Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: PgRJAgqnLZdv6estJr1xewJvplyFJ7wrm10PQCUS3CQ=
Subject key identifier: 32:B2:63:10:DB:0A:6C:81:9D:49:B9:66:98:A7:5C:9B:03:16:B5:0B
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01A0005CE9B9CD084B11AEA991ECF0118160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 13:01:24 +0000
Manifest this update: Fri 14 Aug 2026 13:01:24 +0000
Manifest next update: Sat 15 Aug 2026 13:01:24 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 81QLXEIWvf7EOBCTcOg/oOfcFeuYmKbJzkVzlljmTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:e9:b9:cd:08:4b:11:ae:a9:91:ec:f0:11:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Aug 14 13:01:24 2026 GMT
Not After : Aug 15 13:01:24 2026 GMT
Subject: CN=32b26310db0a6c819d49b96698a75c9b0316b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:e2:42:98:5d:fa:5e:f0:d4:b5:7b:90:75:
88:51:6b:62:23:7d:61:b1:77:80:3a:16:30:a2:fb:
b3:3c:80:1d:95:8a:f7:c6:51:6d:fa:a4:d1:b5:7b:
72:a4:31:56:8e:58:4b:48:56:40:08:f0:ec:fb:69:
2a:e0:3e:d6:14:af:8c:19:d9:93:9f:48:c2:3a:8b:
e6:e8:ae:45:4c:e3:db:cf:ab:67:15:4c:4e:14:73:
a1:64:b9:9d:23:ee:f0:fa:1f:3e:81:fa:1d:c9:be:
53:03:d1:06:3d:f0:40:e1:e9:a7:69:20:3b:9c:79:
89:56:94:ac:3b:cb:bf:90:75:f6:c2:4d:9a:66:40:
e0:a3:1b:d5:bd:30:b7:cb:a7:99:de:b1:04:8a:9c:
c3:3e:a9:c5:8e:8f:22:a3:39:35:67:82:5a:cf:30:
b5:c1:81:95:04:bf:84:a8:1c:de:67:fa:2f:40:c9:
92:59:79:46:e5:cb:c8:0c:71:83:ca:3c:73:29:4f:
a3:94:7e:c8:44:08:43:1c:18:ae:3f:3d:e6:07:60:
47:81:80:cd:fc:e7:80:35:aa:ed:37:ad:4f:76:3d:
71:66:e8:df:0f:74:cf:da:a2:f4:11:02:fa:bc:05:
2f:f2:57:cb:49:d1:53:e5:44:a1:4e:3e:f8:c0:d4:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:63:10:DB:0A:6C:81:9D:49:B9:66:98:A7:5C:9B:03:16:B5:0B
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9a:a8:a5:62:ae:5d:65:60:26:36:30:e3:ec:3b:32:7b:76:
b0:7a:80:f1:78:97:5b:78:de:6d:40:80:83:50:3d:75:9f:b1:
f3:e7:af:11:55:29:2d:f1:52:25:3b:e7:a2:41:17:82:77:d7:
3f:0d:4a:42:ca:41:93:95:ad:4e:27:80:a2:fd:fa:f3:40:2d:
fa:ce:87:14:54:1b:94:ec:17:46:10:6e:f0:1b:1e:47:16:fa:
b9:49:11:27:2a:18:8c:66:35:ba:4a:38:8e:2c:6a:be:6e:69:
1a:60:7a:f6:ca:cb:33:62:a2:68:b9:b3:e0:2a:1c:73:83:dd:
3b:3a:ca:62:0b:00:83:ec:b4:af:27:58:eb:da:6c:9b:2c:ff:
18:aa:aa:a5:ee:dc:1a:50:8b:b4:05:9a:90:1a:98:c2:47:6a:
fd:be:ab:2f:fe:89:26:f8:7b:7c:ca:9a:37:98:d2:f1:5f:43:
e0:f1:e7:31:7a:ed:8b:5e:94:b1:42:29:70:0a:5d:7c:bf:8a:
33:bf:28:2a:c2:42:a2:43:4f:e3:61:29:1a:f0:40:da:95:e1:
2d:f1:cb:0a:07:e6:48:96:ae:e4:c4:70:04:cf:e6:37:79:e6:
11:55:42:5a:8b:22:50:0e:a2:35:9a:8e:bb:f2:28:26:51:e1:
7f:84:ab:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaAAXOm5zQhLEa6pkezwEYFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjYwODE0MTMwMTI0WhcNMjYwODE1MTMwMTI0WjAzMTEwLwYDVQQD
EygzMmIyNjMxMGRiMGE2YzgxOWQ0OWI5NjY5OGE3NWM5YjAzMTZiNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttHiQphd+l7w1LV7kHWIUWtiI31h
sXeAOhYwovuzPIAdlYr3xlFt+qTRtXtypDFWjlhLSFZACPDs+2kq4D7WFK+MGdmT
n0jCOovm6K5FTOPbz6tnFUxOFHOhZLmdI+7w+h8+gfodyb5TA9EGPfBA4emnaSA7
nHmJVpSsO8u/kHX2wk2aZkDgoxvVvTC3y6eZ3rEEipzDPqnFjo8iozk1Z4JazzC1
wYGVBL+EqBzeZ/ovQMmSWXlG5cvIDHGDyjxzKU+jlH7IRAhDHBiuPz3mB2BHgYDN
/OeANartN61Pdj1xZujfD3TP2qL0EQL6vAUv8lfLSdFT5UShTj74wNSwiQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDKyYxDbCmyBnUm5ZpinXJsDFrULMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5qo
pWKuXWVgJjYw4+w7Mnt2sHqA8XiXW3jebUCAg1A9dZ+x8+evEVUpLfFSJTvnokEX
gnfXPw1KQspBk5WtTieAov3680At+s6HFFQblOwXRhBu8BseRxb6uUkRJyoYjGY1
uko4jixqvm5pGmB69srLM2KiaLmz4Cocc4PdOzrKYgsAg+y0rydY69psmyz/GKqq
pe7cGlCLtAWakBqYwkdq/b6rL/6JJvh7fMqaN5jS8V9D4PHnMXrti16UsUIpcApd
fL+KM78oKsJCokNP42EpGvBA2pXhLfHLCgfmSJau5MRwBM/mN3nmEVVCWosiUA6i
NZqOu/IoJlHhf4Srlg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:28 2026 by rpki-client