Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: LbEfkNrB7vun1I31+cbG1tfw0OrP916/swgFJqqK6k8=
Subject key identifier: 07:F6:3D:25:8D:B6:7D:2F:39:5F:2A:92:49:B2:26:2C:52:80:10:38
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01A0D4CB902AC454F5700175CF9DA6C254DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0AD3
Signing time: Thu 24 Sep 2026 19:01:45 +0000
Manifest this update: Thu 24 Sep 2026 19:01:45 +0000
Manifest next update: Fri 25 Sep 2026 19:01:45 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: hRHC2BoOqx0cyh0Yvzyevx4iE2zaj7Lt6eoYo+7XR0Y=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:90:2a:c4:54:f5:70:01:75:cf:9d:a6:c2:54:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Sep 24 19:01:45 2026 GMT
Not After : Sep 25 19:01:45 2026 GMT
Subject: CN=07f63d258db67d2f395f2a9249b2262c52801038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:5f:3d:13:ea:30:0a:0d:32:4b:f4:70:9e:
42:27:9d:4e:e2:e2:4a:af:80:9e:79:77:2e:fd:2a:
dc:d5:74:90:0d:a7:c3:11:b6:b1:c4:8a:eb:c8:a6:
d1:4f:73:0f:03:52:89:6c:f3:79:ee:a0:32:8a:cd:
62:54:c5:90:a5:6e:a2:08:e7:f0:2d:f2:1c:eb:d3:
14:08:30:26:fb:0f:70:29:52:98:bc:d6:00:47:40:
0e:ba:dc:6d:2f:89:b5:d9:6f:d6:ae:65:24:5b:5c:
a0:01:73:f4:ae:f4:55:ef:b7:a9:00:63:ab:65:f2:
cb:a3:50:09:10:85:47:6b:e8:58:9a:8f:80:e3:b2:
be:f6:a3:c3:5b:f3:5d:df:58:35:86:6e:b9:16:eb:
de:d3:b9:21:e3:69:55:4a:24:fe:b2:25:9f:23:e8:
6f:ad:97:a0:05:53:26:df:8a:71:1d:dc:cb:f8:67:
c2:8b:04:41:33:52:d2:bb:ad:7b:73:ac:b1:b3:17:
dc:a2:02:f5:0d:02:6e:7b:9c:bc:b9:e1:ce:3f:6f:
ba:33:56:8f:7c:6d:60:f7:d2:79:a8:a7:a1:b3:32:
46:dc:69:f2:77:aa:b2:5e:c5:60:bd:8d:ab:5c:6e:
81:e3:93:08:20:f4:ff:00:0e:92:ab:74:bd:f4:66:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:3D:25:8D:B6:7D:2F:39:5F:2A:92:49:B2:26:2C:52:80:10:38
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:13:0a:77:c7:cb:dc:1f:cf:0c:86:ec:e4:d1:28:b2:1c:
66:24:3e:7e:25:8e:7e:8c:41:5c:1d:3d:6a:34:35:2c:b5:61:
b3:41:4d:f2:6a:3c:66:51:98:92:83:19:4c:8d:b8:63:e9:6a:
52:24:59:ee:a0:9d:95:58:49:0c:a1:d0:ff:36:e5:88:1b:a8:
98:26:f4:31:8d:f0:3d:93:02:e9:74:0f:20:44:5a:a0:75:46:
eb:51:02:25:10:ae:ec:8f:63:25:c6:51:ad:d1:a2:3e:b0:4d:
04:38:29:10:3f:44:da:f3:e7:ab:06:83:91:ae:bd:76:3b:c2:
31:e8:f4:55:ef:7e:70:ea:9c:19:2f:87:6d:16:f1:b2:27:f7:
ab:8e:d6:de:2c:32:60:45:8e:79:9f:f8:41:72:f6:4e:47:0a:
db:2f:7d:11:bc:90:b3:9f:1d:96:fc:81:ee:a8:14:23:c0:5d:
b0:78:10:27:6c:51:36:78:e0:3d:5d:62:52:94:f2:8b:34:59:
43:31:38:8d:83:68:13:ef:55:9e:af:ee:32:37:8e:86:ec:87:
e9:23:0c:fa:a6:2d:75:64:85:d7:73:a8:74:ab:ba:6c:35:eb:
f7:00:64:0a:3c:3a:34:77:26:d7:23:bb:68:c4:eb:72:c0:90:
80:a2:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:30 2026 by rpki-client