Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier: cHK4JOtm8RZhjBftbPCE6yVMYoA3ShpcnE7H3q8k+xg=
Subject key identifier: 01:CB:A8:3C:11:E1:0D:82:33:52:65:1D:72:62:78:09:9C:E3:6F:96
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 01A086423C4E5818784F30E4B8F83911CD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number: 0BCF
Signing time: Wed 09 Sep 2026 13:01:22 +0000
Manifest this update: Wed 09 Sep 2026 13:01:22 +0000
Manifest next update: Thu 10 Sep 2026 13:01:22 +0000
Files and hashes: 1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: 2Ga63MIUZABvZWYUdO+HBN2RITnLfGl+ptsVwa41eyo=)
3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:42:3c:4e:58:18:78:4f:30:e4:b8:f8:39:11:cd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Sep 9 13:01:22 2026 GMT
Not After : Sep 10 13:01:22 2026 GMT
Subject: CN=01cba83c11e10d823352651d726278099ce36f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:12:f1:24:26:15:f3:13:06:17:16:d5:5b:
39:a7:a7:e6:65:b6:52:4c:c7:ea:55:4e:b5:b2:cb:
7d:27:bc:48:e3:59:ad:8c:c6:2c:bd:5b:8d:bb:46:
15:94:b2:5b:d2:c1:4c:b6:00:89:6f:79:b6:af:0c:
5f:90:d1:bb:7a:55:26:9c:b1:b3:3b:4a:1f:53:b0:
ed:10:d0:2a:76:19:be:d0:b9:51:4b:24:54:db:e5:
34:49:ad:2a:a6:d7:6e:52:28:f8:3e:fd:4b:24:b7:
7e:9a:90:01:90:78:aa:9a:1e:17:db:1c:fa:21:1f:
0a:5c:33:a9:56:03:d5:2f:4e:f8:b9:b8:fe:57:40:
46:08:19:75:55:d5:21:90:8c:be:8b:32:20:9e:12:
73:07:58:95:e5:29:8d:55:88:ff:06:87:56:a0:fc:
5d:63:8c:58:0d:5b:2f:12:54:c3:8c:a6:d9:c1:b7:
fb:dc:1c:e4:0a:75:6e:93:95:22:28:56:d4:c0:2e:
dd:04:b5:0a:23:d0:80:b0:23:e5:66:7f:1f:9e:dc:
ef:ad:3e:c0:e4:2e:11:b9:73:24:a0:d2:ef:00:5b:
e9:13:98:20:ea:1d:cc:62:c9:e7:13:46:76:75:ef:
99:81:ce:20:6e:f7:3a:bb:51:e6:19:cf:4f:5f:57:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CB:A8:3C:11:E1:0D:82:33:52:65:1D:72:62:78:09:9C:E3:6F:96
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3b:65:01:82:ec:9a:14:62:b6:c0:f8:07:02:cc:78:53:91:
d8:72:75:50:ca:06:9e:cb:47:4f:fb:31:2a:c3:89:18:92:bb:
a6:a7:a2:97:31:59:92:d1:c2:1b:b4:96:16:69:6d:88:dd:84:
f2:e3:a2:2a:17:0b:5a:fe:2f:01:29:f8:db:9c:1d:08:87:7d:
51:e7:15:1a:46:2e:10:43:b4:85:54:6d:4a:cc:82:83:b2:e8:
04:43:7b:3d:ad:b3:b0:16:92:d7:0f:20:78:7a:15:1f:b4:ab:
5a:8a:84:77:8c:17:5e:df:b3:c7:34:c5:62:75:c6:24:c0:b1:
00:10:70:73:95:2d:ee:fb:fd:ce:ce:2e:8e:3f:50:31:8f:b9:
f5:c5:e5:a7:ab:2c:71:0a:85:eb:60:e4:6d:55:d8:aa:37:89:
d2:48:c8:83:e8:c6:85:fc:54:d8:b7:b3:61:e5:6e:d3:15:ab:
23:95:50:27:1a:28:df:9e:ef:df:42:e3:09:d0:4b:2b:02:7a:
dc:bc:0d:cc:16:a7:3e:f7:b2:5f:ef:b0:40:4e:a7:23:70:4b:
10:4b:45:90:b0:38:60:eb:09:2a:ee:dd:26:d3:5b:04:a7:a6:
95:cb:6c:ed:a6:3f:89:64:8a:3f:50:e8:13:c5:58:7e:95:91:
96:be:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:24:46 2026 by rpki-client