Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: o2ng0acJ2bPerfqb9SoBo9SV+9lBfj/xr/qOe8pMBDM=
Subject key identifier: 88:0F:3B:1E:64:1D:84:20:E7:1A:C8:AA:73:3E:6C:05:BD:EE:A2:6B
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019D37F71C00F8478DE4F53E9BA020D50ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0DB0
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: zs2rPCh06kJaCarz2+ocsTQQGFfw7np9w13NNS5ultw=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1c:00:f8:47:8d:e4:f5:3e:9b:a0:20:d5:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=880f3b1e641d8420e71ac8aa733e6c05bdeea26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:ee:b4:50:b8:8d:c9:83:4c:ef:14:67:d0:
49:70:b7:34:4e:2b:5f:a3:7e:e3:40:81:24:19:b1:
ec:ab:c7:c1:43:e1:e0:02:50:15:a8:e0:9a:cf:c5:
fa:bf:99:d0:0d:a0:34:70:59:ec:f4:93:95:68:e7:
25:11:b5:f1:a8:e3:02:b2:8c:4e:b4:db:8e:13:58:
89:b9:65:d9:7a:80:c1:6c:d4:01:a7:2c:be:9c:a5:
65:2f:19:90:a7:37:b0:2c:ee:63:84:e5:6d:00:2b:
97:28:81:ab:c5:5f:e6:33:c1:38:db:c6:3b:84:45:
59:89:3f:6c:15:85:6a:f7:cd:ee:d9:18:a5:0d:63:
44:28:62:3e:bc:21:05:2c:83:c5:be:3d:ce:34:02:
4d:3e:68:cc:ac:d0:7c:46:08:d3:bb:66:37:07:3d:
9c:81:c4:2d:f8:8e:bf:72:03:22:04:97:56:9f:32:
2f:c2:e5:0a:09:e1:86:72:36:a9:7c:b6:e8:13:43:
91:43:f6:3f:30:89:e3:2b:a9:54:33:62:19:1f:10:
f8:c1:15:4f:0c:25:8c:81:a5:80:b5:ee:e0:3c:55:
79:d4:34:ed:1a:bf:8a:7a:17:8e:b1:67:84:b5:52:
0f:5e:1b:eb:2f:55:9e:04:0c:6d:50:5a:d1:e7:5c:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:3B:1E:64:1D:84:20:E7:1A:C8:AA:73:3E:6C:05:BD:EE:A2:6B
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9b:0c:be:cb:35:6c:95:bc:ff:e4:46:42:03:18:17:ef:3b:
55:c8:80:e0:18:a6:4c:44:05:e3:40:28:d2:88:97:e2:bb:a9:
68:3b:f1:35:00:c0:03:c2:e9:a9:a6:ba:d5:1c:de:4d:db:14:
f9:22:0e:e5:0f:dd:2e:cd:93:e9:14:43:8c:54:4e:b0:7c:8b:
ce:25:a6:40:20:1e:a6:45:a0:73:c4:5a:14:a3:b5:69:86:91:
0a:e6:a7:4e:f9:c9:02:4d:88:f5:ed:d9:08:dc:f5:71:5f:b1:
38:30:0c:e7:a6:b8:15:00:36:e9:6a:73:25:94:ba:48:04:ad:
5c:de:b2:ed:70:10:4b:dd:f1:70:c8:ca:c2:e5:81:8f:96:37:
df:65:79:d8:87:45:fa:f5:80:ec:5a:97:d3:2d:6e:b4:05:ed:
8e:76:72:c1:16:a1:87:fe:ea:43:16:b3:6b:b8:ca:3f:e2:00:
f3:78:bc:4a:ef:a9:a8:3e:ae:6f:2d:b4:5d:54:24:7a:e2:9d:
d4:49:61:b3:6b:c0:f4:42:03:4c:e0:d8:4e:3c:a0:fc:9d:2c:
23:a6:c0:f6:2d:1a:f8:00:0f:c2:ee:3c:52:88:2f:06:85:66:
56:1e:c1:af:33:50:fb:5f:d2:9d:b2:a0:85:3d:7b:ad:41:e1:
32:e2:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:13 2026 by rpki-client