Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: Z7ooVNEM06K1WT78w/dAEYeNWOSApN9KdBXP1YkWADU=
Subject key identifier: E7:13:C9:B8:D8:C3:2D:1F:E8:6F:13:AA:7C:66:FB:93:1D:36:8A:CF
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 01A196FC1C45509DEC4A91974CE2E380812D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1B01
Signing time: Sun 01 Nov 2026 12:01:07 +0000
Manifest this update: Sun 01 Nov 2026 12:01:07 +0000
Manifest next update: Mon 02 Nov 2026 12:01:07 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: f4+4+u7e8Eera1XZwkKTAEYrVG4bjn4nwqZOdrEkhg8=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
4: I72kmK2oJ75mIwxt8hjG7GUupzk.roa (hash: K8Phul8KmeYidC/APf8t5kfkNOalCulE4TpB9idF+tc=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fc:1c:45:50:9d:ec:4a:91:97:4c:e2:e3:80:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Nov 1 12:01:07 2026 GMT
Not After : Nov 2 12:01:07 2026 GMT
Subject: CN=e713c9b8d8c32d1fe86f13aa7c66fb931d368acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:d7:eb:23:a4:68:c9:8d:04:d9:44:f8:7a:
ec:bd:64:f0:fc:3f:90:a9:22:f8:a0:97:a5:95:32:
04:b2:5f:62:40:b6:a3:09:e2:9d:67:45:ce:2f:7a:
26:2b:4d:3f:6e:ca:a7:fc:65:78:1f:96:ee:44:ac:
bd:61:cf:7f:4f:61:33:7e:da:da:6a:01:f6:bd:e9:
dd:3d:f5:a0:26:2e:9a:43:59:bf:72:b1:75:e5:e4:
c2:a0:64:b1:8c:26:9a:87:63:08:15:08:ed:c2:50:
1a:74:72:d9:8a:c0:0c:e0:ee:18:d7:60:cb:d7:7a:
05:7d:15:2a:af:15:45:71:96:3c:23:c6:ab:73:e7:
2c:0e:5b:56:b0:8d:cd:96:2d:a3:bb:d6:5c:9a:a5:
29:a1:ec:ef:25:a8:dd:7b:9d:c1:08:26:8c:b6:93:
a8:66:b6:c6:2f:d5:2a:ae:77:c7:1a:46:0a:8e:c1:
36:9c:72:5e:d8:18:ac:29:c7:3a:43:d2:71:73:66:
ca:0f:45:5e:d1:4b:5a:45:ae:b3:e9:e8:1e:74:22:
83:08:48:2d:e5:67:ab:71:53:9f:7c:a8:b2:b1:1f:
31:7d:ef:24:1a:5a:56:82:98:ba:52:f2:57:31:0b:
41:7a:63:fe:0a:28:c6:83:51:25:ca:2a:67:79:94:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:C9:B8:D8:C3:2D:1F:E8:6F:13:AA:7C:66:FB:93:1D:36:8A:CF
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a2:09:c9:96:57:1f:de:95:6c:35:25:05:12:14:f1:45:16:
02:4c:6d:ed:0f:a9:ed:8e:8d:73:07:c3:63:6b:16:53:f8:50:
64:6b:7c:8a:f7:7b:74:c5:bd:74:32:89:ce:2c:e5:be:bd:dd:
5d:95:f7:fb:37:4b:12:70:21:af:ec:16:c7:64:8c:7d:b9:71:
81:a8:3d:69:ed:ca:cc:6d:fb:d8:97:b6:dd:72:c4:2d:cd:99:
de:8f:1e:f8:ea:d6:95:35:32:35:cf:ca:db:ed:57:20:bd:30:
5c:9f:43:31:82:c9:9d:25:fb:10:26:08:da:e3:13:3b:49:21:
15:7d:f7:17:42:03:2d:29:d1:71:11:1d:ce:d0:5a:7e:63:33:
8e:ca:45:ff:2c:dd:43:50:26:9d:c3:b4:d0:ff:96:9f:01:4a:
d6:65:f2:a7:6e:6a:1f:89:27:dc:d9:c0:d2:88:d7:d9:cd:3d:
3b:f7:f5:92:dd:10:b1:ad:bb:69:ce:ca:b5:0f:e6:59:46:15:
a2:a9:5d:76:fa:36:a0:79:e3:d2:6b:51:c1:6c:95:9b:62:45:
8e:8a:f7:e2:2b:92:cc:d3:14:ee:8a:03:fb:9c:15:52:37:3e:
f6:b4:eb:9a:e0:9b:44:c8:8e:02:5d:5f:a6:99:c6:2f:4f:0d:
1f:28:f8:15
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaGW/BxFUJ3sSpGXTOLjgIEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjYxMTAxMTIwMTA3WhcNMjYxMTAyMTIwMTA3WjAzMTEwLwYDVQQD
EyhlNzEzYzliOGQ4YzMyZDFmZTg2ZjEzYWE3YzY2ZmI5MzFkMzY4YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3jX6yOkaMmNBNlE+HrsvWTw/D+Q
qSL4oJellTIEsl9iQLajCeKdZ0XOL3omK00/bsqn/GV4H5buRKy9Yc9/T2Ezftra
agH2vendPfWgJi6aQ1m/crF15eTCoGSxjCaah2MIFQjtwlAadHLZisAM4O4Y12DL
13oFfRUqrxVFcZY8I8arc+csDltWsI3Nli2ju9ZcmqUpoezvJajde53BCCaMtpOo
ZrbGL9UqrnfHGkYKjsE2nHJe2BisKcc6Q9Jxc2bKD0Ve0UtaRa6z6egedCKDCEgt
5WercVOffKiysR8xfe8kGlpWgpi6UvJXMQtBemP+CijGg1ElyipneZT4wQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOcTybjYwy0f6G8Tqnxm+5MdNorPMB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3
ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKIJ
yZZXH96VbDUlBRIU8UUWAkxt7Q+p7Y6NcwfDY2sWU/hQZGt8ivd7dMW9dDKJzizl
vr3dXZX3+zdLEnAhr+wWx2SMfblxgag9ae3KzG372Je23XLELc2Z3o8e+OrWlTUy
Nc/K2+1XIL0wXJ9DMYLJnSX7ECYI2uMTO0khFX33F0IDLSnRcREdztBafmMzjspF
/yzdQ1AmncO00P+WnwFK1mXyp25qH4kn3NnA0ojX2c09O/f1kt0Qsa27ac7KtQ/m
WUYVoqlddvo2oHnj0mtRwWyVm2JFjor34iuSzNMU7ooD+5wVUjc+9rTrmuCbRMiO
Al1fppnGL08NHyj4FQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:53:58 2026 by rpki-client