Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: +frjv4u/ypsZAM/reP76fG2gKde48rVkQxLRFkdgvV4=
Subject key identifier: EC:63:EA:DC:F8:C1:4A:01:C6:95:54:43:75:CF:50:85:D1:EB:81:11
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019FA29773D46EB1A4E34F97BC1BC35ECD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 19FD
Signing time: Mon 27 Jul 2026 08:01:02 +0000
Manifest this update: Mon 27 Jul 2026 08:01:02 +0000
Manifest next update: Tue 28 Jul 2026 08:01:02 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: UANSHAs+jmAiKv3fqDNVwfUNNIWHLSJ+nJzHpkKRa9c=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:73:d4:6e:b1:a4:e3:4f:97:bc:1b:c3:5e:cd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jul 27 08:01:02 2026 GMT
Not After : Jul 28 08:01:02 2026 GMT
Subject: CN=ec63eadcf8c14a01c695544375cf5085d1eb8111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:41:1e:63:fd:1f:56:fb:d2:f9:a5:de:2a:
19:af:6f:fe:69:5a:5d:bb:12:b4:65:2b:65:d8:74:
86:b7:89:db:1a:d4:d9:2f:3f:26:ce:95:35:f7:d8:
aa:65:3c:d1:07:6f:30:58:4e:38:c3:33:66:c6:99:
d8:78:e2:08:ae:68:b1:d7:e1:e4:d6:a2:51:29:73:
77:0e:64:86:76:aa:82:af:8b:dd:f7:4a:41:ad:af:
33:b2:1b:d9:7c:15:d2:39:56:95:d8:74:1e:0f:d2:
e3:30:10:b7:b8:6a:6d:cc:ae:42:56:7e:c7:09:f2:
49:69:85:fc:de:67:b6:1e:3f:20:da:33:fd:25:4c:
dc:18:5a:f9:89:68:51:c2:0a:26:3c:6e:2f:9b:d1:
b6:35:aa:fe:1d:fb:b9:e6:c9:9b:bd:17:89:0a:a3:
5d:ce:ab:e0:56:d6:27:b7:8b:3c:01:91:d1:4e:de:
31:f5:da:b6:da:48:70:68:6a:f0:0a:39:95:09:50:
c7:a2:4f:d5:0c:c8:12:1a:43:c3:f4:e4:1a:f1:4e:
a1:4f:7e:0d:c9:66:e4:a4:88:ea:d9:6d:ab:42:d9:
ef:3a:5d:94:90:b4:24:e8:a2:24:b8:8a:30:2f:80:
5e:f2:32:bf:f1:50:3b:2c:5a:4c:08:bb:32:33:63:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:EA:DC:F8:C1:4A:01:C6:95:54:43:75:CF:50:85:D1:EB:81:11
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d9:93:16:98:48:f8:f7:38:60:04:9c:9b:db:b0:fc:a2:f8:
d1:54:95:00:57:1e:1c:f2:19:49:53:9c:7e:c0:37:4b:82:a0:
1a:8a:6f:db:38:c1:21:8a:ea:c3:61:93:07:4b:3c:ea:ae:70:
e9:7c:7c:ee:bb:85:e8:27:de:c7:02:54:81:f7:59:10:7f:16:
75:20:2a:95:16:81:70:ff:c0:20:7d:f4:91:33:88:18:60:10:
33:a5:d9:50:87:97:49:d4:62:9a:20:ae:e7:a2:c6:82:f5:c8:
76:f8:81:e3:28:a7:8b:af:48:ab:50:b3:78:35:8a:44:2d:ea:
0e:0f:41:4c:2e:e2:24:7e:7f:46:a3:00:d5:1d:61:62:e0:fc:
d2:04:68:26:fd:06:cf:97:34:1c:6c:62:91:84:97:64:25:4c:
38:ea:60:90:d0:fd:b3:73:05:4d:0e:56:c4:76:7b:41:b2:ad:
b1:8d:51:f3:ce:d5:a3:d0:81:f9:02:6b:2d:57:a7:d8:7e:e9:
c8:eb:5d:86:16:a6:29:95:8a:91:c7:69:b7:a3:4a:89:40:36:
2b:45:71:53:97:dd:60:06:ad:05:96:0f:d0:c9:d0:8f:44:64:
1e:46:46:28:78:f4:22:55:88:c5:b2:50:27:c8:20:8e:61:d8:
03:3c:9d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:08 2026 by rpki-client