Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: k4pP2D4aboVu3OG2owey+wY+zfLu9g07OgI9w7Q5I2g=
Subject key identifier: 17:DF:03:4B:45:A6:79:30:AF:46:27:DC:31:A2:A7:28:4D:06:70:14
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01A13D139BB6770B2AA2D2DE5C9FDE066EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 01:00:57 +0000
Manifest this update: Thu 15 Oct 2026 01:00:57 +0000
Manifest next update: Fri 16 Oct 2026 01:00:57 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: vuNAMBze6D68LxJgWPSzGTo1ZN18lqL1B3SZEdaH/Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:9b:b6:77:0b:2a:a2:d2:de:5c:9f:de:06:6e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Oct 15 01:00:57 2026 GMT
Not After : Oct 16 01:00:57 2026 GMT
Subject: CN=17df034b45a67930af4627dc31a2a7284d067014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:ea:a2:c4:3f:40:79:c8:7d:4d:83:29:92:
bc:4b:6b:c2:a0:bd:b4:5f:b4:c6:7b:1d:c9:1e:df:
e4:06:9c:69:77:52:10:a3:95:f9:8c:f9:79:24:5e:
93:1d:2e:45:6a:de:46:d1:d4:4d:fd:b5:9c:aa:a9:
03:98:62:f9:c6:97:38:0e:25:ee:cc:08:f6:ba:9f:
98:46:fa:7e:fb:92:f1:0d:43:5f:14:1b:a9:30:2d:
16:0b:4c:07:26:d3:f5:a9:3f:8f:57:6e:e0:15:f6:
0b:95:be:ee:73:2c:11:cd:22:11:b8:16:91:ec:34:
f1:b7:9d:20:05:ff:0a:6a:e2:0f:b4:75:8d:31:a9:
33:e9:00:7d:a2:5d:7a:7c:ea:ac:dc:63:5a:e9:a6:
b3:f3:c4:47:f5:50:0e:df:c0:34:25:2c:fe:16:c9:
45:ee:36:22:97:eb:6e:17:c2:94:b2:4c:ba:85:2f:
15:23:fa:eb:b8:3b:28:8e:10:04:1c:f1:0d:12:63:
c8:07:b9:80:83:49:a2:0b:63:17:36:e4:bf:a0:60:
15:b7:24:68:1e:0b:fc:75:1d:3e:6f:a6:29:96:da:
16:75:7b:7b:85:ad:3b:b5:d1:ba:50:14:ab:ba:23:
19:03:e9:8d:a1:0b:e7:c4:27:3c:c1:ba:2b:cb:d6:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:03:4B:45:A6:79:30:AF:46:27:DC:31:A2:A7:28:4D:06:70:14
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ca:9f:e4:2e:ad:11:fb:4d:e6:96:6e:ad:9e:60:29:47:50:
89:7f:81:47:21:99:69:e9:30:da:ec:4c:34:f8:8c:2e:bf:7d:
27:c6:fe:a9:0e:55:ab:4e:18:9f:89:08:75:9e:6e:e6:6d:40:
40:19:7f:46:92:e5:6b:ff:38:73:bb:e0:6b:9e:4f:10:6f:ef:
77:ea:f7:e8:7b:31:88:d7:36:8d:1a:03:c0:e6:67:0d:27:32:
55:01:fa:f1:c3:20:81:17:56:e2:0e:13:6d:13:1c:5c:33:ad:
c3:09:9c:d0:c9:3a:12:01:b1:b9:b2:21:97:f5:10:36:9c:cc:
98:3d:f8:4c:09:85:a4:7f:5f:43:f6:12:f3:9d:ee:14:02:d1:
bf:f7:45:7f:ff:31:94:49:cd:12:75:5f:b6:0b:5e:04:7c:e2:
3c:7b:fe:b0:c4:a8:42:b4:0b:d6:d8:33:65:1f:d8:14:22:17:
5c:27:f2:09:e0:74:bb:7d:f1:d6:e0:e6:99:30:0d:e8:c1:56:
9f:71:25:f9:78:5f:1d:ca:48:f2:9b:14:00:ea:a0:54:e6:c4:
0b:a4:e4:dd:33:11:e3:55:0c:c0:19:ba:38:48:87:d7:38:1e:
02:4b:32:e7:fb:88:af:b2:d6:62:b9:62:44:62:44:6a:e7:c6:
33:51:ef:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE9E5u2dwsqotLeXJ/eBm6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjYxMDE1MDEwMDU3WhcNMjYxMDE2MDEwMDU3WjAzMTEwLwYDVQQD
EygxN2RmMDM0YjQ1YTY3OTMwYWY0NjI3ZGMzMWEyYTcyODRkMDY3MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRPqosQ/QHnIfU2DKZK8S2vCoL20
X7TGex3JHt/kBpxpd1IQo5X5jPl5JF6THS5Fat5G0dRN/bWcqqkDmGL5xpc4DiXu
zAj2up+YRvp++5LxDUNfFBupMC0WC0wHJtP1qT+PV27gFfYLlb7ucywRzSIRuBaR
7DTxt50gBf8KauIPtHWNMakz6QB9ol16fOqs3GNa6aaz88RH9VAO38A0JSz+FslF
7jYil+tuF8KUsky6hS8VI/rruDsojhAEHPENEmPIB7mAg0miC2MXNuS/oGAVtyRo
Hgv8dR0+b6YpltoWdXt7ha07tdG6UBSruiMZA+mNoQvnxCc8wbory9bNpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBffA0tFpnkwr0Yn3DGipyhNBnAUMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8qf
5C6tEftN5pZurZ5gKUdQiX+BRyGZaekw2uxMNPiMLr99J8b+qQ5Vq04Yn4kIdZ5u
5m1AQBl/RpLla/84c7vga55PEG/vd+r36HsxiNc2jRoDwOZnDScyVQH68cMggRdW
4g4TbRMcXDOtwwmc0Mk6EgGxubIhl/UQNpzMmD34TAmFpH9fQ/YS853uFALRv/dF
f/8xlEnNEnVftgteBHziPHv+sMSoQrQL1tgzZR/YFCIXXCfyCeB0u33x1uDmmTAN
6MFWn3El+XhfHcpI8psUAOqgVObEC6Tk3TMR41UMwBm6OEiH1zgeAksy5/uIr7LW
YrliRGJEaufGM1HvpQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:22 2026 by rpki-client