Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: rQLiOISQoRl7OacCieHEXkGd3SNuTM+gqFN9d342F9M=
Subject key identifier: 41:62:68:84:92:BD:E8:F0:83:60:FB:38:BA:14:17:EB:2F:8A:D2:9B
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019CAD224736361C7C829D39D647EFB13891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 04AE
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: 3t+XGzPl1g5y89fUjHBYPmdC1Qv49h1mIIGudC2zRfQ=)
2: 67fn5GTCeyuZQBLDAbthDHukFBc.roa (hash: mGoog7qE1SUu5tq0Qw3ikg4XEdKFRtMMptWXJMMEWPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:47:36:36:1c:7c:82:9d:39:d6:47:ef:b1:38:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=4162688492bde8f08360fb38ba1417eb2f8ad29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:c8:8a:fa:5a:ee:6a:6c:74:e5:9a:e6:f7:
d7:83:66:e1:b9:bc:bb:58:9c:39:66:d5:3c:73:b0:
d3:bf:7b:41:71:c0:b9:b6:64:24:84:f3:0a:84:b7:
df:ef:f2:5c:47:03:b0:ef:34:49:c3:9b:6b:98:95:
35:7b:55:c6:0c:10:b6:54:63:01:31:a4:f9:00:5c:
bd:28:3c:29:9d:b5:c8:50:97:f7:2f:21:2d:d4:14:
55:42:98:ed:3a:97:5b:36:62:d3:95:ee:b6:af:61:
f3:1e:57:c9:75:9d:09:2e:fd:f5:1d:91:2a:2b:6e:
15:98:c3:21:66:fe:00:65:e4:dd:aa:56:44:df:42:
95:15:20:70:f8:90:42:d4:02:a6:0e:c8:88:e0:0d:
cc:0b:36:76:5f:c6:a6:7c:41:b3:9c:04:7b:28:d0:
a2:11:74:90:46:74:98:fd:f9:eb:28:74:2d:36:5f:
ea:e9:1e:f4:2e:9e:93:2e:14:73:ea:42:51:80:a6:
97:b1:16:1b:52:ac:25:fa:61:f9:0e:24:e9:62:7e:
87:e6:b0:87:3c:25:af:8f:5d:21:1a:c4:32:32:f5:
d5:4f:a4:a1:78:22:0c:df:98:99:8d:00:6c:b7:de:
13:0e:92:be:f3:60:09:a2:12:76:d3:be:14:30:be:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:68:84:92:BD:E8:F0:83:60:FB:38:BA:14:17:EB:2F:8A:D2:9B
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:30:d0:6d:20:d7:59:84:9c:5a:50:7c:af:0c:d4:56:22:ac:
9b:6b:e9:7f:8e:66:d4:3e:5a:95:dd:ac:3b:dd:5b:a7:24:6f:
8f:3c:dc:cd:91:1a:1b:82:98:1c:8a:01:92:a7:e4:85:0a:f0:
9b:6f:15:26:22:9a:72:11:60:29:a5:3b:39:71:37:7d:6f:e6:
b6:4f:ab:bc:20:4e:ac:4f:c6:42:06:bd:1a:89:81:0c:1d:78:
ed:a2:be:51:9b:63:df:45:a4:f5:7a:3f:7f:19:3d:69:d1:cd:
c9:5f:80:98:51:a9:d4:64:35:0b:46:30:ea:b3:73:9d:09:6d:
d9:24:d5:3e:e0:3c:a2:f9:73:fa:e0:b9:10:6b:35:d5:cb:d6:
f8:7c:87:37:f4:5c:62:8c:0b:5c:e1:4d:4f:2e:60:0a:22:db:
4c:40:d2:bb:e9:76:99:c5:75:a6:d6:57:aa:22:d2:34:f3:d5:
9a:be:7c:cd:7d:9d:ca:a8:98:b4:4a:81:d6:92:49:9e:2c:de:
0f:e2:d9:d3:7d:e0:2b:7f:68:14:76:09:db:26:75:76:da:aa:
e2:0f:18:bd:76:3d:8a:eb:4d:03:21:ff:84:03:05:b3:c7:15:
67:8e:90:d7:70:59:b3:c7:e7:c2:18:ec:ed:e7:2b:4b:b3:f8:
ba:25:9d:62
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZytIkc2Nhx8gp051kfvsTiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODY2OWQzMWExNGRiZGM1MDc3MTU5Y2YwYTY1MzUzYmZi
ZmEyMGEwHhcNMjYwMzAyMDYwMDMwWhcNMjYwMzAzMDYwMDMwWjAzMTEwLwYDVQQD
Eyg0MTYyNjg4NDkyYmRlOGYwODM2MGZiMzhiYTE0MTdlYjJmOGFkMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKrIivpa7mpsdOWa5vfXg2bhuby7
WJw5ZtU8c7DTv3tBccC5tmQkhPMKhLff7/JcRwOw7zRJw5trmJU1e1XGDBC2VGMB
MaT5AFy9KDwpnbXIUJf3LyEt1BRVQpjtOpdbNmLTle62r2HzHlfJdZ0JLv31HZEq
K24VmMMhZv4AZeTdqlZE30KVFSBw+JBC1AKmDsiI4A3MCzZ2X8amfEGznAR7KNCi
EXSQRnSY/fnrKHQtNl/q6R70Lp6TLhRz6kJRgKaXsRYbUqwl+mH5DiTpYn6H5rCH
PCWvj10hGsQyMvXVT6SheCIM35iZjQBst94TDpK+82AJohJ2074UML5Q/wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEFiaISSvejwg2D7OLoUF+svitKbMB8GA1UdIwQY
MBaAFPmGadMaFNvcUHcVnPCmU1O/v6IKMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZWnAweG9VMjl4UWR4V2M4S1pUVTctX29nby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMmI0MTdkLTI4NjktNDExZi1hZWRh
LTRhMDViYWM1MjY1Zi8xLzEtWVpwMHhvVTI5eFFkeFdjOEtaVFU3LV9vZ28ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA3LzJiNDE3ZC0yODY5LTQxMWYtYWVkYS00YTA1YmFjNTI2
NWYvMS8xLVlacDB4b1UyOXhRZHhXYzhLWlRVNy1fb2dvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDDQ
bSDXWYScWlB8rwzUViKsm2vpf45m1D5ald2sO91bpyRvjzzczZEaG4KYHIoBkqfk
hQrwm28VJiKachFgKaU7OXE3fW/mtk+rvCBOrE/GQga9GomBDB147aK+UZtj30Wk
9Xo/fxk9adHNyV+AmFGp1GQ1C0Yw6rNznQlt2STVPuA8ovlz+uC5EGs11cvW+HyH
N/RcYowLXOFNTy5gCiLbTEDSu+l2mcV1ptZXqiLSNPPVmr58zX2dyqiYtEqB1pJJ
nizeD+LZ033gK39oFHYJ2yZ1dtqq4g8YvXY9iutNAyH/hAMFs8cVZ46Q13BZs8fn
whjs7ecrS7P4uiWdYg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:57 2026 by rpki-client