Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: 39LTgFDcRXiJpCPzVozdlZCsB4c3MjbLdHgGr5HEb/Q=
Subject key identifier: 50:D9:71:78:26:5D:7D:0F:DA:0C:7A:21:CA:11:55:D7:83:6D:AE:08
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01A001A61145501A9730C9EB7A4992CA9B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 19:00:55 +0000
Manifest this update: Fri 14 Aug 2026 19:00:55 +0000
Manifest next update: Sat 15 Aug 2026 19:00:55 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: S0Pnnc7QH2zXYTKvmEA5TLZcZgxoO4gUdliS5PrikvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:11:45:50:1a:97:30:c9:eb:7a:49:92:ca:9b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Aug 14 19:00:55 2026 GMT
Not After : Aug 15 19:00:55 2026 GMT
Subject: CN=50d97178265d7d0fda0c7a21ca1155d7836dae08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:9d:4c:49:c2:78:37:b6:35:61:74:b1:e8:
4b:0a:d1:54:12:0f:55:bc:85:45:73:5f:33:e6:52:
be:e6:ca:5a:79:5e:b3:02:0a:c2:68:71:8c:81:a7:
94:43:09:c4:1c:36:1c:e2:17:66:98:85:4b:04:2e:
1e:cf:15:a3:c2:4c:1a:0e:32:c8:0b:18:ec:62:00:
5b:27:4e:b2:51:80:03:f4:61:d2:d5:97:6b:d8:9f:
d8:89:0d:de:a3:ef:98:dd:f6:27:77:7c:33:f9:46:
9a:f0:b7:96:13:1a:06:8b:84:78:eb:b2:e1:82:bd:
aa:c1:45:69:27:50:da:85:d4:36:99:22:62:5a:b2:
5e:89:73:55:24:46:b3:df:a6:5d:fb:f6:8a:2f:e3:
6a:19:21:77:2e:ed:33:95:8d:6c:2f:ed:90:b3:dd:
15:e2:d8:e0:ea:db:7d:01:e8:e8:03:34:6c:15:23:
d4:0f:c9:e0:93:8b:f9:54:bb:4b:25:41:2c:59:1e:
2a:8c:83:8c:1c:8e:a3:08:5c:e9:ff:d5:dc:b8:bf:
17:33:0b:6b:e4:3f:0a:fe:4b:80:9b:58:f0:c0:f6:
fd:af:32:16:63:4f:cf:79:03:6d:df:db:0d:b0:57:
7b:79:09:8e:7b:ac:83:0f:30:06:bb:c3:2a:a5:d0:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:71:78:26:5D:7D:0F:DA:0C:7A:21:CA:11:55:D7:83:6D:AE:08
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:de:fb:b7:0d:a9:08:98:ec:4a:0f:09:66:4a:a8:4c:00:6c:
d6:c6:b9:ac:57:bd:db:ce:7a:ae:5a:a5:01:48:ab:4b:86:f9:
65:dc:82:ef:b0:42:b3:4b:6d:7b:24:95:0c:1e:c1:e9:8f:f0:
c0:b7:dd:00:55:d9:ce:02:46:cc:08:7f:a9:a3:c3:c0:dd:dd:
83:f0:7b:3b:75:ad:5f:51:7e:ef:ec:b8:37:d8:2a:a3:72:84:
ee:71:9b:08:cc:9d:11:01:84:cd:1b:53:9e:8f:d8:5a:06:70:
95:ee:ce:07:73:df:ac:bb:0e:c4:c3:8b:cd:d0:0e:45:4a:c8:
b3:6a:18:a4:51:b3:30:bc:fe:59:f4:ff:68:dd:07:0b:16:7d:
4b:8c:4e:c4:40:90:b0:58:c9:5c:7c:ce:77:d9:40:d4:5b:5d:
87:3a:51:a7:c5:fb:96:22:6e:8f:69:0a:e9:f7:cb:ce:19:53:
8a:d1:cf:64:cf:78:86:8f:41:0e:f2:17:95:26:be:cb:22:5a:
52:9c:ee:e3:2b:e7:89:a7:38:2f:9c:0a:a4:c4:b5:c3:f0:cf:
9f:98:0d:4e:d1:0d:d6:a4:05:7a:ad:e7:c8:ff:cb:86:7d:d6:
56:f6:d7:41:9f:7d:7c:da:f5:54:4e:62:2f:48:0e:02:19:fb:
8b:3d:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:05 2026 by rpki-client