
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: xHCMYmkqbkS/jy01qod546C8jLiQxDlgvliw2AREcNk=
Subject key identifier: 79:49:ED:EE:19:53:89:81:CA:83:4D:F3:0F:5C:83:6A:81:41:92:AD
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 01A13DB7BE017759B1AB4F71570046E33CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0FB0
Signing time: Thu 15 Oct 2026 04:00:14 +0000
Manifest this update: Thu 15 Oct 2026 04:00:14 +0000
Manifest next update: Fri 16 Oct 2026 04:00:14 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: pD+NduKGdV/fnJGoDblybKD3lVFWySTQIFaWGFIvujk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:be:01:77:59:b1:ab:4f:71:57:00:46:e3:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Oct 15 04:00:14 2026 GMT
Not After : Oct 16 04:00:14 2026 GMT
Subject: CN=7949edee19538981ca834df30f5c836a814192ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d6:ad:1e:41:ab:d7:94:2c:21:43:9c:3b:e4:
c9:66:f6:55:0c:98:cc:59:80:87:91:75:b9:f5:32:
78:2a:33:4d:f4:d4:ea:8b:6f:f5:50:a9:25:f5:a7:
f5:7b:2d:f8:da:a9:d6:74:c1:f6:08:20:94:51:e5:
ff:35:b4:a6:75:14:cc:23:b1:be:96:be:67:02:c7:
d5:9f:0c:06:34:3f:6c:7b:86:48:d6:61:2e:82:d7:
66:fc:1e:98:0d:3f:34:ae:ec:fd:b2:48:21:6a:4e:
42:18:06:41:8e:64:ce:b3:1c:5f:b1:2d:7b:58:59:
66:12:a1:da:89:9e:62:72:9a:7a:fc:ad:7b:9f:2c:
ab:3a:62:29:eb:4f:24:75:fe:c3:25:75:35:be:24:
3f:1c:75:5c:c4:ee:21:43:22:76:ed:d9:56:e2:03:
ee:80:3a:cb:ba:ae:c3:1f:65:06:18:5a:2e:f3:9b:
0b:53:61:7f:74:64:87:8f:cc:c4:fd:09:53:ea:67:
6d:10:54:a7:55:4a:7c:ab:ab:86:d0:d4:d3:1f:d2:
b6:eb:fc:68:d4:6e:93:ad:2a:17:c6:50:07:a7:3c:
26:0c:3a:2c:1a:ce:68:3d:be:56:e1:b9:49:b5:13:
20:f4:d7:56:75:8c:53:6d:b6:5d:6f:00:11:93:e9:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:ED:EE:19:53:89:81:CA:83:4D:F3:0F:5C:83:6A:81:41:92:AD
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:40:b5:8d:9c:d9:92:09:c4:ec:ea:cc:bc:6c:9b:10:49:
bc:b3:05:d7:e6:96:77:51:8f:3e:52:c3:9e:4f:60:ca:3b:8a:
75:79:1c:f3:e6:15:9f:d0:d8:51:e0:f1:84:68:69:63:77:2a:
c3:fc:96:6d:c0:9f:09:57:49:73:d4:cd:dc:47:60:e0:de:2b:
e0:3a:cf:e9:40:74:03:fd:a4:45:74:e4:ed:bd:b5:59:45:2a:
8b:a3:c5:2a:a0:d7:3b:15:a0:14:01:ca:35:e5:04:95:c8:92:
b0:be:56:06:9c:a5:f5:57:66:25:83:3a:f3:55:0d:8c:15:2c:
ab:38:ec:44:de:04:67:94:a6:ea:f9:e3:76:da:b5:84:dc:0a:
35:4a:36:20:29:d3:41:80:d1:73:38:de:94:66:85:ce:41:a6:
a9:39:55:5c:48:9c:1b:0a:f3:d5:0c:b8:49:5a:56:a7:ee:17:
b7:c1:f1:0f:a0:7f:69:c7:4b:c7:0f:ea:e6:7a:eb:f2:5f:37:
11:be:d1:2e:bd:a5:68:f3:f5:c7:1f:5e:59:9b:00:f3:e5:cb:
76:0e:e8:e0:79:a2:f1:c0:29:3a:c2:68:a6:e7:0b:ba:cc:c9:
af:24:de:f2:e1:49:2f:8f:b2:cc:bb:c6:5b:1b:73:a4:aa:dc:
c2:58:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:38 2026 by rpki-client