Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
File: 1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft (raw, json)
Hash identifier: BfqPF4FEnBW60L51UUxgbqmT51tZ8+fMPiFNZI3hssI=
Subject key identifier: 7E:58:8B:F5:4D:89:A5:DD:04:B0:6E:EE:F9:3F:B1:1E:53:4C:FD:7F
Authority key identifier: F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
Certificate issuer: /CN=f9d60a8ef771f1e90163dcda50f732233c5d12e5
Certificate serial: 01A0412AACE36585F8A91C610E3F7B52DD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 03:01:50 +0000
Manifest this update: Thu 27 Aug 2026 03:01:50 +0000
Manifest next update: Fri 28 Aug 2026 03:01:50 +0000
Files and hashes: 1: 1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl (hash: FApv4O+kpc1cyDneQpI3K/ucOM9HhT6tkulD2lKTmP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:ac:e3:65:85:f8:a9:1c:61:0e:3f:7b:52:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d60a8ef771f1e90163dcda50f732233c5d12e5
Validity
Not Before: Aug 27 03:01:50 2026 GMT
Not After : Aug 28 03:01:50 2026 GMT
Subject: CN=7e588bf54d89a5dd04b06eeef93fb11e534cfd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:da:18:dd:23:b5:2d:2f:87:a9:af:10:c8:
ef:a0:4a:88:38:8f:72:b0:cc:62:6f:85:d1:8b:18:
65:0a:a5:4b:60:75:95:8b:c9:83:74:9f:bc:12:6f:
76:2b:f7:ae:50:43:82:9a:d8:12:96:11:16:d5:db:
e6:75:8a:92:8b:87:69:6f:75:ca:5e:31:b0:9a:9f:
6b:b5:54:e0:f5:bd:2a:f6:96:82:6c:ba:c4:b8:1b:
f5:c3:9c:df:eb:bf:f4:00:0d:6c:de:95:8c:2d:eb:
28:70:61:f6:a2:bf:bd:01:9a:57:2b:b6:54:f5:55:
30:3b:d0:20:42:25:a1:52:66:21:04:a7:e5:52:a5:
46:a3:e7:46:e1:86:f1:5b:14:61:8a:1d:d0:79:36:
26:00:69:a3:6f:76:f7:24:78:51:3f:5b:64:9e:24:
2d:27:31:fe:f2:1f:f8:0b:cd:df:00:41:64:65:f0:
c5:1e:34:6c:d6:24:f2:ce:83:a8:4e:50:aa:a3:13:
96:84:a6:6c:b3:d5:cb:12:0e:4c:4f:e3:3c:3e:10:
1a:f0:28:02:a6:04:cc:b0:4b:a6:ff:1a:93:f3:2a:
8e:24:3f:69:24:5f:34:43:82:bb:5c:ef:75:b9:7f:
72:ae:67:64:08:42:35:00:1e:36:67:79:44:8c:31:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:8B:F5:4D:89:A5:DD:04:B0:6E:EE:F9:3F:B1:1E:53:4C:FD:7F
X509v3 Authority Key Identifier:
keyid:F9:D6:0A:8E:F7:71:F1:E9:01:63:DC:DA:50:F7:32:23:3C:5D:12:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a9e321-9de6-4d92-bbe0-5df76b291c6f/1/1-dYKjvdx8ekBY9zaUPcyIzxdEuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:2b:f9:d8:c1:ac:42:62:64:b0:a0:3f:a6:63:af:9f:da:
85:4e:51:1b:fa:1b:3a:b2:5a:d2:7c:e6:dc:87:38:af:42:95:
4b:80:04:7c:3c:01:44:0d:33:df:36:16:db:cd:76:74:54:63:
a0:60:a9:cd:2b:77:c7:63:d3:62:26:79:19:a8:7d:fc:52:8f:
c8:55:07:7b:72:06:0c:2e:3e:81:14:bd:9f:45:dc:13:c9:ec:
b0:9f:fb:c0:24:b8:31:c5:90:dd:2a:02:74:bd:e6:d9:d2:35:
e9:34:7c:34:a3:6d:e5:0d:c3:ab:09:8c:2d:ba:64:4b:ba:f6:
a8:91:19:94:76:ed:0b:3e:92:e3:08:d8:e0:d2:d2:3e:ba:4d:
c3:62:68:9e:aa:28:09:05:86:65:07:be:93:47:e0:e0:b1:5c:
f6:e4:dd:79:88:b5:f3:17:ae:cf:b8:66:65:6b:a5:96:2f:b1:
f7:33:b3:43:02:49:75:d7:8e:8d:53:9f:07:55:66:cd:bb:96:
9a:c1:87:b2:a6:4b:3b:76:1a:23:25:08:9d:b7:c4:d0:01:fe:
62:cf:42:9d:17:2a:2f:cd:91:06:7f:d6:bc:b5:ae:bf:90:db:
6a:49:74:42:5c:7c:e4:96:4a:23:31:3f:c1:e8:b2:b3:f0:7e:
53:43:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:46 2026 by rpki-client