Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: wkpc3MDTdpw9VI8kpdK1U0gmYhy/Z1NcDUu+eqWqsHQ=
Subject key identifier: BA:A1:D9:F6:83:AD:40:EF:92:95:7D:2D:10:BB:E1:F4:A9:88:F2:A5
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019CE3A2CB68216E4B7ADC643E58FB33F519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1891
Signing time: Thu 12 Mar 2026 20:00:22 +0000
Manifest this update: Thu 12 Mar 2026 20:00:22 +0000
Manifest next update: Fri 13 Mar 2026 20:00:22 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: azKblcDpP46RiC0TUezdBmBwc4YBvL7mh0hTnTv8Fv4=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a2:cb:68:21:6e:4b:7a:dc:64:3e:58:fb:33:f5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Mar 12 20:00:22 2026 GMT
Not After : Mar 13 20:00:22 2026 GMT
Subject: CN=baa1d9f683ad40ef92957d2d10bbe1f4a988f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:57:14:48:0e:98:78:e0:a1:13:2d:65:98:
38:20:7c:18:14:b9:02:19:8f:83:eb:ec:e1:e2:eb:
2d:bf:ca:c8:fa:e7:71:62:44:ce:23:34:c0:4a:e9:
6c:8c:57:b0:d9:13:35:36:60:41:e2:c7:5b:a9:ac:
86:91:2f:a0:8b:0b:e7:df:0b:a5:93:b0:51:8d:5a:
5e:10:93:47:fd:12:83:e6:ce:d4:e7:41:7e:2f:a7:
fe:7e:8f:c8:e9:fc:01:0c:9d:98:58:82:7f:b1:92:
ee:c9:d9:7b:90:8e:9d:51:26:11:80:a6:75:a4:d0:
b5:08:e0:16:08:a6:9f:8f:97:00:fb:a4:96:45:5c:
3b:45:bf:7a:4d:60:e0:40:72:a5:b8:7a:24:31:ce:
a0:22:91:53:2b:22:06:e6:18:03:31:60:6d:eb:ba:
e0:dc:c7:72:6a:07:1b:a3:5b:38:d0:75:87:9b:ba:
c4:6f:5a:0b:da:60:58:6b:ac:db:9a:4a:68:83:a5:
33:65:ce:9e:19:39:fc:24:42:86:77:b3:cd:cd:da:
22:da:51:fe:f5:6a:67:4a:f2:93:41:23:c9:84:9b:
a1:18:d7:5d:12:08:43:b9:45:71:85:a3:80:b9:a0:
cf:c0:bf:cb:0e:a1:b3:0e:b8:da:cc:54:e7:f1:7a:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:D9:F6:83:AD:40:EF:92:95:7D:2D:10:BB:E1:F4:A9:88:F2:A5
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e0:d5:c1:75:7c:da:f9:55:f5:0e:8c:15:d8:11:a0:f8:41:
40:e6:ce:8c:83:e6:f3:a8:d6:3f:e3:8a:36:77:9c:6b:1f:64:
8c:31:42:b6:6b:5a:dc:cc:3a:31:c2:4f:6e:7c:98:24:2f:e7:
6f:74:da:f7:01:f4:64:e2:58:cc:4b:27:ae:35:49:03:9d:7b:
cf:98:df:68:62:5a:64:66:7a:95:48:77:81:7b:f1:0d:9f:eb:
55:52:6a:ec:b8:f1:d2:94:35:7b:a2:49:08:14:b8:cd:55:ed:
57:ca:4a:3a:de:fb:29:c0:b6:52:d3:1c:67:d1:64:31:75:4a:
1f:f8:e8:7d:b3:89:7b:9d:12:18:0e:c2:b8:e0:73:7b:a3:35:
3a:79:72:55:73:f3:5d:a7:7f:9e:24:b8:3d:cb:dd:da:2e:d1:
97:07:9d:4b:3f:10:95:70:73:0c:7c:98:9a:13:63:e2:f1:cc:
eb:c5:c7:2f:ae:32:8b:c4:5c:2d:f5:44:4c:d3:c4:85:e3:ce:
c1:d3:d0:db:8b:21:69:eb:81:33:45:52:a3:9a:9f:e7:f5:24:
15:72:99:2e:95:63:4f:34:1e:9a:2d:62:b8:2f:18:bf:9c:a8:
b5:ca:fb:5d:f2:6c:fa:c7:d5:c0:07:d3:88:c5:12:d0:cd:71:
4d:e4:cf:98
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZzjostoIW5LetxkPlj7M/UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjYwMzEyMjAwMDIyWhcNMjYwMzEzMjAwMDIyWjAzMTEwLwYDVQQD
EyhiYWExZDlmNjgzYWQ0MGVmOTI5NTdkMmQxMGJiZTFmNGE5ODhmMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ntXFEgOmHjgoRMtZZg4IHwYFLkC
GY+D6+zh4ustv8rI+udxYkTOIzTASulsjFew2RM1NmBB4sdbqayGkS+giwvn3wul
k7BRjVpeEJNH/RKD5s7U50F+L6f+fo/I6fwBDJ2YWIJ/sZLuydl7kI6dUSYRgKZ1
pNC1COAWCKafj5cA+6SWRVw7Rb96TWDgQHKluHokMc6gIpFTKyIG5hgDMWBt67rg
3Mdyagcbo1s40HWHm7rEb1oL2mBYa6zbmkpog6UzZc6eGTn8JEKGd7PNzdoi2lH+
9WpnSvKTQSPJhJuhGNddEghDuUVxhaOAuaDPwL/LDqGzDrjazFTn8XpaFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLqh2faDrUDvkpV9LRC74fSpiPKlMB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3
ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeDV
wXV82vlV9Q6MFdgRoPhBQObOjIPm86jWP+OKNnecax9kjDFCtmta3Mw6McJPbnyY
JC/nb3Ta9wH0ZOJYzEsnrjVJA517z5jfaGJaZGZ6lUh3gXvxDZ/rVVJq7Ljx0pQ1
e6JJCBS4zVXtV8pKOt77KcC2UtMcZ9FkMXVKH/jofbOJe50SGA7CuOBze6M1Only
VXPzXad/niS4Pcvd2i7RlwedSz8QlXBzDHyYmhNj4vHM68XHL64yi8RcLfVETNPE
hePOwdPQ24shaeuBM0VSo5qf5/UkFXKZLpVjTzQemi1iuC8Yv5yotcr7XfJs+sfV
wAfTiMUS0M1xTeTPmA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:20:57 2026 by rpki-client