Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: OONFmpsF6Mntdq3ktOhQ0wH0qM3VjRVqU7Jlwsa9ULM=
Subject key identifier: 09:5C:BC:57:05:0D:24:8A:F8:02:12:C0:68:74:2C:12:6A:46:78:51
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019D9AAC05955BF1FB6FACB9E145317C7E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 0529
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: ZNVAcCLacudzxVG16Nf8xhwHOjUkWSpUCVrkkarhN+w=)
2: 67fn5GTCeyuZQBLDAbthDHukFBc.roa (hash: mGoog7qE1SUu5tq0Qw3ikg4XEdKFRtMMptWXJMMEWPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:05:95:5b:f1:fb:6f:ac:b9:e1:45:31:7c:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=095cbc57050d248af80212c068742c126a467851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:c3:5c:7f:d5:7a:df:a2:1b:b8:f9:37:18:
24:cd:c7:23:98:4e:bf:7d:e0:10:3a:d7:84:e4:3f:
45:56:51:af:6b:75:ee:85:50:d0:11:fa:55:0a:b9:
3e:75:6e:5e:53:bf:f9:7d:16:f1:e0:dc:e5:0b:62:
94:d4:99:4b:0a:13:d3:ea:af:b5:43:e9:4b:21:48:
2a:ea:e3:ff:b9:2e:a7:c0:3a:2e:6b:0e:14:29:e6:
63:58:e4:08:78:75:a3:d1:a4:8a:86:14:66:49:96:
5b:20:8b:24:c8:68:62:16:b5:01:98:3f:5f:eb:f4:
8a:21:3a:a9:db:42:18:b6:6a:13:e4:7f:cb:f3:b7:
f7:80:f0:f6:01:68:a6:ca:5e:7c:7f:55:55:96:98:
aa:0f:ed:cd:68:0d:d0:75:80:86:cf:a1:ec:2d:a9:
65:02:69:0d:a7:be:ca:10:42:fd:d8:57:6d:16:14:
fb:77:9e:c0:7e:b1:b1:72:86:04:bf:64:75:18:49:
fa:59:95:dc:7c:67:9d:f7:5a:8d:f9:aa:9a:7f:a1:
4a:f6:d3:4e:d0:4d:06:f7:44:1b:21:30:be:bf:26:
97:5a:08:a9:e7:b5:99:fc:e8:5f:4d:6f:fa:85:ee:
c6:38:4b:7f:ce:64:00:ab:37:a9:fa:a1:b7:e2:68:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5C:BC:57:05:0D:24:8A:F8:02:12:C0:68:74:2C:12:6A:46:78:51
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fa:ad:53:6d:9e:7c:94:58:21:1e:eb:ee:95:af:60:82:e5:
1c:7c:c7:bb:2d:f5:7b:c3:16:7e:15:14:54:86:7b:74:8a:47:
11:3b:e6:b5:ce:4e:53:7a:86:1a:29:1f:0d:ef:20:40:bc:ea:
64:3d:a5:0f:1d:70:84:2d:9b:b3:58:c6:58:db:91:af:a8:3f:
19:0f:3b:a0:b0:9a:64:1a:4a:3b:da:87:00:06:5f:32:63:e5:
b9:bb:a7:a4:00:75:b1:7e:0f:73:04:35:35:91:ab:6d:3b:c4:
45:09:1a:98:26:44:0c:54:2a:6e:64:cd:fc:7c:62:1d:57:4b:
99:a6:df:71:60:17:8d:c4:4a:6c:23:9f:a5:b1:38:e8:16:cf:
ec:07:8d:42:48:f1:d1:bf:53:ef:0d:6d:90:32:2a:5a:0b:6f:
17:6e:9f:dc:34:1e:a8:07:74:0d:6a:17:1d:fb:cb:70:6d:28:
12:78:1b:7b:d1:4e:3f:af:68:6f:f1:1b:b1:75:46:4b:6f:d0:
d2:d9:a2:5d:e8:33:4c:a7:dd:74:df:91:63:d5:a9:a5:46:0b:
c9:10:76:98:17:68:92:4e:c0:a8:c1:93:6e:71:b5:62:63:6e:
36:9a:1b:f3:6d:ed:d8:16:fb:10:83:f7:d2:4d:0c:05:b5:39:
81:b6:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:22 2026 by rpki-client