Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: iRHCITq+AqHuGIpwOAuBl3Po9SfgL2jJiS2RX/L68tA=
Subject key identifier: 34:6E:E8:22:E5:09:6A:EE:5F:1A:C3:0F:89:0A:6E:9F:5F:A0:7B:0A
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 01A001387BA1EAE4C7948616BB4A62D68847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0E4D
Signing time: Fri 14 Aug 2026 17:01:13 +0000
Manifest this update: Fri 14 Aug 2026 17:01:13 +0000
Manifest next update: Sat 15 Aug 2026 17:01:13 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: 32mex20uL7jIQT6lG/3PpBbAh+IEFUU8KYZehdfuNQE=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:7b:a1:ea:e4:c7:94:86:16:bb:4a:62:d6:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Aug 14 17:01:13 2026 GMT
Not After : Aug 15 17:01:13 2026 GMT
Subject: CN=346ee822e5096aee5f1ac30f890a6e9f5fa07b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:15:d8:3a:5d:e4:7c:ae:53:47:b0:75:c4:
40:6c:cc:8c:87:0a:1b:36:a0:1a:e6:fc:60:b6:82:
fc:cb:e2:26:43:8c:be:4b:74:86:a1:45:cb:82:8b:
7d:a4:8f:9e:b1:e8:9e:77:57:65:44:24:17:31:53:
ea:d3:dd:d0:f1:ed:68:fb:3b:1c:f8:37:b4:35:a2:
69:e1:9c:65:67:91:ad:ed:42:be:4f:7a:2f:a6:6a:
aa:fd:77:da:48:1e:81:7b:73:4a:3d:3e:30:be:eb:
ef:cc:65:78:32:ba:d4:05:ce:cc:70:cf:78:b4:a6:
71:fa:f1:1e:8d:25:0c:6d:dc:1e:36:f0:16:2b:f9:
2c:a3:06:ce:da:5e:99:a9:3b:5a:d3:9f:e4:c6:d0:
1e:e5:db:34:49:f2:f1:93:54:c5:74:13:73:b8:5f:
14:e5:28:01:d2:54:bd:c2:42:f3:f2:47:35:9b:81:
2a:60:63:f5:8a:71:f2:14:b4:97:55:9c:21:10:0d:
7e:0b:b8:6c:c0:02:aa:6f:4d:e1:02:ae:18:f6:44:
45:1c:d7:19:9f:16:c2:2d:58:62:c3:05:31:4b:dc:
97:37:b2:0b:1c:12:f8:7b:83:85:9c:c9:27:7b:2e:
51:c6:2a:40:df:71:52:d9:7c:c4:99:a1:74:d3:dc:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6E:E8:22:E5:09:6A:EE:5F:1A:C3:0F:89:0A:6E:9F:5F:A0:7B:0A
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:e3:6e:18:87:e0:3f:91:67:38:5d:17:57:2e:9d:a5:32:
ce:5b:e9:ad:56:0d:e8:ae:33:40:52:dc:a1:5e:d7:b6:21:09:
cc:95:7d:92:2c:b9:cc:53:a1:cb:db:51:0d:e9:87:61:e5:f7:
a8:96:1e:b9:53:b0:75:07:eb:0e:0b:f4:f5:0f:ea:96:a0:7a:
ea:75:d8:14:ed:9d:3f:c2:cf:47:25:02:e3:c4:6d:49:f4:d8:
e5:08:b9:ea:80:91:db:c2:2e:12:6f:95:35:3e:7e:89:00:a1:
a5:28:7c:fa:b8:a3:94:b3:7d:0e:b5:76:0d:6b:1e:20:fe:20:
9f:d4:68:e6:f2:14:65:ca:c1:4e:41:62:77:02:c0:bd:07:3f:
e3:23:64:15:2a:43:ca:f5:90:cd:87:4e:9e:e6:61:75:b9:54:
b9:87:ec:52:4a:3a:78:ed:4f:8d:64:d8:19:fc:35:ef:f2:4a:
d6:0f:7c:f2:01:f7:13:7e:a6:45:5f:61:6e:a2:54:67:dc:a8:
15:bf:64:90:fe:e3:26:5f:3f:09:e0:38:91:19:01:9e:e3:b4:
07:8d:1f:f6:5f:75:09:38:74:0d:3f:b1:c5:18:67:08:14:3a:
7c:34:ca:de:7f:d7:54:d3:91:af:0c:78:e3:fc:b2:e0:5b:90:
5f:84:a6:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABOHuh6uTHlIYWu0pi1ohHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNTYwMjgwMmE4NzkzYTI0ZmRhNGQwZWRjYzMwYTE5NmMw
Zjc3ZTAwHhcNMjYwODE0MTcwMTEzWhcNMjYwODE1MTcwMTEzWjAzMTEwLwYDVQQD
EygzNDZlZTgyMmU1MDk2YWVlNWYxYWMzMGY4OTBhNmU5ZjVmYTA3YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4V2Dpd5HyuU0ewdcRAbMyMhwob
NqAa5vxgtoL8y+ImQ4y+S3SGoUXLgot9pI+eseied1dlRCQXMVPq093Q8e1o+zsc
+De0NaJp4ZxlZ5Gt7UK+T3ovpmqq/XfaSB6Be3NKPT4wvuvvzGV4MrrUBc7McM94
tKZx+vEejSUMbdweNvAWK/ksowbO2l6ZqTta05/kxtAe5ds0SfLxk1TFdBNzuF8U
5SgB0lS9wkLz8kc1m4EqYGP1inHyFLSXVZwhEA1+C7hswAKqb03hAq4Y9kRFHNcZ
nxbCLVhiwwUxS9yXN7ILHBL4e4OFnMkney5RxipA33FS2XzEmaF009ziDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDRu6CLlCWruXxrDD4kKbp9foHsKMB8GA1UdIwQY
MBaAFPtWAoAqh5OiT9pNDtzDChlsD3fgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xWUNnQ3FIazZKUDJrME8zTU1LR1d3UGQtQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2
LWRiNWIxZjg5YTUwZC8xLzEtMVlDZ0NxSGs2SlAyazBPM01NS0dXd1BkLUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4LzgzODdhNy0wNjhjLTQ4MzItYWEyNi1kYjViMWY4OWE1
MGQvMS8xLTFZQ2dDcUhrNkpQMmswTzNNTUtHV3dQZC1BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDfj
bhiH4D+RZzhdF1cunaUyzlvprVYN6K4zQFLcoV7XtiEJzJV9kiy5zFOhy9tRDemH
YeX3qJYeuVOwdQfrDgv09Q/qlqB66nXYFO2dP8LPRyUC48RtSfTY5Qi56oCR28Iu
Em+VNT5+iQChpSh8+rijlLN9DrV2DWseIP4gn9Ro5vIUZcrBTkFidwLAvQc/4yNk
FSpDyvWQzYdOnuZhdblUuYfsUko6eO1PjWTYGfw17/JK1g988gH3E36mRV9hbqJU
Z9yoFb9kkP7jJl8/CeA4kRkBnuO0B40f9l91CTh0DT+xxRhnCBQ6fDTK3n/XVNOR
rwx44/yy4FuQX4SmSw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:18 2026 by rpki-client