Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: K84SL4AiNYeS0xrdD4p5F6xO2uDphQMM7NnrVY9rqMU=
Subject key identifier: 9F:8C:B8:70:59:90:0C:52:71:82:0E:FB:37:8A:CF:DB:56:92:CF:2A
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019DCF3E05CDABDDB1C3BEB961419DC85CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 190B
Signing time: Mon 27 Apr 2026 14:00:41 +0000
Manifest this update: Mon 27 Apr 2026 14:00:41 +0000
Manifest next update: Tue 28 Apr 2026 14:00:41 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: hEr8rPf8zZxuYVlJuRGBYQKrRItwn2gwNjAzD5BO14M=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:05:cd:ab:dd:b1:c3:be:b9:61:41:9d:c8:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Apr 27 14:00:41 2026 GMT
Not After : Apr 28 14:00:41 2026 GMT
Subject: CN=9f8cb87059900c5271820efb378acfdb5692cf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:79:90:15:c5:90:46:0e:65:14:e9:e3:2a:
eb:c7:9e:90:40:5e:c8:85:72:71:2f:87:c0:89:7f:
e3:aa:d9:2e:07:41:44:a0:81:e6:22:89:15:34:49:
36:58:93:c7:48:99:07:3e:d8:9d:ca:f8:e4:8f:d7:
be:20:08:b1:61:1b:a5:12:ed:38:f0:bb:ba:78:2d:
6b:39:24:51:b9:36:2f:d1:61:da:c4:ac:61:02:60:
20:2a:1a:f3:45:5f:85:ce:98:68:8f:fc:2d:21:60:
10:8e:ab:83:fe:74:86:e8:6a:ae:df:2e:3f:f7:ed:
5c:a9:8c:17:e4:7e:65:c5:7b:3a:4d:32:62:d3:32:
62:b3:9e:0a:45:7f:84:24:01:33:fa:94:9d:01:6a:
ac:91:93:ec:e9:8c:2b:e1:d3:48:f0:fa:da:d1:be:
a2:66:87:1f:58:e3:99:cc:f4:33:08:d0:ac:63:f0:
c1:d4:5f:44:f2:74:39:44:90:42:40:6a:ab:8a:af:
b9:0e:9c:72:5d:77:98:a1:90:c0:e1:a1:6d:2a:ff:
b5:6c:a3:15:db:a4:d7:2c:ac:cc:65:0c:97:50:1e:
94:d8:42:c5:9d:e7:a2:4b:6b:48:ff:53:cf:a4:06:
a5:e2:89:19:30:f1:4d:de:c4:f7:a5:39:05:95:51:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:B8:70:59:90:0C:52:71:82:0E:FB:37:8A:CF:DB:56:92:CF:2A
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:eb:c5:a0:67:ac:55:f0:2d:51:d4:88:1c:7a:d5:a9:4b:fc:
f8:99:c5:b1:49:4c:39:ea:d2:8f:00:3a:7b:0d:04:e0:36:e6:
44:f5:3f:f3:c1:e6:63:f1:4a:6f:9d:f7:05:60:25:63:c0:e8:
eb:c1:a3:56:11:b4:46:8f:46:8e:dd:1f:78:22:79:81:05:d9:
2a:dc:35:73:09:7e:61:4e:c9:af:e6:9c:ba:44:4f:ad:fe:f8:
d2:30:85:bb:ef:98:db:c6:f0:5f:d5:e3:56:29:41:aa:ce:9b:
f7:18:8d:57:f0:fe:a5:50:7d:11:bf:a5:ba:15:9e:8b:d1:2e:
ea:29:f1:75:72:e3:30:e7:e8:95:ef:01:79:1a:aa:00:f7:41:
bd:b0:a1:d5:7a:9d:24:d5:7e:dc:52:03:af:df:ae:a9:66:a3:
c5:3d:35:2b:3a:ba:ce:b5:91:53:b0:18:ba:1c:0f:77:e4:49:
b2:0c:90:86:ca:54:6c:b4:b3:b0:b7:4f:a8:35:ea:85:ed:bc:
9f:e1:3e:c1:18:d2:d9:bd:74:20:82:b6:a0:e0:bb:77:13:7a:
92:79:ff:d5:4b:64:6f:11:f3:83:e7:10:8c:1f:03:65:98:3d:
63:da:5c:be:6a:1a:6e:10:a8:b1:f4:aa:fa:2b:a7:26:4b:9d:
d9:2a:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:30 2026 by rpki-client