Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier: AfjF55GdmYXbS8LnwfPLNWV5pMcDuNDIVxh4TtqoLro=
Subject key identifier: A3:69:03:F5:39:26:9C:51:E2:1D:13:B6:00:E9:D7:31:0D:3F:5F:69
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 01A0C40E33783F0B58AC6F1BA007763FFA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number: 0BEF
Signing time: Mon 21 Sep 2026 13:00:59 +0000
Manifest this update: Mon 21 Sep 2026 13:00:59 +0000
Manifest next update: Tue 22 Sep 2026 13:00:59 +0000
Files and hashes: 1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: rSGPi2iqdBsp+GETYcOa3uCt2Vp4/k5h/O6xmBNLbiU=)
3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:33:78:3f:0b:58:ac:6f:1b:a0:07:76:3f:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Sep 21 13:00:59 2026 GMT
Not After : Sep 22 13:00:59 2026 GMT
Subject: CN=a36903f539269c51e21d13b600e9d7310d3f5f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:6e:8f:5b:99:ca:42:42:39:bc:96:1d:5b:
68:29:59:27:41:07:5c:86:64:09:2d:c4:8d:9a:ee:
57:10:cb:9f:a4:08:c8:8a:7b:79:ed:03:13:9b:b6:
88:b9:6a:c3:6e:90:34:fa:07:3c:e7:11:3a:d8:b4:
96:e3:3f:6d:a1:cb:62:75:ac:b8:b6:fc:46:42:fc:
67:b1:c0:da:64:f6:0d:00:38:00:3c:79:a1:27:af:
77:f4:5d:92:20:ef:ca:d9:34:4c:dc:c6:e2:66:c3:
2e:1f:48:a6:51:a0:b3:ad:a4:6e:b4:dc:9d:2e:bb:
a9:f0:ad:08:5b:4c:6a:7d:55:03:28:9c:35:85:8e:
58:74:a5:0b:96:4c:cf:0e:5c:7c:21:4e:02:0b:06:
19:e5:d2:7c:ed:3e:f3:fa:4a:ed:f6:0b:40:66:b6:
32:1d:b6:cd:e3:d3:cb:b9:62:b4:3a:fa:01:db:61:
bd:e0:d1:6e:a8:bc:56:12:fd:be:da:8a:30:d4:4c:
39:84:19:22:11:90:f7:9b:f5:98:f0:93:0e:4d:77:
67:af:fa:fe:13:f5:a7:ae:3c:b2:45:46:7b:0b:18:
df:4d:2e:a8:52:4f:23:d8:6a:8c:e0:be:0a:9e:b9:
75:fd:e3:d8:11:8c:f9:7b:c9:6d:e0:b4:9c:99:08:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:03:F5:39:26:9C:51:E2:1D:13:B6:00:E9:D7:31:0D:3F:5F:69
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:87:36:e3:d9:ba:46:be:d6:a0:0e:86:e2:b6:3e:e3:ad:75:
81:24:cf:da:6f:e7:cd:86:17:6c:fc:46:f5:6d:36:02:bd:c5:
b5:3a:d5:52:b0:0c:d3:1a:5a:2c:72:4e:07:a6:95:dc:2d:ca:
6d:cf:f9:03:7e:96:08:bc:99:f9:21:a0:8d:4d:a7:13:5d:39:
24:5f:1b:9e:f6:6b:72:ce:e0:eb:82:ed:2a:f9:f9:41:b7:cb:
1a:40:e7:bc:a0:e3:12:7c:af:82:82:55:6f:f9:17:95:83:ef:
4c:27:72:44:4c:8a:19:65:d7:f8:e3:36:ba:ab:3f:eb:d4:8a:
50:ed:a8:6b:31:35:0d:44:10:81:86:fa:d6:70:ee:c1:99:6c:
92:9b:2a:19:19:a2:1f:a5:28:47:39:8a:41:08:9f:8c:49:b8:
f4:d3:27:76:c9:05:e7:67:ea:e2:4b:ce:2d:3e:49:89:1c:f2:
41:a1:70:eb:f8:fe:c9:e5:58:71:61:42:a3:72:b3:c8:d9:1b:
0c:e1:10:ce:41:69:e1:dc:6e:7d:f4:f9:3b:99:fe:ea:5c:90:
84:87:99:65:c9:b7:bc:d8:8f:82:32:2f:7f:df:34:57:8f:2a:
63:4b:0f:db:e9:4a:04:31:11:45:50:ff:f5:fb:ba:3a:c9:62:
55:e5:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:10:15 2026 by rpki-client