Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: xinLeA/ogWIZKEq+pzlLs6wTviXD+kxQFJuAjMEG+Ok=
Subject key identifier: 34:AA:F7:1F:0D:C7:28:FE:E3:B1:97:34:0D:C6:34:ED:2F:43:B2:35
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 019CAAC71355D9BB196FC599BF508B270B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 08AB
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: V6/GqgAeN/WYHgKKsXw9GVcVc88RDYt2VDFYWre6v2Y=)
2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:13:55:d9:bb:19:6f:c5:99:bf:50:8b:27:0b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=34aaf71f0dc728fee3b197340dc634ed2f43b235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:0e:c7:83:d3:f1:24:06:3b:72:e2:4f:4c:
f4:b2:73:36:93:66:4a:e0:d5:b9:a6:8f:c2:2b:55:
e8:6a:15:f5:b2:6c:3d:5a:7c:03:17:5d:02:6a:a6:
fd:28:20:e0:87:db:6f:3a:0f:26:26:2a:1d:ec:c2:
1d:59:06:2c:f3:81:ab:44:51:dc:53:6c:b4:f5:ce:
18:a1:c0:4d:db:93:7d:12:ed:b9:12:73:72:d4:24:
6b:26:69:65:2b:95:31:4c:cb:12:70:1c:02:c8:09:
91:94:b2:21:55:3c:31:f0:af:c4:8f:27:90:10:c3:
58:df:1f:37:bc:10:c5:1c:2a:d6:e1:c1:ef:34:27:
ac:74:cd:6f:7e:b6:66:85:45:46:11:06:e6:8a:73:
87:85:00:8a:12:85:bf:de:48:bd:56:c1:c9:af:04:
22:7f:6e:c0:17:0d:11:c6:07:d4:4c:7a:67:56:73:
96:7b:4e:34:63:05:ad:b2:2a:ed:fe:3c:29:1a:63:
10:02:f9:87:37:a7:cf:e4:b0:c5:93:d3:5b:7f:4b:
74:d3:91:cc:d1:70:1a:10:30:61:ad:90:d8:14:81:
f1:10:5a:48:f1:49:e6:77:ce:8f:82:63:da:9b:a4:
3e:f0:49:0e:bc:2b:61:ef:69:ac:79:36:3d:b7:bb:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:F7:1F:0D:C7:28:FE:E3:B1:97:34:0D:C6:34:ED:2F:43:B2:35
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:eb:40:ab:54:0a:c5:e0:d5:cb:69:b6:7c:f9:5e:c2:9e:6a:
88:0c:90:c1:2d:6f:33:d5:ac:ab:1f:fc:a4:6b:c1:2c:8e:63:
49:f8:06:69:3c:0c:b2:d9:66:a2:95:11:3f:6e:8b:97:0c:54:
6b:64:d7:58:26:3c:55:f9:6c:48:4f:a4:6a:fc:b9:2f:04:b4:
ec:7e:e9:b5:25:4e:14:c8:35:91:7e:f7:00:85:44:0f:d2:67:
50:dd:2d:a1:ef:f4:1d:2a:47:6f:3d:e1:48:ff:14:fb:9f:79:
5e:15:07:90:c8:d0:50:ed:8c:e7:d4:a4:b2:31:b1:f7:fc:9a:
1e:24:2b:f0:ba:41:92:82:a2:d1:e1:e4:09:41:ac:05:58:16:
0f:35:e6:15:bc:26:44:db:d6:24:66:de:d0:5c:13:1a:fd:da:
2c:27:b3:3e:7d:6f:9d:6c:60:e8:e4:34:d8:fd:e0:2b:c7:84:
2e:a5:d3:87:b3:73:6f:6b:16:30:20:f6:49:73:cf:b8:da:40:
30:3f:42:b2:a5:fa:12:c1:56:fd:a2:a3:10:f5:a7:b9:0b:8e:
c5:02:1c:71:ea:56:0c:0a:f8:fc:03:e1:d8:b5:b3:7d:77:49:
d3:ce:b4:f4:e4:19:7a:51:ae:c4:78:87:8a:7c:1f:0b:b2:91:
ea:8a:85:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxNV2bsZb8WZv1CLJwtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjFmZDlkMjc4YjY0NThlOWJmMWNjZWJhMmMzMWExOWZi
OTZjZmQwHhcNMjYwMzAxMTkwMTM5WhcNMjYwMzAyMTkwMTM5WjAzMTEwLwYDVQQD
EygzNGFhZjcxZjBkYzcyOGZlZTNiMTk3MzQwZGM2MzRlZDJmNDNiMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj4Ox4PT8SQGO3LiT0z0snM2k2ZK
4NW5po/CK1XoahX1smw9WnwDF10Caqb9KCDgh9tvOg8mJiod7MIdWQYs84GrRFHc
U2y09c4YocBN25N9Eu25EnNy1CRrJmllK5UxTMsScBwCyAmRlLIhVTwx8K/EjyeQ
EMNY3x83vBDFHCrW4cHvNCesdM1vfrZmhUVGEQbminOHhQCKEoW/3ki9VsHJrwQi
f27AFw0RxgfUTHpnVnOWe040YwWtsirt/jwpGmMQAvmHN6fP5LDFk9Nbf0t005HM
0XAaEDBhrZDYFIHxEFpI8Unmd86PgmPam6Q+8EkOvCth72mseTY9t7tOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSq9x8Nxyj+47GXNA3GNO0vQ7I1MB8GA1UdIwQY
MBaAFNch/Z0ni2RY6b8czrosMaGfuWz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2Qt
OGY5NzliNjk5NDNmLzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82ZDc1MmEtNTljNS00N2EwLWIzY2QtOGY5NzliNjk5NDNm
LzEvMXlIOW5TZUxaRmpwdnh6T3Vpd3hvWi01YlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOtAq1QK
xeDVy2m2fPlewp5qiAyQwS1vM9Wsqx/8pGvBLI5jSfgGaTwMstlmopURP26LlwxU
a2TXWCY8VflsSE+kavy5LwS07H7ptSVOFMg1kX73AIVED9JnUN0toe/0HSpHbz3h
SP8U+595XhUHkMjQUO2M59SksjGx9/yaHiQr8LpBkoKi0eHkCUGsBVgWDzXmFbwm
RNvWJGbe0FwTGv3aLCezPn1vnWxg6OQ02P3gK8eELqXTh7Nzb2sWMCD2SXPPuNpA
MD9CsqX6EsFW/aKjEPWnuQuOxQIccepWDAr4/APh2LWzfXdJ08609OQZelGuxHiH
inwfC7KR6oqFqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:19 2026 by rpki-client