
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: 2bS5zsXWxO5AwMA7qrvmZ/wBzP5mzKNgIPup38WYQIc=
Subject key identifier: 91:EB:1E:AE:BF:B0:26:D1:C9:81:47:83:61:35:8C:0B:61:C5:7D:03
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019CE4EC835A0CD505CA3B2120A6590B586E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0D0A
Signing time: Fri 13 Mar 2026 02:00:31 +0000
Manifest this update: Fri 13 Mar 2026 02:00:31 +0000
Manifest next update: Sat 14 Mar 2026 02:00:31 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: hfN9ZtvFlni3M4D0JqZO/pWE4pgsXuLy31pNMZWeGco=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:83:5a:0c:d5:05:ca:3b:21:20:a6:59:0b:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Mar 13 02:00:31 2026 GMT
Not After : Mar 14 02:00:31 2026 GMT
Subject: CN=91eb1eaebfb026d1c981478361358c0b61c57d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:09:6b:1f:fa:be:ad:21:7c:df:1c:ef:1b:
6b:6b:c7:1a:a7:b2:0b:79:a6:ff:fa:09:15:a8:c1:
aa:e3:8c:74:c9:58:96:98:24:02:42:01:54:7b:55:
9a:9b:d6:c4:a5:66:d5:63:01:55:2d:91:93:73:44:
67:0e:68:de:e9:92:ce:37:22:b6:64:77:e2:7c:32:
c3:50:46:7d:f2:5e:61:94:82:af:a3:27:d8:6f:ea:
b4:ca:e6:e9:cc:72:be:53:79:b9:5d:ed:af:7e:3b:
61:89:5c:41:5e:33:0c:e5:65:28:2e:ff:23:b4:cf:
72:fe:18:bf:e5:1e:a5:68:13:bf:05:55:29:02:74:
1d:15:27:a0:48:13:f7:ab:3a:45:44:dd:3d:fb:12:
13:48:74:88:ce:79:57:d4:a4:b1:9a:31:60:b9:35:
fb:15:99:58:36:7f:cf:82:30:2d:11:9f:d3:e4:7d:
b3:cb:8d:e3:e7:4a:f3:37:72:76:7a:c9:45:8a:3c:
3d:de:2e:04:57:a0:d9:56:70:ee:40:06:b4:76:b7:
cd:f5:5b:67:87:e5:cc:50:c5:66:42:a9:f8:32:a6:
b2:3a:95:ca:2b:05:d5:95:c8:5b:35:c9:c3:ca:17:
1a:37:6c:d5:68:71:b1:04:71:b3:18:1b:f6:1b:d8:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EB:1E:AE:BF:B0:26:D1:C9:81:47:83:61:35:8C:0B:61:C5:7D:03
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:96:1e:d8:c0:dc:c3:67:27:55:3b:e6:45:7d:15:5d:1d:
51:0b:65:37:02:0f:cb:33:7f:97:43:8a:72:1d:74:93:aa:c0:
83:43:17:0b:0a:38:be:5c:5f:69:49:88:4e:e2:c3:1d:40:7b:
d7:11:64:97:7a:b0:35:8f:f8:68:b9:87:a9:5c:76:7a:1d:cb:
3e:3b:73:18:db:c1:a5:75:30:ac:8f:4d:c9:03:93:2d:c6:e5:
fa:1a:cd:fc:3b:77:1c:7c:63:16:20:d8:d6:01:b9:b0:a0:fd:
54:54:97:4c:04:b4:d6:57:15:53:ab:1f:d9:ee:2f:c1:0a:ca:
87:15:cd:b0:95:c7:97:3d:af:91:39:a9:33:ff:24:a4:0d:e3:
2a:45:00:d5:6f:29:68:27:23:1c:75:16:5e:29:2a:85:f7:7a:
e6:fb:f8:df:cd:6c:09:5f:31:46:73:49:29:64:7e:05:fe:9b:
70:5f:98:bb:47:f1:3b:0b:94:9d:3a:58:25:eb:c9:9b:93:66:
45:34:ab:32:de:b0:e7:9a:a6:99:65:67:13:90:65:e0:62:3e:
5b:a9:32:b0:35:5b:92:5e:1e:0f:a0:1c:20:17:99:f9:5a:f3:
ad:d3:20:80:09:0e:06:7f:d1:31:ee:13:07:b7:fd:61:92:71:
78:fa:9f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7INaDNUFyjshIKZZC1huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1
MTk1YTQwHhcNMjYwMzEzMDIwMDMxWhcNMjYwMzE0MDIwMDMxWjAzMTEwLwYDVQQD
Eyg5MWViMWVhZWJmYjAyNmQxYzk4MTQ3ODM2MTM1OGMwYjYxYzU3ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIQJax/6vq0hfN8c7xtra8cap7IL
eab/+gkVqMGq44x0yViWmCQCQgFUe1Wam9bEpWbVYwFVLZGTc0RnDmje6ZLONyK2
ZHfifDLDUEZ98l5hlIKvoyfYb+q0yubpzHK+U3m5Xe2vfjthiVxBXjMM5WUoLv8j
tM9y/hi/5R6laBO/BVUpAnQdFSegSBP3qzpFRN09+xITSHSIznlX1KSxmjFguTX7
FZlYNn/PgjAtEZ/T5H2zy43j50rzN3J2eslFijw93i4EV6DZVnDuQAa0drfN9Vtn
h+XMUMVmQqn4MqayOpXKKwXVlchbNcnDyhcaN2zVaHGxBHGzGBv2G9jWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHrHq6/sCbRyYFHg2E1jAthxX0DMB8GA1UdIwQY
MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt
ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi
LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADISWHtjA
3MNnJ1U75kV9FV0dUQtlNwIPyzN/l0OKch10k6rAg0MXCwo4vlxfaUmITuLDHUB7
1xFkl3qwNY/4aLmHqVx2eh3LPjtzGNvBpXUwrI9NyQOTLcbl+hrN/Dt3HHxjFiDY
1gG5sKD9VFSXTAS01lcVU6sf2e4vwQrKhxXNsJXHlz2vkTmpM/8kpA3jKkUA1W8p
aCcjHHUWXikqhfd65vv4381sCV8xRnNJKWR+Bf6bcF+Yu0fxOwuUnTpYJevJm5Nm
RTSrMt6w55qmmWVnE5Bl4GI+W6kysDVbkl4eD6AcIBeZ+VrzrdMggAkOBn/RMe4T
B7f9YZJxePqfNA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:54 2026 by rpki-client