Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: F6GZUx1qvltpadVTqTl/qjLceBbH8zQVBYB2x47cFAo=
Subject key identifier: 20:DF:2D:31:66:A6:E8:82:B9:83:A9:79:7D:E8:B2:A8:55:D5:0B:AD
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019D992B7C92A7CF697FEC898E9F352AA7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 18EF
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: +2WeczAlBCuATVXDTyWnpVdACNvGks9Iyehi3LHsL88=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7c:92:a7:cf:69:7f:ec:89:8e:9f:35:2a:a7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=20df2d3166a6e882b983a9797de8b2a855d50bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:1c:86:55:a5:67:a6:12:26:f2:7d:c8:f3:
b5:45:ee:be:f0:4b:3d:d6:f8:e8:26:fd:7e:ae:f9:
74:01:3b:93:9a:df:2d:00:ed:27:67:b5:be:68:03:
f7:48:fb:89:41:6c:6d:c1:c3:b7:aa:9e:fd:0c:8d:
8a:ff:80:06:39:52:df:dd:73:8e:86:3b:31:97:52:
a6:4f:6e:15:0f:38:97:a2:08:6c:44:f8:f8:c8:50:
d4:66:23:0d:8c:f8:65:ec:d0:ac:57:ab:e3:da:30:
bc:54:b9:5e:fa:b6:35:53:8d:64:3a:82:5c:9a:f1:
3e:e2:2f:d5:19:5a:37:e3:15:81:8b:e1:0b:52:b2:
12:4b:35:bd:63:b4:20:62:bf:6f:bb:17:64:69:d4:
d9:dc:28:7f:24:2c:9f:e6:6e:c0:96:f1:fd:fc:0b:
46:54:72:66:a0:e5:b8:1e:71:20:8a:84:bc:1a:24:
48:21:7a:44:1d:c6:f1:37:12:b2:3f:68:e8:3b:2f:
af:00:46:1b:0d:da:b4:7a:d3:29:55:2e:c1:24:c5:
c1:f8:b5:c8:5d:60:33:2a:db:b6:e6:68:7d:f2:ca:
b5:2d:05:ca:cb:78:fb:1b:a1:04:89:69:3e:09:11:
95:09:12:0d:6a:ce:73:83:09:7f:25:91:85:3a:77:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:2D:31:66:A6:E8:82:B9:83:A9:79:7D:E8:B2:A8:55:D5:0B:AD
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:64:64:94:e1:af:c2:27:4a:33:0d:bb:d2:fa:b5:0a:c2:
1d:cb:9f:a1:5c:4f:b6:55:b6:a5:f3:a5:cf:05:2f:47:06:7a:
2e:91:63:12:cd:38:bd:84:c9:c5:70:1f:65:b7:6b:75:13:d4:
8d:c0:de:14:d5:f3:7c:61:54:ab:df:23:3c:23:5a:e5:b4:0f:
80:03:10:b7:fd:ba:19:af:f7:2f:4a:92:68:91:84:ad:2c:e7:
a3:c5:7c:2b:72:4a:dc:85:ca:3e:b3:72:f9:6e:48:db:a1:05:
5c:91:a2:a2:a7:ca:95:1b:21:16:2b:43:e4:9f:0f:90:44:ae:
26:bd:f4:a2:4c:01:dc:2f:50:01:68:f9:4c:8b:d2:bf:b0:2e:
c6:1b:16:3c:2c:0c:40:4e:05:35:a7:78:98:8b:20:80:08:5c:
30:2d:07:11:6b:fc:1d:dd:8e:07:fc:6f:97:8f:88:a6:7e:0c:
cb:79:09:13:de:16:7b:b2:99:92:7e:0a:c6:fa:86:42:8e:c6:
d5:91:e1:7d:83:9c:1e:e9:04:2b:27:42:13:bf:35:72:9d:3e:
cf:24:f2:f0:71:bc:3b:cb:d6:26:24:99:ab:49:e6:06:65:b1:
ec:dd:d3:a4:1d:54:ad:99:2a:31:03:4f:c1:98:4a:14:18:e8:
c2:a8:50:ac
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2ZK3ySp89pf+yJjp81Kqf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjYwNDE3MDIwMDU3WhcNMjYwNDE4MDIwMDU3WjAzMTEwLwYDVQQD
EygyMGRmMmQzMTY2YTZlODgyYjk4M2E5Nzk3ZGU4YjJhODU1ZDUwYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYIchlWlZ6YSJvJ9yPO1Re6+8Es9
1vjoJv1+rvl0ATuTmt8tAO0nZ7W+aAP3SPuJQWxtwcO3qp79DI2K/4AGOVLf3XOO
hjsxl1KmT24VDziXoghsRPj4yFDUZiMNjPhl7NCsV6vj2jC8VLle+rY1U41kOoJc
mvE+4i/VGVo34xWBi+ELUrISSzW9Y7QgYr9vuxdkadTZ3Ch/JCyf5m7AlvH9/AtG
VHJmoOW4HnEgioS8GiRIIXpEHcbxNxKyP2joOy+vAEYbDdq0etMpVS7BJMXB+LXI
XWAzKtu25mh98sq1LQXKy3j7G6EEiWk+CRGVCRINas5zgwl/JZGFOncQ2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCDfLTFmpuiCuYOpeX3osqhV1QutMB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3
ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBNk
ZJThr8InSjMNu9L6tQrCHcufoVxPtlW2pfOlzwUvRwZ6LpFjEs04vYTJxXAfZbdr
dRPUjcDeFNXzfGFUq98jPCNa5bQPgAMQt/26Ga/3L0qSaJGErSzno8V8K3JK3IXK
PrNy+W5I26EFXJGioqfKlRshFitD5J8PkESuJr30okwB3C9QAWj5TIvSv7AuxhsW
PCwMQE4FNad4mIsggAhcMC0HEWv8Hd2OB/xvl4+Ipn4My3kJE94We7KZkn4KxvqG
Qo7G1ZHhfYOcHukEKydCE781cp0+zyTy8HG8O8vWJiSZq0nmBmWx7N3TpB1UrZkq
MQNPwZhKFBjowqhQrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:05 2026 by rpki-client