af:30:7b:4a:d1:e5:7a:99:d1:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:52:60:21:C0:65:95:48:47:A4:44:59:6B:63:C9:0B:ED:23:D7
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7b:01:9d:4b:06:6c:2e:87:6f:48:cf:09:f8:47:17:1f:0c:
65:54:d4:fd:ba:7d:12:26:bd:9c:4d:14:8f:5d:ef:f0:07:e9:
1c:35:6d:3b:d9:a0:ff:85:d9:37:84:46:88:4d:67:86:5d:08:
5a:e0:c4:a5:6e:0c:94:11:22:26:5a:f7:57:86:2b:8e:2f:55:
45:68:bc:59:1a:64:21:83:0b:55:64:c1:e5:83:3f:dc:22:5c:
34:bd:26:38:aa:eb:d6:b6:e5:99:c7:4e:ae:11:3d:2d:b2:be:
6c:02:8d:e2:e0:eb:00:ba:64:3b:e0:ca:f3:67:fa:51:cc:93:
c7:44:f0:b6:56:7e:78:19:2e:fc:da:e1:46:cf:c2:8d:f0:b4:
65:28:68:61:11:9a:eb:2a:0b:d2:66:20:f2:1d:8b:b6:75:b6:
10:82:d4:72:ea:01:9d:d8:24:60:01:b2:9d:49:41:0e:da:e0:
b1:cd:af:09:aa:c3:ee:9c:d4:a9:65:f6:dd:7f:3e:78:a0:dc:
e7:93:07:db:e0:a2:a1:8b:55:46:ca:65:59:65:21:bd:38:35:
fa:d5:de:87:07:70:8b:de:1c:0e:0d:2a:e2:60:b5:af:b7:90:
90:85:52:c3:1d:c8:11:2e:7d:2d:5f:b5:00:e3:e6:12:d6:86:
da:02:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:58 2026 by rpki-client