Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
File: 1-YUzm9bktvZypnyvdxbuQMFLlWk.mft (raw, json)
Hash identifier: BIoVUBkiugz7gUWF3epXTZVQjuHpAh01t+KQcQlgI0M=
Subject key identifier: BD:31:9E:C3:7B:20:11:A0:89:C6:97:87:B0:6B:44:06:CF:CF:A4:E3
Authority key identifier: F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
Certificate issuer: /CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Certificate serial: 01A03F3B95A7F600EA5D57729F9A8532CA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
Manifest number: 01DC
Signing time: Wed 26 Aug 2026 18:01:04 +0000
Manifest this update: Wed 26 Aug 2026 18:01:04 +0000
Manifest next update: Thu 27 Aug 2026 18:01:04 +0000
Files and hashes: 1: 1-YUzm9bktvZypnyvdxbuQMFLlWk.crl (hash: cY4o9OxpY/ElGFe8iCjtavMFASSmFLSR6ka4MHXahK8=)
2: vTv6Y9pYzSLa4y30BsFSU3zUkkI.roa (hash: W0KsvSQFE2TKZ3eONDLazVIwQ+vxG34zEx4WZk3Nw8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:95:a7:f6:00:ea:5d:57:72:9f:9a:85:32:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f985339bd6e4b6f672a67caf7716ee40c14b9569
Validity
Not Before: Aug 26 18:01:04 2026 GMT
Not After : Aug 27 18:01:04 2026 GMT
Subject: CN=bd319ec37b2011a089c69787b06b4406cfcfa4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:d6:95:e8:07:bc:6b:68:b6:9d:1c:bc:f3:
5b:16:18:77:aa:31:a8:91:60:09:cd:8a:64:9c:8f:
73:43:c5:fe:5d:56:88:06:56:01:b6:09:a5:83:9c:
a5:fa:20:80:0c:82:3e:b6:8c:00:89:bb:e1:34:b8:
ba:3c:6e:f8:07:e7:0b:97:9e:26:a7:80:e0:7b:17:
3a:d8:7d:a5:37:76:d3:b0:63:67:ed:a9:9b:6a:db:
13:72:31:1f:bb:77:3f:c4:6b:2c:17:9f:72:1f:f1:
77:49:be:4d:de:ad:bb:69:eb:9a:26:36:6d:b6:64:
e5:ab:7c:6f:10:1b:28:25:ed:bd:d1:6b:a9:41:ad:
f0:42:ad:e4:63:d8:b9:77:d7:f9:04:30:bf:e3:56:
f0:a9:fe:05:01:18:96:02:86:91:d2:5c:95:32:69:
8e:e3:43:67:5c:25:3c:63:9d:86:38:a2:9c:ae:c3:
be:72:c7:26:23:de:55:2c:7a:c5:e6:11:4b:94:21:
c1:d6:90:7b:c8:6c:07:f1:24:71:e9:4b:d8:e0:4e:
4c:f9:ff:f3:29:7e:c1:fc:60:4d:64:6c:9c:8d:07:
4c:5a:fc:3a:25:6e:68:50:8a:5a:f9:05:23:b9:14:
7e:92:3e:4e:d3:c0:f8:57:ca:5a:65:33:e5:8d:73:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:9E:C3:7B:20:11:A0:89:C6:97:87:B0:6B:44:06:CF:CF:A4:E3
X509v3 Authority Key Identifier:
keyid:F9:85:33:9B:D6:E4:B6:F6:72:A6:7C:AF:77:16:EE:40:C1:4B:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YUzm9bktvZypnyvdxbuQMFLlWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/421716-50a8-4b8c-aeb5-e9e415f4c5ff/1/1-YUzm9bktvZypnyvdxbuQMFLlWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:47:6c:9e:f2:2f:4a:25:df:67:dd:dd:2d:25:65:d2:ea:39:
