Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: l/VcComQtkLpfkclx3OmbkKsgDzyKlVcTXSk/+Ui+Oo=
Subject key identifier: A0:F6:47:55:97:F4:D4:F2:FB:F1:ED:3A:01:28:BC:E2:A5:83:B4:A5
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01A13F02E38441937AC0E0C3A6C7FE9DEC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1536
Signing time: Thu 15 Oct 2026 10:01:56 +0000
Manifest this update: Thu 15 Oct 2026 10:01:56 +0000
Manifest next update: Fri 16 Oct 2026 10:01:56 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: Qpd1eaxgTpTdtAaQrUq8u5HBEGCSh9kzqd09eR6Ab1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:e3:84:41:93:7a:c0:e0:c3:a6:c7:fe:9d:ec:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Oct 15 10:01:56 2026 GMT
Not After : Oct 16 10:01:56 2026 GMT
Subject: CN=a0f6475597f4d4f2fbf1ed3a0128bce2a583b4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:d1:fa:e7:cf:ee:86:a2:29:2f:61:61:41:
44:16:37:50:60:1e:73:0b:24:ca:fb:a7:ac:cc:57:
fa:24:9d:08:42:97:7e:d5:31:82:a5:31:8e:a7:53:
63:f7:1d:a5:69:cb:69:79:b3:9b:07:d5:4a:4e:45:
9e:db:f2:50:f7:4d:29:b3:f5:c4:22:61:8c:2d:95:
2d:55:eb:f5:22:56:72:27:3a:37:85:4d:cc:75:25:
0e:a6:f9:46:29:b3:ab:de:7f:a7:19:23:f1:d8:fe:
a9:02:e5:76:93:b2:e3:fd:78:50:19:fe:2e:0f:79:
c2:5b:9a:81:c7:f7:40:d6:13:ef:b2:dd:7d:90:17:
a4:ff:bb:0a:8f:92:e4:18:b5:85:50:31:ab:89:59:
57:f6:12:fd:e6:08:64:cb:d2:31:39:54:fc:ae:ec:
7c:ad:49:b5:46:35:8f:57:9a:cf:d0:37:7d:f5:c2:
9a:60:04:45:7a:8c:13:8e:94:f6:c1:82:7b:03:22:
a0:c1:8e:51:fa:21:4f:42:7b:6e:a6:2b:86:2d:d7:
4d:2a:df:88:68:23:cd:bc:d7:a1:45:f5:ef:4a:87:
ec:90:e5:5a:95:f5:c4:87:30:67:5b:93:82:5c:5b:
2f:75:b3:29:92:35:ca:39:c2:c6:48:7a:fd:08:ec:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:47:55:97:F4:D4:F2:FB:F1:ED:3A:01:28:BC:E2:A5:83:B4:A5
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:03:ed:2a:72:62:df:f3:f6:50:05:7a:ec:56:e4:29:52:42:
ab:04:b2:61:7e:11:30:82:21:2d:0e:83:7e:86:21:bd:0e:de:
b9:38:54:40:a1:de:ab:c4:7d:dc:c6:ec:85:60:2c:9a:bf:e6:
7a:5b:a7:a0:96:5a:91:2d:12:33:b5:5b:5a:82:e2:16:9b:29:
7b:e8:1d:87:e8:a3:77:43:18:92:b5:74:f5:94:f8:0d:52:8c:
bd:4d:96:f2:0e:33:92:e7:94:a5:a1:72:7f:c4:69:50:ab:33:
f8:6c:6b:72:10:c0:f0:3b:48:aa:21:50:59:40:4b:fe:b3:e0:
41:42:a1:ab:2b:01:6b:99:4a:38:91:44:e3:b1:21:ce:aa:1c:
b6:5f:de:79:26:b0:ae:6a:8f:7c:3e:28:a3:2a:14:27:c6:4e:
e2:28:9c:2e:6e:d1:ea:47:a8:16:9e:e9:f8:61:4c:fc:ee:9d:
84:0a:87:b4:30:a1:5a:b3:df:62:ae:1a:19:9b:6c:87:a0:95:
47:28:7e:ae:03:30:28:97:fc:9d:ae:c2:62:2f:bd:0d:31:f5:
cd:05:8f:f6:ec:cd:f4:6c:e4:07:4a:47:e4:3d:0d:01:76:1a:
9e:a0:bd:e0:41:ce:1e:16:ff:29:05:ed:83:f4:2f:79:10:0c:
0f:4b:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:20 2026 by rpki-client