Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: jZSB8+aOpwlFrT2cRvIQWYCAlW83X5as07yPnpVrdwQ=
Subject key identifier: 95:E8:A1:73:70:C3:DD:CF:59:27:0C:38:36:3E:3E:8D:80:F2:75:17
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019CAAFD941159C98112798A0DAFFF488B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0CEC
Signing time: Sun 01 Mar 2026 20:01:10 +0000
Manifest this update: Sun 01 Mar 2026 20:01:10 +0000
Manifest next update: Mon 02 Mar 2026 20:01:10 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: sbCA+6Y0QFhcafYOjy8QlwmvNm955oCCz44qbqhdgnA=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:94:11:59:c9:81:12:79:8a:0d:af:ff:48:8b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Mar 1 20:01:10 2026 GMT
Not After : Mar 2 20:01:10 2026 GMT
Subject: CN=95e8a17370c3ddcf59270c38363e3e8d80f27517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:8f:5b:be:54:49:2f:d9:f0:42:ea:e6:b2:
41:34:4a:b9:44:ec:20:fb:49:68:b9:8f:64:c1:54:
8a:fb:53:34:74:4d:3d:64:3c:d2:4c:e0:57:82:38:
08:f8:9c:45:e1:a9:c5:01:31:b4:5a:98:73:65:50:
8a:08:8b:0e:18:b6:10:62:a8:1f:22:2f:6d:40:a0:
d3:07:ba:5c:cc:7d:bb:f9:b5:1d:fa:5b:da:2f:e5:
ff:a0:6e:00:72:9c:56:75:9e:98:1b:e5:82:d1:90:
44:0f:e6:d9:62:0c:62:34:22:fc:a2:37:c9:c8:50:
b9:20:b3:44:24:84:e6:85:f4:ad:e1:10:6d:a3:26:
af:3b:5f:7d:ef:d1:99:8f:ee:ac:46:9e:60:22:20:
e1:22:2e:c2:56:2f:1d:d8:6a:9f:51:34:57:e2:aa:
ec:49:68:f0:d2:f7:31:aa:ec:c7:d8:e0:ff:9f:8a:
54:d2:31:6a:69:2c:3e:58:7b:f7:10:10:77:d0:98:
e9:b5:57:ee:4f:22:09:cd:11:df:4b:ca:ec:d7:69:
65:de:cd:ef:e9:65:69:f2:7a:c3:fc:d6:2d:46:26:
bc:c7:4f:91:a0:5b:6d:14:8a:a8:a3:d7:9f:f1:98:
6a:10:bd:7a:f4:af:4c:b3:1b:c8:7c:03:53:79:c7:
82:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E8:A1:73:70:C3:DD:CF:59:27:0C:38:36:3E:3E:8D:80:F2:75:17
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0b:f9:e4:0a:c9:d9:d1:00:bf:81:fc:5d:d3:d6:19:12:36:
40:4f:95:29:e3:7b:65:51:cf:1e:1b:4c:8d:e3:60:33:fa:89:
7a:bf:6e:44:aa:51:88:41:f5:cd:6e:49:02:2a:06:7e:b4:93:
20:d0:a8:65:21:77:30:5f:97:dc:9a:09:4d:49:e7:69:a1:15:
ad:4f:d5:7c:7e:8d:a9:82:6a:cc:36:07:89:13:fa:70:7a:8e:
c7:1d:f6:bb:a9:d7:38:6c:b4:b4:14:60:05:ac:cd:03:d0:9f:
83:a9:ce:67:31:a8:59:6a:6c:24:d5:2c:30:57:bb:2d:f2:81:
07:64:a6:61:cb:7e:d7:2c:a4:40:f5:02:05:f5:56:b8:79:0d:
12:9c:03:82:d1:da:53:7e:7a:00:16:0e:94:9b:18:b9:1f:0e:
30:eb:ea:7d:34:3a:5a:d8:f0:cd:b4:62:ee:d1:89:dd:51:8b:
3c:1a:32:1f:58:ae:86:7f:d6:48:e8:2d:10:2a:7b:6b:5c:56:
c5:6a:02:d5:be:54:02:93:8d:6d:b5:43:a8:ce:39:0d:3b:ce:
11:44:e0:d0:a2:f4:e9:8c:87:59:81:d0:67:86:23:76:21:5f:
45:be:8c:e9:d5:a1:7a:08:54:0c:1a:a3:80:94:6c:f4:9c:6f:
89:d7:c7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/ZQRWcmBEnmKDa//SIsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1
MTk1YTQwHhcNMjYwMzAxMjAwMTEwWhcNMjYwMzAyMjAwMTEwWjAzMTEwLwYDVQQD
Eyg5NWU4YTE3MzcwYzNkZGNmNTkyNzBjMzgzNjNlM2U4ZDgwZjI3NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+GPW75USS/Z8ELq5rJBNEq5ROwg
+0louY9kwVSK+1M0dE09ZDzSTOBXgjgI+JxF4anFATG0WphzZVCKCIsOGLYQYqgf
Ii9tQKDTB7pczH27+bUd+lvaL+X/oG4AcpxWdZ6YG+WC0ZBED+bZYgxiNCL8ojfJ
yFC5ILNEJITmhfSt4RBtoyavO19979GZj+6sRp5gIiDhIi7CVi8d2GqfUTRX4qrs
SWjw0vcxquzH2OD/n4pU0jFqaSw+WHv3EBB30JjptVfuTyIJzRHfS8rs12ll3s3v
6WVp8nrD/NYtRia8x0+RoFttFIqoo9ef8ZhqEL169K9MsxvIfANTeceC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXooXNww93PWScMODY+Po2A8nUXMB8GA1UdIwQY
MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt
ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi
LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQv55ArJ
2dEAv4H8XdPWGRI2QE+VKeN7ZVHPHhtMjeNgM/qJer9uRKpRiEH1zW5JAioGfrST
INCoZSF3MF+X3JoJTUnnaaEVrU/VfH6NqYJqzDYHiRP6cHqOxx32u6nXOGy0tBRg
BazNA9Cfg6nOZzGoWWpsJNUsMFe7LfKBB2SmYct+1yykQPUCBfVWuHkNEpwDgtHa
U356ABYOlJsYuR8OMOvqfTQ6WtjwzbRi7tGJ3VGLPBoyH1iuhn/WSOgtECp7a1xW
xWoC1b5UApONbbVDqM45DTvOEUTg0KL06YyHWYHQZ4YjdiFfRb6M6dWheghUDBqj
gJRs9JxvidfH/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:27 2026 by rpki-client