Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: DIE3tiZ60YCaiJbMnKgvh0VuvhArgOz0Q9h+Q241H9k=
Subject key identifier: A9:FB:27:C6:A3:6D:14:C7:65:C6:E1:C3:FE:01:96:A2:7A:14:7E:9D
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019CAED9ACA979437359CB75AE2907C29CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0D69
Signing time: Mon 02 Mar 2026 14:00:26 +0000
Manifest this update: Mon 02 Mar 2026 14:00:26 +0000
Manifest next update: Tue 03 Mar 2026 14:00:26 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: GHETQhhRsFdDKhImdj9/1kVcPh2XO49Y1jNIVNhScpw=)
2: TD7LcMa8g07SO6E6QEZXj5yZzM0.roa (hash: cD2AwS1X+5qcgIE9W2blNIYEjQyz6ExsjggeZZ5KKps=)
3: ggOW3o-MbvU8qrixzLewXEOW-dA.roa (hash: l2JHFaXh36mxZ4Wh5hSlzL5jEoUquwv+npOClo9uaVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:ac:a9:79:43:73:59:cb:75:ae:29:07:c2:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Mar 2 14:00:26 2026 GMT
Not After : Mar 3 14:00:26 2026 GMT
Subject: CN=a9fb27c6a36d14c765c6e1c3fe0196a27a147e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:5e:79:83:c1:69:8b:5c:b1:e6:df:99:9f:
f9:69:89:81:9e:dd:dc:a5:e5:ce:67:49:66:e6:ac:
a5:91:ed:66:93:a7:b7:34:b0:c4:12:92:b3:c7:49:
03:b7:13:b3:c3:66:e8:ee:8b:46:7f:cc:ee:18:cd:
b9:03:b1:1d:5a:4f:ba:5e:b1:34:55:67:f0:b0:60:
af:4f:91:1d:ec:49:e2:90:bd:ae:55:3f:3f:b2:9e:
cd:11:56:48:9d:3b:aa:7e:18:76:d4:86:46:4e:bb:
68:69:6b:ab:48:9c:fc:21:3d:9f:5f:27:29:f6:9d:
8f:de:ac:de:f6:fa:13:71:37:62:13:64:42:ca:4f:
b8:7c:fc:da:be:30:87:d0:59:30:42:c1:52:65:91:
ed:df:9e:5c:65:5d:13:cc:19:6a:37:b5:45:89:24:
8f:f0:33:72:9b:d9:21:a8:86:ed:b0:b3:b6:cc:f0:
89:2d:50:8a:0a:b0:f9:bd:62:8c:94:f4:96:cf:53:
0e:ce:a6:1f:7a:c2:78:ff:5e:a7:91:3a:38:01:72:
3b:2d:23:4d:8d:8b:4c:4d:60:f9:48:51:9c:28:36:
3b:03:61:f2:5f:41:f9:81:f0:e6:aa:bc:eb:fb:fe:
ae:51:9b:72:36:c7:6a:97:17:e7:91:73:ce:ca:fb:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:27:C6:A3:6D:14:C7:65:C6:E1:C3:FE:01:96:A2:7A:14:7E:9D
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:0e:1e:86:7c:bb:08:98:5f:67:4b:2e:09:d9:91:9c:51:
3a:4c:f4:86:45:cb:f3:10:0e:9a:0a:0e:8b:ac:25:f4:f2:c8:
1b:44:6c:cb:62:0d:30:84:84:e4:01:c9:cf:c1:49:97:f0:a4:
c2:df:fe:0a:60:af:89:a4:5b:cc:13:a8:3a:10:1b:7b:6f:bf:
68:d5:fb:1b:6f:57:53:52:eb:85:be:2d:df:0a:aa:a2:14:0b:
ce:da:a4:49:0e:9d:f7:f5:fd:c7:99:d3:7c:d2:02:1d:a6:28:
36:69:54:e6:33:85:11:c3:8e:60:ec:c2:9b:34:51:65:04:bc:
8b:33:61:f1:02:c0:73:9a:c7:1c:eb:0e:fb:7a:98:6f:7f:cc:
b3:59:5d:1e:11:06:2c:0f:2b:fb:91:dd:fc:cc:7b:7e:25:cb:
0c:1d:91:51:f1:4f:c7:6f:e0:0e:d1:f2:31:dd:ad:c7:5b:4d:
41:50:79:24:d7:52:51:ba:c5:b7:8f:1c:01:6f:07:f5:84:fb:
30:36:cb:99:e1:41:5d:fa:63:76:96:22:0f:53:fe:6d:e5:23:
0f:34:4b:71:26:ea:ab:55:33:23:42:7f:b5:5b:15:ca:6d:3c:
c2:f0:1a:5c:a9:e5:88:ce:d5:20:4a:6e:63:7e:28:d6:fb:3d:
a2:1f:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:53 2026 by rpki-client