Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: TrMMNza9ZOU8s8F/aKCRiJxbnchuRYfRrUkKJjR81yc=
Subject key identifier: E3:2D:00:8A:89:9F:69:FF:6B:7F:27:25:18:C5:2D:F9:98:16:67:C1
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019FAA507F3985BD4D6926E356317F1F4A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1A01
Signing time: Tue 28 Jul 2026 20:00:29 +0000
Manifest this update: Tue 28 Jul 2026 20:00:29 +0000
Manifest next update: Wed 29 Jul 2026 20:00:29 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: 7rs95zuxcGuEfa/TE6dtF2OrwgV6YQMkfLZs1r37C9o=)
2: FHwGNHrCl9ZDaI5iHSATgi0eQI4.roa (hash: Ry8wkccjRDgFgOO1ND+5XAwtEK69W7guaqIyY6Z98Uk=)
3: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (hash: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM=)
4: HbEx7H1JLwPBlmcAN-xpDopPNGM.roa (hash: YJcx1ed3tK16bbLzRe+E+u16eoX0vPPKSbeVN78fzcs=)
5: KnpLhbBEufmPsTr4rfzt358Z5NA.roa (hash: spWQWP4oc84BPT4Abbm0x2lE5bf02yTSVRuZE9yCBqk=)
6: O01AHTz126xddYBIHOgu7hjWpTQ.roa (hash: wUbmS1l2rNfhauG9wUd4dDdjVRn6lpjxrfwiwa8yNYQ=)
7: paJ_DE2H42zvRaO-PkfsPRsWcgo.roa (hash: ZLCNlkkwSoN76l5ZmTEE4VyXeJGMvWwQpQVxOZQbfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:7f:39:85:bd:4d:69:26:e3:56:31:7f:1f:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jul 28 20:00:29 2026 GMT
Not After : Jul 29 20:00:29 2026 GMT
Subject: CN=e32d008a899f69ff6b7f272518c52df9981667c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:d7:e9:1b:e0:c4:10:67:e4:f7:8a:23:bc:
a9:0d:62:eb:bc:a8:e9:9f:ba:99:67:6c:98:a1:49:
16:7b:34:b0:7c:e7:1c:84:88:fd:91:ab:0e:77:ff:
ee:75:66:30:2b:10:e1:1b:bb:7d:3d:26:fa:d4:bd:
58:ea:6c:e6:e6:5b:ef:38:05:b3:17:d1:8c:79:e0:
a5:05:f1:47:ef:4a:8f:12:c7:6c:f5:eb:27:28:3c:
a6:76:32:85:bb:4f:66:9e:b3:70:48:ce:91:d6:db:
ff:10:21:2b:38:93:e5:ab:67:75:94:f6:f1:37:ee:
ce:9b:f9:b2:c9:16:d5:da:53:3f:62:13:9f:fa:c6:
d2:b0:37:dd:b3:d8:92:49:04:ea:74:89:7d:5e:9f:
ed:6d:8a:93:b8:9d:6e:b0:ae:53:b6:c2:ba:01:45:
5c:4d:63:19:db:ba:90:cc:c8:ad:0c:bd:b1:e1:9c:
63:25:5b:46:53:40:4c:d4:04:4f:f4:be:c4:9b:78:
52:11:5d:59:60:57:0f:3e:af:3e:0d:ea:0c:47:7d:
75:25:c4:9c:d6:4f:7d:05:3f:27:45:5a:e2:08:bf:
1b:3d:31:6b:28:65:ee:6c:49:0b:72:2a:d7:73:e8:
