Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: Wx8pfUg0rwhrZjXWn45mGy4yAN0CPIGvbKcO2zmM5ek=
Subject key identifier: F8:2D:3F:EC:2D:AF:03:F0:85:B5:BB:AF:8E:B9:24:C2:FD:9A:F3:FC
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 01A001DCA5B4EE3A4227B90B2B3E3AD35C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 1027
Signing time: Fri 14 Aug 2026 20:00:32 +0000
Manifest this update: Fri 14 Aug 2026 20:00:32 +0000
Manifest next update: Sat 15 Aug 2026 20:00:32 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: oCtm+26LRAhD9puBbE7YiG4f6aZAUsAiyMC9x+RIA8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:a5:b4:ee:3a:42:27:b9:0b:2b:3e:3a:d3:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Aug 14 20:00:32 2026 GMT
Not After : Aug 15 20:00:32 2026 GMT
Subject: CN=f82d3fec2daf03f085b5bbaf8eb924c2fd9af3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:1e:f2:7a:d6:75:1d:61:4b:db:66:b8:8b:
df:49:69:1b:e6:e1:f7:2b:5b:30:50:8c:49:13:e7:
b4:7b:04:24:e8:73:5d:69:6f:db:8c:61:c9:9d:bb:
89:95:10:1d:c5:fb:37:d7:cc:b8:5c:2b:4e:52:c5:
12:25:e1:24:87:ac:6f:cf:d4:37:04:34:a8:70:10:
a3:9e:01:06:77:6c:15:32:78:dd:de:a1:e3:ae:23:
e6:77:06:08:42:c6:cf:8b:1e:98:c6:2c:52:b9:c0:
19:ce:a2:40:30:45:71:f5:ab:ef:e7:45:2a:0b:92:
c0:34:27:ff:0e:cb:bc:76:3a:6c:7f:fd:f4:4a:86:
f5:c1:62:e3:66:39:b7:16:af:92:b5:e5:99:78:6e:
62:b7:2e:65:dd:b6:26:d7:0e:7c:2d:05:9b:30:71:
95:fd:f4:cc:2f:c8:7a:92:28:66:0b:9f:e7:93:b8:
e1:6c:80:cc:56:51:28:5d:21:15:7c:e9:47:62:12:
b8:ff:a3:d8:39:59:6a:44:a0:69:b0:2e:3c:61:66:
cb:59:89:c4:63:3d:9a:c4:88:33:f1:a9:3c:7d:58:
4d:06:aa:27:77:ab:d6:bb:9c:17:d2:e4:f9:2b:29:
f7:2e:47:ac:e9:46:07:d8:a8:13:ad:f7:b7:90:4d:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2D:3F:EC:2D:AF:03:F0:85:B5:BB:AF:8E:B9:24:C2:FD:9A:F3:FC
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:28:4b:ef:40:59:9f:4b:6d:1a:4c:3c:68:d4:a3:3d:2b:
fa:b6:89:18:57:94:80:41:3c:ba:25:14:16:bc:03:2e:17:01:
e5:bf:75:e6:7e:8c:0a:9d:9a:fe:8b:fd:b9:05:4b:c5:d1:8d:
58:a3:48:62:cc:f4:29:c3:17:d1:42:5a:bb:6f:44:cb:ac:68:
8e:44:c1:b4:e6:68:d3:65:45:bc:7c:2e:36:b9:cc:fc:2d:e7:
11:09:a1:99:94:df:b5:37:16:aa:33:e7:b8:bb:5b:5f:f8:6b:
9d:b9:f5:3a:31:f3:24:ae:1b:58:1e:f2:c1:1d:63:b7:61:a9:
e8:fc:ad:85:07:2c:be:bd:a8:9f:0e:6f:e9:cc:29:17:a4:a4:
4f:6a:fa:c9:60:6d:ae:98:9c:c1:0a:17:bc:9c:8d:7f:81:9d:
ec:ae:ac:2c:d0:39:c0:c8:ca:ea:db:4a:25:d5:67:9c:28:06:
1d:00:11:1a:fe:fb:35:b6:96:a6:77:d7:3d:e9:d8:96:8d:8e:
55:70:bb:92:cb:bf:84:2b:ab:39:4f:6e:f4:cf:92:c9:02:10:
75:3e:01:83:af:02:9c:54:54:5c:c3:1f:ec:19:ed:20:fd:fe:
c1:ea:c2:10:ce:f9:c2:06:33:b6:bb:94:9a:c2:16:75:cb:00:
ff:a4:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:08 2026 by rpki-client