Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: MtgYe8Qq3bZmHLhsm8YdBmcQUgOHo7OnP35H135C4ts=
Subject key identifier: 5F:5F:A7:4B:4B:95:55:A4:A7:84:AE:8C:A3:4F:AC:CA:E8:3B:73:11
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019CAAC6A93EA4F892B498ADFE691B28BDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 13CB
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: tjMSSgV32x/ZLpJ/Acl1sqDvPowUksMuyAMZbD1x/RQ=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a9:3e:a4:f8:92:b4:98:ad:fe:69:1b:28:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=5f5fa74b4b9555a4a784ae8ca34faccae83b7311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:cf:60:84:b7:47:25:2f:35:4e:a3:3f:f2:
75:8b:23:6b:56:d1:31:74:9f:b0:9a:88:89:83:0d:
ad:2b:75:6b:8a:84:e8:5b:18:4e:d0:70:40:07:91:
1d:2c:05:2f:a2:bf:6b:d4:f4:93:37:44:69:9f:3b:
51:5a:bb:0f:a3:9c:13:64:9e:bd:32:53:15:02:7a:
88:1e:a8:a3:8a:83:81:69:14:e6:c7:dd:00:a6:e4:
78:8e:b4:45:5e:f6:69:d4:93:5e:88:ca:e8:12:89:
d9:a9:a8:29:14:da:0f:51:f7:65:d0:c7:18:95:23:
65:e1:36:af:54:9e:03:c3:78:7f:37:ba:8f:59:1d:
ef:6e:52:d8:27:b5:23:54:32:a9:1b:40:87:32:10:
21:ec:14:40:5e:db:8a:8a:55:e1:8a:37:23:15:b9:
7d:17:a4:7a:30:34:d1:ba:1b:ec:2f:0b:6a:45:99:
80:e0:3a:70:19:68:8c:f8:1a:1f:3e:4c:89:28:5f:
45:7b:35:aa:ce:5e:4b:2b:0e:a2:2a:74:04:3e:7f:
b2:c5:39:d6:f7:38:79:f9:e5:6a:09:90:61:54:6d:
1e:87:b7:f4:11:8c:d9:26:cb:34:36:07:97:73:36:
9b:ca:6f:de:dc:4e:38:34:d7:7b:0f:90:e8:ee:0f:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:A7:4B:4B:95:55:A4:A7:84:AE:8C:A3:4F:AC:CA:E8:3B:73:11
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c4:7b:16:3e:69:d2:6f:b9:1e:61:ac:45:b0:fe:91:b7:fe:
9e:1f:99:6d:1c:cd:14:9d:97:26:18:14:35:bb:d1:a7:5e:87:
57:1b:f6:21:1a:fb:91:6a:78:8d:46:00:cb:fb:5c:13:38:3c:
88:6c:fe:5c:a9:5b:17:57:25:12:7d:8a:18:59:0f:fc:67:9d:
fd:a1:20:2c:77:8a:17:5d:25:7d:c9:46:90:36:ef:48:46:bf:
12:69:21:5b:4b:95:97:f3:ad:47:93:6c:dd:96:11:35:62:7b:
f2:dc:2c:84:38:56:8b:98:9a:21:b9:3b:51:25:21:91:eb:92:
c2:4d:ff:95:9f:49:8e:59:c4:31:dc:30:21:ca:83:be:80:97:
2a:83:cb:60:75:24:f4:e9:99:72:ad:75:b6:20:aa:fc:9b:2c:
6a:8a:67:1b:2b:a1:43:62:bb:89:6b:73:1b:e0:5f:eb:de:43:
aa:ed:cb:34:10:97:e9:32:fb:d7:b0:fc:d3:2f:39:94:93:fc:
63:59:03:28:80:0d:83:6c:2f:b7:96:5b:72:4c:90:9c:e8:82:
ec:0a:a9:ea:b8:9c:de:b4:d6:4e:fc:d6:7b:af:82:6b:c6:0a:
88:e0:53:dc:69:e9:f2:58:c6:f8:87:bc:66:82:38:49:5f:dd:
86:84:63:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:42 2026 by rpki-client