
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier: p27iZNqPdzMVDtJD4k6Ebh8ejMiAcKwIDv+lGaNRVoQ=
Subject key identifier: 4C:92:38:72:FB:B0:68:5E:58:98:81:78:B3:82:D9:F9:CE:0C:FE:C0
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 01A175B9981336F9179A04F5BCC209B632A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number: 0C4B
Signing time: Mon 26 Oct 2026 01:00:59 +0000
Manifest this update: Mon 26 Oct 2026 01:00:59 +0000
Manifest next update: Tue 27 Oct 2026 01:00:59 +0000
Files and hashes: 1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: TzgHTwICdaPijwk+/HgsT2MG6xD2EjcUVdSXE8HxLNA=)
3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:98:13:36:f9:17:9a:04:f5:bc:c2:09:b6:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Oct 26 01:00:59 2026 GMT
Not After : Oct 27 01:00:59 2026 GMT
Subject: CN=4c923872fbb0685e58988178b382d9f9ce0cfec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:ca:db:61:d4:fd:a5:d9:e8:73:6c:1a:f8:
36:6f:48:1b:49:de:0e:fe:a2:29:13:3c:ea:a7:89:
db:aa:29:eb:d1:ee:b3:54:b4:ef:e3:bf:fa:19:58:
5b:a8:38:e1:85:3f:bd:63:b6:dd:af:14:9f:a0:fb:
31:24:b5:58:13:bd:9a:9d:47:54:1a:a8:f8:8b:90:
7c:d1:6a:dc:9c:c4:87:9d:f4:d6:a7:f5:bb:87:da:
cf:67:85:65:36:a7:0b:98:13:2c:03:35:81:70:50:
6e:af:de:bb:a5:10:ff:11:9c:a5:f6:fc:0c:64:b4:
3f:55:32:ae:6c:2d:57:5e:43:3c:c2:d5:87:dc:28:
0f:d4:7c:16:53:5b:ad:f3:0c:6b:50:0e:24:b1:98:
4b:69:7e:40:a1:83:ad:f4:94:59:d0:c1:5b:24:02:
97:e0:27:9c:17:a3:64:d5:e6:9c:6a:4f:46:76:3b:
b4:d8:6a:41:8b:95:2f:f7:d1:b6:ba:36:85:b8:67:
fc:c0:ee:6e:eb:d6:ce:31:35:e7:ed:b4:ad:0b:45:
5a:52:f4:f5:d4:f8:f8:07:07:b4:94:f5:bd:3b:bc:
e1:16:f4:d8:37:96:61:5e:9a:8b:71:c8:d8:ba:21:
69:b1:19:9a:a9:70:c7:37:e9:c2:80:0b:63:be:d7:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:38:72:FB:B0:68:5E:58:98:81:78:B3:82:D9:F9:CE:0C:FE:C0
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0b:6d:b4:e1:ff:e4:87:ed:23:d0:92:bf:1f:ff:ec:83:91:
91:aa:33:41:dd:77:b0:86:63:d7:d8:37:26:84:68:05:1d:7f:
85:7c:bb:70:3a:0c:e9:dc:79:79:87:d9:8f:ea:f2:08:a1:aa:
7d:87:88:20:03:95:d9:1b:41:ee:b4:c5:3f:44:5d:55:67:eb:
5d:6e:c8:35:d6:4c:87:90:fb:3c:59:02:42:77:da:9e:43:e1:
c8:44:fe:6f:ca:36:43:9e:de:06:d3:1d:66:9d:fe:34:96:86:
4f:c5:ea:75:c6:34:7a:86:a6:30:0a:0b:93:ed:e1:ea:be:86:
0d:8d:2a:8a:02:f7:46:d2:81:d7:da:4b:bf:c5:69:4b:fb:f6:
7e:59:3e:c8:d0:a4:c4:5e:ff:1e:00:d9:3d:5f:3b:03:2f:ff:
44:01:2f:d0:a0:5e:2a:f9:71:bd:78:55:bb:9b:a3:8a:ea:e8:
e7:a6:f5:dd:9b:14:27:75:b1:c6:81:f8:04:f7:2e:4a:ce:d9:
6d:c0:ab:e9:3e:71:35:6c:24:4a:3a:e7:c3:7c:08:cd:6d:33:
87:62:d5:79:fe:91:b4:82:53:2f:4e:7f:af:58:40:08:f9:07:
14:03:1a:89:c1:eb:96:41:55:00:8b:a6:fc:ec:51:9a:d6:53:
94:e8:59:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1uZgTNvkXmgT1vMIJtjKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjYxMDI2MDEwMDU5WhcNMjYxMDI3MDEwMDU5WjAzMTEwLwYDVQQD
Eyg0YzkyMzg3MmZiYjA2ODVlNTg5ODgxNzhiMzgyZDlmOWNlMGNmZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t3K22HU/aXZ6HNsGvg2b0gbSd4O
/qIpEzzqp4nbqinr0e6zVLTv47/6GVhbqDjhhT+9Y7bdrxSfoPsxJLVYE72anUdU
Gqj4i5B80WrcnMSHnfTWp/W7h9rPZ4VlNqcLmBMsAzWBcFBur967pRD/EZyl9vwM
ZLQ/VTKubC1XXkM8wtWH3CgP1HwWU1ut8wxrUA4ksZhLaX5AoYOt9JRZ0MFbJAKX
4CecF6Nk1eacak9Gdju02GpBi5Uv99G2ujaFuGf8wO5u69bOMTXn7bStC0VaUvT1
1Pj4Bwe0lPW9O7zhFvTYN5ZhXpqLccjYuiFpsRmaqXDHN+nCgAtjvtdulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEySOHL7sGheWJiBeLOC2fnODP7AMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawtttOH/
5IftI9CSvx//7IORkaozQd13sIZj19g3JoRoBR1/hXy7cDoM6dx5eYfZj+ryCKGq
fYeIIAOV2RtB7rTFP0RdVWfrXW7INdZMh5D7PFkCQnfankPhyET+b8o2Q57eBtMd
Zp3+NJaGT8XqdcY0eoamMAoLk+3h6r6GDY0qigL3RtKB19pLv8VpS/v2flk+yNCk
xF7/HgDZPV87Ay//RAEv0KBeKvlxvXhVu5ujiuro56b13ZsUJ3WxxoH4BPcuSs7Z
bcCr6T5xNWwkSjrnw3wIzW0zh2LVef6RtIJTL05/r1hACPkHFAMaicHrlkFVAIum
/OxRmtZTlOhZ3g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:42:18 2026 by rpki-client