b9:9a:8d:19:bd:eb:00:f4:62:30:86:15:4c:58:e2:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:00:8A:89:9F:69:FF:6B:7F:27:25:18:C5:2D:F9:98:16:67:C1
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9c:cb:7d:d2:1e:39:17:a4:fe:36:9b:26:22:5b:b3:22:2e:
66:71:00:e9:81:27:b4:0e:39:fb:6d:7a:e1:f7:5d:dd:3c:41:
31:c5:0f:e1:58:77:97:8f:f5:3e:e0:9e:0f:7e:60:57:21:e6:
da:9f:c0:19:48:ef:60:da:51:2e:95:76:ae:62:b3:8e:64:3f:
d1:d7:62:12:63:d6:18:c5:7e:49:ab:2f:7f:06:f9:bc:aa:38:
07:16:4a:82:ed:d2:47:5d:09:0c:bd:f8:30:87:a6:b0:2b:9b:
8a:a6:2e:52:69:e8:d0:ef:9b:f0:17:0a:92:15:fd:bc:4a:21:
32:50:29:2c:33:d9:c7:a1:fb:19:71:92:e5:93:64:9e:ac:d1:
5b:e4:27:f9:4a:be:89:d2:81:02:d0:37:8c:84:33:02:9c:1e:
78:88:3b:93:aa:b3:da:93:f1:16:eb:d4:43:c1:c0:a7:1f:29:
c6:53:7f:33:93:dd:9b:48:c4:af:f3:00:36:44:7e:9e:d8:57:
98:6f:1a:a9:90:d2:72:3d:13:87:35:00:c7:08:56:ef:ac:ef:
24:79:56:ec:b6:b4:c6:fb:97:78:1a:8d:f1:44:85:02:ba:ae:
41:00:41:92:06:9a:a9:c9:15:f9:b1:c3:b7:e9:17:55:fc:09:
ac:d3:d0:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+qUH85hb1NaSbjVjF/H0qPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjYwNzI4MjAwMDI5WhcNMjYwNzI5MjAwMDI5WjAzMTEwLwYDVQQD
EyhlMzJkMDA4YTg5OWY2OWZmNmI3ZjI3MjUxOGM1MmRmOTk4MTY2N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLjX6RvgxBBn5PeKI7ypDWLrvKjp
n7qZZ2yYoUkWezSwfOcchIj9kasOd//udWYwKxDhG7t9PSb61L1Y6mzm5lvvOAWz
F9GMeeClBfFH70qPEsds9esnKDymdjKFu09mnrNwSM6R1tv/ECErOJPlq2d1lPbx
N+7Om/myyRbV2lM/YhOf+sbSsDfds9iSSQTqdIl9Xp/tbYqTuJ1usK5TtsK6AUVc
TWMZ27qQzMitDL2x4ZxjJVtGU0BM1ARP9L7Em3hSEV1ZYFcPPq8+DeoMR311JcSc
1k99BT8nRVriCL8bPTFrKGXubEkLcirXc+i5mo0ZvesA9GIwhhVMWOKG8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOMtAIqJn2n/a38nJRjFLfmYFmfBMB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzlmOTU5MC03ZjBhLTQxYjMtYWM0Zi1lZmQxNGRiOTU3
ZmIvMS8xLVlWdFowOE9uYjlnRXRXMTA5bHJRNl9YWkhNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZzL
fdIeORek/jabJiJbsyIuZnEA6YEntA45+2164fdd3TxBMcUP4Vh3l4/1PuCeD35g
VyHm2p/AGUjvYNpRLpV2rmKzjmQ/0ddiEmPWGMV+Sasvfwb5vKo4BxZKgu3SR10J
DL34MIemsCubiqYuUmno0O+b8BcKkhX9vEohMlApLDPZx6H7GXGS5ZNknqzRW+Qn
+Uq+idKBAtA3jIQzApweeIg7k6qz2pPxFuvUQ8HApx8pxlN/M5Pdm0jEr/MANkR+
nthXmG8aqZDScj0ThzUAxwhW76zvJHlW7La0xvuXeBqN8USFArquQQBBkgaaqckV
+bHDt+kXVfwJrNPQiA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:27 2026 by rpki-client