Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: Xwtx9foKICiE7h3kdcUed8mixnx+KEbiERUA1dmUYaI=
Subject key identifier: 9E:FA:D4:8E:BD:C9:FC:80:1D:30:83:5E:8C:2F:92:98:E6:82:CD:BB
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01A13C6E5DCB2F4725DE2017BACA4130B593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 1A9F
Signing time: Wed 14 Oct 2026 22:00:28 +0000
Manifest this update: Wed 14 Oct 2026 22:00:28 +0000
Manifest next update: Thu 15 Oct 2026 22:00:28 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: z/lElyY2gb5JHJpuDwdkhHQtwQbEcbBB/RJpWmuxLno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:5d:cb:2f:47:25:de:20:17:ba:ca:41:30:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Oct 14 22:00:28 2026 GMT
Not After : Oct 15 22:00:28 2026 GMT
Subject: CN=9efad48ebdc9fc801d30835e8c2f9298e682cdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:1f:1d:6a:87:37:b1:24:02:a3:4e:ab:fb:
a0:07:66:e8:d9:63:66:c5:e0:a9:44:79:74:8e:4c:
42:48:a7:49:8b:a5:b9:8d:9b:04:2c:e5:61:25:f6:
3b:65:b0:ec:4a:81:f6:c5:ea:71:19:6d:7b:61:7d:
25:ee:e2:d6:35:ef:f8:07:41:fe:61:a3:ea:28:a9:
f4:5a:0b:e8:5b:41:1b:32:99:82:29:df:6e:5a:22:
90:aa:d7:30:d9:8c:1d:15:98:c1:64:ce:4f:af:f4:
dd:4d:41:cb:38:6f:ca:bf:9c:e2:9d:43:78:fc:75:
0a:fd:09:33:3f:3d:3b:0f:6f:42:a4:f5:58:ee:6b:
f0:b3:55:f4:87:74:da:53:ce:f0:c8:ca:3c:48:28:
57:03:36:1e:3c:02:4c:da:a0:25:48:13:9a:b5:83:
f8:e8:c6:81:a8:19:63:9e:34:f5:53:69:ad:21:8d:
62:b9:45:56:7b:a0:d1:41:b3:f9:29:18:4a:2a:62:
5b:a8:62:6e:b4:a8:d6:e7:f3:87:91:a5:80:e0:4d:
20:8b:79:68:e8:37:6f:39:37:fe:3c:5f:8d:84:90:
eb:eb:e2:a6:f7:85:40:56:46:43:10:ce:4c:37:72:
e2:a3:63:dc:5c:01:8f:81:bf:47:e1:82:ed:56:55:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:D4:8E:BD:C9:FC:80:1D:30:83:5E:8C:2F:92:98:E6:82:CD:BB
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1c:62:1e:5e:44:1f:ef:c9:d8:eb:2d:57:2c:5a:e8:58:ce:
9b:0d:38:e8:b3:12:58:7b:61:aa:f4:18:a3:c4:7c:1f:de:01:
c5:1d:0a:8f:e0:71:6c:4a:43:7b:e6:36:de:75:12:fe:fd:6f:
42:f2:3f:ef:b1:c4:84:c0:4d:ef:1a:b7:81:7e:89:ac:6b:be:
d2:d8:d1:3f:50:dd:00:f4:d9:c7:40:29:5b:59:4d:f5:a5:3c:
5b:cf:16:7b:25:ad:07:c9:de:94:5f:e5:86:f0:ad:2b:ff:31:
fa:95:c8:9f:79:96:8e:e5:4d:67:2c:2e:c1:7a:ae:87:5f:2a:
41:9d:21:11:c7:ef:5d:91:ec:fc:51:09:f3:15:42:a8:7b:9a:
6b:97:20:56:e0:1f:7d:c4:2a:32:22:4e:83:a3:f1:24:17:60:
e0:10:3b:a5:48:32:46:9c:77:b3:85:0f:e7:ac:8a:e1:1e:8d:
4d:43:71:be:41:2d:db:b8:8a:4d:23:db:6e:a5:8e:99:41:25:
27:07:b7:98:11:f2:ca:6f:94:f3:27:85:36:bb:43:dc:98:83:
92:84:33:38:4c:41:68:5b:6a:58:70:33:10:82:62:2c:42:48:
f8:b6:ba:f0:79:22:6c:bf:69:2f:fe:f7:5b:bf:25:4a:52:26:
fb:a6:53:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:40 2026 by rpki-client