Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: BiQOUbF1H53lpAhH7FXJlbD0jjoa14AVVkPAy1yUd5Q=
Subject key identifier: BD:7E:D3:75:13:1B:95:3F:B0:65:71:45:AC:3C:FF:A2:46:72:FE:01
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019CC7BEE64C5596E55C1D9927671E34FBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 08BA
Signing time: Sat 07 Mar 2026 10:01:42 +0000
Manifest this update: Sat 07 Mar 2026 10:01:42 +0000
Manifest next update: Sun 08 Mar 2026 10:01:42 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: uSPkwsJ9VFm+gmkVuO1puSb8CYV5DZ8q6ENCo5llKhs=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:be:e6:4c:55:96:e5:5c:1d:99:27:67:1e:34:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Mar 7 10:01:42 2026 GMT
Not After : Mar 8 10:01:42 2026 GMT
Subject: CN=bd7ed375131b953fb0657145ac3cffa24672fe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:36:90:26:0d:99:e7:8e:d9:a4:50:a6:70:
fc:17:5a:f0:04:d4:38:5a:b1:6f:d4:b0:64:46:08:
a3:f1:e4:6c:52:7d:19:fa:ca:4c:be:ca:e7:ba:d9:
63:de:17:ed:dc:13:a0:90:03:a0:19:2f:92:10:1d:
1f:00:ff:af:ce:55:8c:ac:10:e9:04:de:f3:1c:27:
13:54:83:d5:3e:ad:f8:cb:03:89:32:ee:67:f8:bc:
16:d2:e5:dd:fc:30:29:20:41:93:2f:74:81:e3:ed:
4a:82:50:db:17:e2:5c:bc:fc:4a:3a:4d:fa:71:c8:
1d:23:f9:f8:5a:e1:fb:4a:40:ff:74:68:0d:03:18:
80:88:e5:8c:45:ac:26:5e:ee:97:c7:90:f2:b4:a0:
87:cd:7f:7a:a9:f7:6d:1b:23:9a:b5:88:90:e2:67:
3e:0b:d5:7c:c2:39:2a:e6:ed:2c:8f:0a:81:3c:17:
66:99:60:44:a7:e2:ec:9f:fe:4a:e6:0b:88:ed:12:
d2:7e:f2:95:22:55:3d:65:56:91:b9:05:82:ad:c0:
b5:a0:ea:47:ef:d8:d6:f9:5d:b0:e2:66:71:fa:a0:
96:3d:d1:11:35:61:f6:3f:ec:b6:1a:ce:28:1d:ab:
37:69:36:3b:60:65:67:72:46:a1:f8:e3:e7:d7:d3:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:D3:75:13:1B:95:3F:B0:65:71:45:AC:3C:FF:A2:46:72:FE:01
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:20:02:bc:c7:41:1d:33:2e:a0:a5:1d:4a:cb:c8:a3:be:
c9:b8:81:b8:a6:b3:8f:86:fc:a2:97:eb:a9:22:c5:42:56:76:
78:4a:cb:fd:15:a7:7c:0a:71:7b:fa:9c:fc:8d:28:8c:a9:f4:
dc:2a:c8:3f:f3:f5:60:16:dd:3b:41:a9:95:97:a5:af:25:94:
9d:65:a3:de:35:86:9b:3f:49:0a:86:94:91:e7:44:48:3e:4b:
fe:73:77:6c:4c:e3:5e:66:86:ca:22:f0:33:74:85:54:f3:cd:
7f:69:1b:68:52:72:31:9a:0a:17:72:0c:43:f8:7d:ec:d6:5e:
28:13:99:62:4c:f2:3e:32:8a:51:f5:53:62:94:3a:87:3c:d7:
12:16:0a:ef:9a:ea:2a:75:0e:93:f4:61:4b:c8:de:43:1a:f5:
1d:ad:c8:3c:b6:8a:3d:5f:d1:a2:75:2b:c8:b9:8c:a8:2f:e8:
fc:91:25:0a:e1:ab:04:e5:34:3d:56:6b:2c:e2:55:31:66:99:
f3:9b:c4:8f:7d:7e:fd:18:dc:00:34:d2:ca:6d:93:fa:d4:b7:
bf:e6:2e:92:b5:98:ee:d6:0c:72:6b:80:fb:75:64:67:d7:b7:
4e:9b:37:44:0c:08:dc:20:87:b0:e1:a1:58:8b:e0:ca:f9:a3:
6d:b0:8a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHvuZMVZblXB2ZJ2ceNPvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjYwMzA3MTAwMTQyWhcNMjYwMzA4MTAwMTQyWjAzMTEwLwYDVQQD
EyhiZDdlZDM3NTEzMWI5NTNmYjA2NTcxNDVhYzNjZmZhMjQ2NzJmZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaU2kCYNmeeO2aRQpnD8F1rwBNQ4
WrFv1LBkRgij8eRsUn0Z+spMvsrnutlj3hft3BOgkAOgGS+SEB0fAP+vzlWMrBDp
BN7zHCcTVIPVPq34ywOJMu5n+LwW0uXd/DApIEGTL3SB4+1KglDbF+JcvPxKOk36
ccgdI/n4WuH7SkD/dGgNAxiAiOWMRawmXu6Xx5DytKCHzX96qfdtGyOatYiQ4mc+
C9V8wjkq5u0sjwqBPBdmmWBEp+Lsn/5K5guI7RLSfvKVIlU9ZVaRuQWCrcC1oOpH
79jW+V2w4mZx+qCWPdERNWH2P+y2Gs4oHas3aTY7YGVnckah+OPn19O5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1+03UTG5U/sGVxRaw8/6JGcv4BMB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5kgArzH
QR0zLqClHUrLyKO+ybiBuKazj4b8opfrqSLFQlZ2eErL/RWnfApxe/qc/I0ojKn0
3CrIP/P1YBbdO0GplZelryWUnWWj3jWGmz9JCoaUkedESD5L/nN3bEzjXmaGyiLw
M3SFVPPNf2kbaFJyMZoKF3IMQ/h97NZeKBOZYkzyPjKKUfVTYpQ6hzzXEhYK75rq
KnUOk/RhS8jeQxr1Ha3IPLaKPV/RonUryLmMqC/o/JElCuGrBOU0PVZrLOJVMWaZ
85vEj31+/RjcADTSym2T+tS3v+YukrWY7tYMcmuA+3VkZ9e3Tps3RAwI3CCHsOGh
WIvgyvmjbbCKQA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:04:27 2026 by rpki-client