Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: NaZAqPtl6YGoB97+zn0iGWr3ctRuM5BE/xMtZOkUo7E=
Subject key identifier: 1B:13:57:40:BB:AE:D6:C5:64:97:3E:43:4F:C4:93:15:51:50:01:57
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01A13FA71D3FFF83AB9996C62A5F8B4E710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:01:18 +0000
Manifest this update: Thu 15 Oct 2026 13:01:18 +0000
Manifest next update: Fri 16 Oct 2026 13:01:18 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: WgR2xAC5uskigN2AD219Rcqi+j3p+5z62O+JchaID4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:1d:3f:ff:83:ab:99:96:c6:2a:5f:8b:4e:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Oct 15 13:01:18 2026 GMT
Not After : Oct 16 13:01:18 2026 GMT
Subject: CN=1b135740bbaed6c564973e434fc4931551500157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:27:10:c9:83:5d:42:d5:ff:57:76:74:44:
a9:c4:de:ac:49:72:45:60:b5:62:c6:fb:3c:48:79:
7b:b2:e0:e2:7d:4a:0f:1d:22:c6:cc:70:6b:9b:7b:
bb:33:69:a7:61:b9:44:37:80:92:69:a5:a5:b0:3e:
05:8a:8a:57:24:00:b0:89:29:5f:75:5e:06:db:a7:
7f:93:58:76:30:ff:58:6c:e7:a7:49:e0:d8:d1:fe:
51:64:97:b4:76:01:86:20:13:df:32:30:37:1e:c7:
14:71:a5:26:ad:d2:12:9e:90:31:ff:c5:81:b0:0b:
c3:41:8d:92:60:b9:97:12:95:60:7b:b9:05:36:2c:
9c:b1:26:48:b1:40:16:d6:ae:81:5b:b6:75:43:5e:
1d:35:cd:45:88:8a:d2:1a:a1:c5:8f:4b:df:66:77:
0e:51:74:4d:9f:f7:cc:48:2e:da:97:f8:55:c0:d6:
65:7f:fd:5d:ef:c9:75:f9:32:7f:e2:77:6a:d5:77:
b6:a2:aa:00:7d:88:1a:a6:90:0e:64:bc:da:76:3c:
a3:e8:3f:74:33:90:72:1d:0a:7e:d0:af:93:c6:de:
7d:59:7d:d2:18:f8:4d:bb:7e:ad:ae:28:a3:a3:c5:
23:3b:ce:f7:7a:a0:e5:76:c1:24:18:08:4f:ca:27:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:13:57:40:BB:AE:D6:C5:64:97:3E:43:4F:C4:93:15:51:50:01:57
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f5:4a:81:cf:94:14:4c:96:2e:61:0b:9b:99:ba:e5:7e:1b:
ee:8a:c5:69:35:6f:cd:d3:d2:2c:e4:79:e0:ba:4a:c7:26:83:
61:83:43:d1:9e:e0:04:62:b7:c9:1b:60:76:7e:22:a2:c9:a8:
2b:0f:d1:98:79:23:97:a8:d8:05:9f:3d:48:a3:6a:35:d0:dc:
9b:4c:27:a4:37:0c:8c:3a:05:78:43:ef:38:a0:c2:91:3d:06:
77:9a:ad:47:66:91:52:c6:ee:6d:f7:de:d6:17:63:70:89:8f:
4f:f2:8e:c3:b6:8d:3f:47:ce:e8:50:14:a7:3e:8f:93:7e:83:
e2:74:98:54:5b:27:11:2c:6c:5b:89:8e:fa:1b:cd:6d:40:0a:
e5:ac:3f:c7:49:59:16:41:e7:75:cf:22:33:d2:bd:ec:b0:71:
0e:aa:f3:49:01:de:9d:47:c8:08:e3:b6:ac:a3:15:76:e5:ad:
bc:64:de:62:af:65:30:10:dd:ba:09:6e:6e:6a:be:d6:4a:e9:
43:27:2f:7a:73:3b:2e:ce:ae:e2:06:60:eb:43:5f:0f:d6:b5:
39:3c:b9:72:b7:18:48:c4:9f:31:3a:70:2c:c4:6a:13:36:d4:
03:09:80:2a:1c:ec:11:5d:68:5d:21:ed:35:ec:6b:0e:47:4b:
ff:a8:92:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:34 2026 by rpki-client