Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: TSbPIOKTeJ7eBd17ml473ExqVAbEWLc5khOTUR9QscI=
Subject key identifier: 51:E7:7E:E3:E8:C8:EE:05:DE:D8:2C:B2:7D:8E:F4:E4:1D:40:52:89
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019F17C326BF5DED72A1668EBACE138E24C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 08D5
Signing time: Tue 30 Jun 2026 09:01:33 +0000
Manifest this update: Tue 30 Jun 2026 09:01:33 +0000
Manifest next update: Wed 01 Jul 2026 09:01:33 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: XHkw0z3Hs2PpQ5oBN6O9Nex0PqsE/eklg9MDo6T7Eyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:26:bf:5d:ed:72:a1:66:8e:ba:ce:13:8e:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 30 09:01:33 2026 GMT
Not After : Jul 1 09:01:33 2026 GMT
Subject: CN=51e77ee3e8c8ee05ded82cb27d8ef4e41d405289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:68:2b:ab:ec:29:aa:5e:c4:ee:30:e8:20:
a9:78:8a:c1:da:29:dc:05:3b:f1:9e:79:71:43:4c:
64:5d:bc:ef:e4:5a:96:3a:8c:5a:e1:4f:0d:db:e7:
88:ad:32:2b:8c:8a:db:3d:db:b4:1a:b1:ba:41:c0:
eb:d8:f9:02:ce:56:20:f1:96:41:06:da:d6:c5:cc:
d3:dd:e0:da:d9:f7:92:ca:14:3f:7f:9b:a4:74:54:
1c:a5:ac:5f:ef:79:4b:97:e5:9a:e1:20:80:d5:31:
a1:d3:f9:35:8c:4e:18:10:e3:6f:9f:15:46:a8:40:
18:49:52:c0:ef:41:57:8f:08:08:2b:55:d4:3d:de:
72:f8:28:b9:03:8c:85:7c:e0:9c:ca:3b:41:3b:82:
b2:eb:4d:8b:b5:b1:c2:f2:b4:0b:fb:e7:22:e8:fe:
f2:fd:88:c1:0e:ce:e4:97:d6:39:e6:e3:a2:11:9d:
1b:4c:9a:34:ad:47:1b:3e:47:9d:c7:e0:90:29:e1:
1e:f6:24:10:01:fe:f3:58:99:d9:bc:21:ee:26:51:
c5:8e:54:94:48:e5:17:d0:27:f8:9e:a9:12:98:82:
f8:40:77:47:3d:1b:b6:73:62:b0:bc:0b:0e:14:c5:
33:2e:0d:19:c4:91:3a:4f:76:e7:e9:a6:c6:e9:60:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:7E:E3:E8:C8:EE:05:DE:D8:2C:B2:7D:8E:F4:E4:1D:40:52:89
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0b:9d:a0:47:91:a2:49:c0:85:c4:69:42:b8:60:ff:c8:cc:
ee:91:07:56:e4:53:a5:25:d0:e1:7a:4f:05:66:3a:ae:04:2d:
45:da:21:fa:8c:24:c4:1b:46:c1:80:e2:75:44:b6:df:65:48:
d6:62:68:c3:5b:bd:1e:26:27:25:59:ed:4a:0a:29:01:35:75:
63:00:e9:29:f9:25:91:df:aa:e6:72:b2:e8:20:76:7b:a8:2e:
58:fa:19:ca:26:e0:83:db:88:ae:0c:64:ee:fd:20:e3:41:ad:
68:af:58:a1:81:c2:f1:d9:da:f8:42:53:d4:83:51:c8:12:41:
bd:2c:33:ae:51:72:2e:5f:29:7a:29:31:ae:13:17:77:c7:df:
40:8e:44:85:6b:2b:62:01:64:28:21:1f:e4:c1:af:33:01:9f:
74:08:07:78:f0:14:ec:db:8d:cf:d3:9a:44:f2:99:6e:49:fc:
c0:e6:f7:80:9b:db:75:01:09:31:ed:14:a6:7d:47:55:2f:2a:
4b:50:70:ea:bd:a8:41:66:45:91:9e:7f:a4:14:b6:ca:02:dc:
09:ac:0c:39:a5:29:0b:ae:b0:92:58:36:89:f7:c1:70:c9:e5:
9c:45:bc:d3:4e:1c:6f:83:c3:8b:f8:bf:ed:3b:bb:de:a5:25:
37:b9:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:35 2026 by rpki-client