Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: 7gAbm0xvuuJbNeVPAJiFEI05/G9hq6N80jVe/D8Vh1M=
Subject key identifier: B7:2C:AE:72:C8:7C:E2:BB:E8:57:01:D4:48:94:48:31:B4:0C:99:1B
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019E30057BC65F65AF5D203EFD713FB042F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 085D
Signing time: Sat 16 May 2026 09:02:06 +0000
Manifest this update: Sat 16 May 2026 09:02:06 +0000
Manifest next update: Sun 17 May 2026 09:02:06 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: nhpDdu7MiSZ8Y3jhwjcVmZdH7Nb6fsYnn6Tz6+ZtmP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:7b:c6:5f:65:af:5d:20:3e:fd:71:3f:b0:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: May 16 09:02:06 2026 GMT
Not After : May 17 09:02:06 2026 GMT
Subject: CN=b72cae72c87ce2bbe85701d448944831b40c991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:1e:1c:74:1b:7d:69:f0:4d:2c:d1:b4:5c:
69:53:af:b9:f8:1f:06:ac:6a:6a:57:9e:8a:eb:e9:
17:fc:64:ef:3e:aa:4c:c3:bd:40:4e:f8:64:5d:8b:
78:cd:a0:a3:28:23:21:b1:e3:2e:8f:0b:ff:03:97:
cb:28:e1:14:33:47:87:a0:05:92:50:8c:dd:32:fe:
31:39:3e:8e:1d:c3:89:19:65:b0:98:63:4c:d8:3a:
0f:2a:38:f6:86:03:5e:54:eb:2d:6c:ba:1c:c3:f5:
b1:99:11:da:66:c0:f4:d3:a9:ab:c1:d7:94:20:ed:
b1:4f:b5:f3:85:db:df:4d:63:ed:21:02:a6:44:84:
28:3f:52:13:6b:c9:87:65:bb:4b:b9:bb:bb:e2:79:
90:0d:6b:a2:e5:d6:43:e4:30:e9:b2:02:e6:fd:68:
98:26:f0:4d:a3:e4:e4:b1:c1:99:6c:4c:84:93:2b:
82:97:8d:b4:64:83:c2:33:05:7d:b5:c1:a7:f7:4a:
ad:79:aa:80:2f:bd:06:9e:0c:05:f7:0b:71:25:26:
44:44:a0:7a:66:cc:3a:c3:79:29:91:c6:5b:04:10:
1c:a9:31:16:61:22:b3:1f:95:be:fb:c0:b4:43:6b:
06:3f:a5:20:b0:02:1d:94:33:e7:13:7e:d9:9f:3d:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:AE:72:C8:7C:E2:BB:E8:57:01:D4:48:94:48:31:B4:0C:99:1B
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:0b:e4:c8:93:c5:62:89:bf:f3:b8:d1:12:8c:47:65:5f:
d1:e4:a9:0a:0e:55:98:f5:55:4a:fa:e9:f4:9a:5a:a4:f5:42:
78:6f:b7:45:7f:07:83:e3:51:65:62:08:1c:da:c8:2f:d1:80:
2b:5a:d9:7d:ec:fb:27:54:73:eb:33:ba:a9:8b:37:bc:06:9b:
68:e0:df:ca:3c:af:53:15:13:b8:5b:2c:63:fa:97:d1:f1:bf:
d5:12:ab:b3:35:4e:65:75:9a:2c:7c:44:ba:bc:fb:3c:02:c3:
4c:75:78:b7:3b:40:cc:5e:19:d6:17:f4:d0:fe:ae:8b:a5:d7:
56:32:b6:07:c9:e5:b1:2a:88:7d:16:64:83:8e:85:4a:a9:d6:
86:6e:ca:9c:b5:94:25:89:d8:b0:db:c1:c0:eb:39:c4:59:a1:
cb:24:c9:9e:69:d4:78:10:69:ef:0e:5c:02:86:a8:4b:93:82:
38:e3:f8:3f:4e:ef:2e:7a:ee:7e:cf:8b:0b:20:bf:71:7d:f3:
cb:89:aa:08:4c:f6:cf:63:31:43:5d:6f:f5:21:d0:09:91:94:
43:6e:b1:63:e9:f2:e8:bc:ae:b6:ed:c6:81:15:1a:4a:ee:f7:
91:e5:84:e7:63:8c:49:26:50:0e:22:b8:fe:4e:32:90:97:5a:
bb:ba:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:08 2026 by rpki-client