Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: LXL8TZ/51UPkI5u6e1lh/BzvHsEFjHcfprKUJ9GDdlo=
Subject key identifier: 2B:E5:F9:AE:7F:62:C4:89:91:B1:62:82:70:E1:64:C1:95:A0:CC:9A
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 01A0005CC4F9E13A85667767388FE10AE4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 13:01:14 +0000
Manifest this update: Fri 14 Aug 2026 13:01:14 +0000
Manifest next update: Sat 15 Aug 2026 13:01:14 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: 2ss+io65lIHTEXK7ZZJYwoq/26ENwiVzE6LJHrUbsGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:c4:f9:e1:3a:85:66:77:67:38:8f:e1:0a:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Aug 14 13:01:14 2026 GMT
Not After : Aug 15 13:01:14 2026 GMT
Subject: CN=2be5f9ae7f62c48991b1628270e164c195a0cc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:c2:2e:1c:4e:44:9e:f9:88:3c:3f:ba:ac:
ca:dc:10:31:80:a1:71:a5:66:25:8f:73:1f:ff:c8:
0a:e6:18:24:bf:5b:97:3c:b1:4b:cf:23:4b:8c:91:
a9:e8:a4:d1:06:de:25:73:ae:24:5b:ea:67:34:cb:
31:94:d8:6e:d3:33:24:47:34:f0:5a:cc:78:b1:86:
24:66:e9:1b:0f:e2:ca:02:43:5a:f9:c6:3c:09:e5:
49:38:e3:a1:a4:07:c3:44:5e:c8:2a:a7:c4:b6:d9:
eb:63:94:95:6e:3c:e2:5b:97:de:17:7d:26:4c:42:
f5:13:63:26:04:18:e4:2a:92:83:73:b4:35:3e:8a:
50:71:e5:a4:f3:27:13:a4:3b:ad:b8:f4:f5:3d:9d:
3a:d0:38:81:11:d4:9e:00:1b:fe:d7:64:e6:1f:70:
63:3f:10:fa:56:8a:63:87:5e:66:2c:30:af:34:f7:
d2:65:d1:94:f4:31:b0:34:c6:e3:6e:ed:c3:71:d7:
31:91:9d:af:24:58:65:12:b8:30:8a:b3:66:6a:1a:
12:dd:fb:9a:a5:ee:d5:f7:d0:59:70:78:d9:cf:aa:
a1:f9:b3:0a:88:0e:aa:d2:41:45:d1:60:e2:14:41:
99:9a:ea:94:6c:27:27:ce:0a:cc:12:65:76:e2:24:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:F9:AE:7F:62:C4:89:91:B1:62:82:70:E1:64:C1:95:A0:CC:9A
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:86:56:8e:fa:90:a6:07:3c:ff:43:dd:01:59:98:b7:ad:aa:
fe:6f:5d:b8:32:0a:8e:7f:d2:30:31:a4:6a:15:93:b9:c8:6f:
4d:53:48:09:9a:35:b7:37:98:b1:6f:89:be:51:38:48:ac:e5:
58:f2:3c:73:4a:89:5c:81:a9:ad:2a:00:f2:0e:96:a6:2b:59:
af:52:bd:27:5e:b3:8c:98:84:4f:b0:d8:03:40:d8:1d:45:c2:
d8:98:26:22:3e:29:28:45:f5:7c:ee:51:ff:34:30:05:89:58:
57:8c:c9:8a:7e:0d:6f:0a:0a:dc:56:0e:37:ae:4e:3a:09:f5:
4a:db:a0:a9:a5:8a:18:06:5a:c7:f3:cd:43:95:cd:df:c2:60:
2b:bf:89:39:0c:00:f9:a8:49:61:bf:97:ec:fc:72:d1:a5:76:
cd:60:f0:89:77:b3:66:6f:e8:ca:43:cf:c5:ef:a1:0f:61:08:
82:a1:bd:b4:2f:c7:38:41:04:50:93:f2:df:0c:9c:6b:0c:6a:
57:87:40:af:70:3a:c3:de:8e:34:db:1b:e4:b4:d2:76:97:8a:
5a:c9:39:36:87:a0:22:b5:4c:d3:d9:b8:f9:ff:a6:cf:1d:66:
cc:c1:ee:b3:71:74:9d:ca:4f:d8:f2:26:76:a3:ca:37:f4:39:
64:c6:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:17 2026 by rpki-client