4e:06:20:17:35:52:10:54:f0:23:53:b5:f4:2d:17:00:5e:f3:
ff:fc:0d:57:0a:67:53:bc:2f:8a:19:2f:e9:85:0c:cc:fb:14:
29:30:08:75:b2:ca:75:ae:22:87:0a:9c:57:71:fe:ee:e9:cf:
9b:39:af:1b:8c:a5:09:97:2b:48:1d:4d:21:35:ff:f5:51:de:
89:40:44:f9:a6:12:f6:15:85:fe:2b:3d:28:52:7a:ae:34:1c:
73:e6:48:63:5a:97:d6:b4:99:d7:00:4b:f8:d0:24:b1:8b:f1:
7b:fb:b6:5b:00:55:b3:0a:04:e3:89:76:88:f9:6f:24:f8:c9:
0e:6e:1a:f2:a6:0d:49:2c:ef:50:e4:35:34:24:6a:94:4f:61:
a3:29:9f:fc:22:34:a4:37:d5:21:8a:8f:22:c0:cc:c2:49:d8:
a8:bb:55:c7:a5:12:db:4c:fd:7e:87:e8:2d:18:25:82:5e:5e:
d5:d2:78:fb:b2:64:68:e8:b2:d8:5f:8c:de:db:d2:24:a9:4a:
80:5c:bd:2f:65:dd:ed:3d:03:23:24:ab:9f:a4:7f:c9:a4:d6:
d4:69:c1:9f:a1:70:7e:ab:ba:e4:44:24:73:b9:0c:a6:2c:df:
44:9a:03:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaA/O5Wn9gDqXVdyn5qFMsoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODUzMzliZDZlNGI2ZjY3MmE2N2NhZjc3MTZlZTQwYzE0
Yjk1NjkwHhcNMjYwODI2MTgwMTA0WhcNMjYwODI3MTgwMTA0WjAzMTEwLwYDVQQD
EyhiZDMxOWVjMzdiMjAxMWEwODljNjk3ODdiMDZiNDQwNmNmY2ZhNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MDWlegHvGtotp0cvPNbFhh3qjGo
kWAJzYpknI9zQ8X+XVaIBlYBtgmlg5yl+iCADII+towAibvhNLi6PG74B+cLl54m
p4Dgexc62H2lN3bTsGNn7ambatsTcjEfu3c/xGssF59yH/F3Sb5N3q27aeuaJjZt
tmTlq3xvEBsoJe290WupQa3wQq3kY9i5d9f5BDC/41bwqf4FARiWAoaR0lyVMmmO
40NnXCU8Y52GOKKcrsO+cscmI95VLHrF5hFLlCHB1pB7yGwH8SRx6UvY4E5M+f/z
KX7B/GBNZGycjQdMWvw6JW5oUIpa+QUjuRR+kj5O08D4V8paZTPljXMPcwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL0xnsN7IBGgicaXh7BrRAbPz6TjMB8GA1UdIwQY
MBaAFPmFM5vW5Lb2cqZ8r3cW7kDBS5VpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVXptOWJrdHZaeXBueXZkeGJ1UU1GTGxXay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNDIxNzE2LTUwYTgtNGI4Yy1hZWI1
LWU5ZTQxNWY0YzVmZi8xLzEtWVV6bTlia3R2Wnlwbnl2ZHhidVFNRkxsV2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJiLzQyMTcxNi01MGE4LTRiOGMtYWViNS1lOWU0MTVmNGM1
ZmYvMS8xLVlVem05Ymt0dlp5cG55dmR4YnVRTUZMbFdrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kds
nvIvSiXfZ93dLSVl0uo5TgYgFzVSEFTwI1O19C0XAF7z//wNVwpnU7wvihkv6YUM
zPsUKTAIdbLKda4ihwqcV3H+7unPmzmvG4ylCZcrSB1NITX/9VHeiUBE+aYS9hWF
/is9KFJ6rjQcc+ZIY1qX1rSZ1wBL+NAksYvxe/u2WwBVswoE44l2iPlvJPjJDm4a
8qYNSSzvUOQ1NCRqlE9hoymf/CI0pDfVIYqPIsDMwknYqLtVx6US20z9fofoLRgl
gl5e1dJ4+7JkaOiy2F+M3tvSJKlKgFy9L2Xd7T0DIySrn6R/yaTW1GnBn6Fwfqu6
5EQkc7kMpizfRJoD3w==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:49 2026 by rpki-client