Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: FR3h0tTsXBhsA88Sp6JJ525R2y2Ay1cUojkSnP8t0S0=
Subject key identifier: B1:A3:79:69:A9:66:3C:7B:FE:1C:2F:DD:D9:33:C2:4E:90:A8:90:49
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019D389C214F7044589B34E33D2B0BF4C47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0CDC
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: ffZaXxS0KR/saDjyXr6gE7+h5LJqhYrEw+7L5b8OYZY=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:4f:70:44:58:9b:34:e3:3d:2b:0b:f4:c4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=b1a37969a9663c7bfe1c2fddd933c24e90a89049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:42:d6:da:9a:03:d1:0a:64:95:fb:30:d8:
c3:1c:17:0c:ce:ea:8f:af:24:59:83:88:4a:75:65:
d9:3e:12:77:7b:a3:e4:89:93:78:5b:28:24:c5:ec:
cd:fc:f2:f1:f4:a5:e8:2b:cc:60:c8:b3:74:40:64:
ed:b3:63:f4:a8:1f:47:6d:a7:cf:90:38:1e:e1:33:
24:25:42:63:de:5c:93:a2:ed:1f:3d:73:55:e2:d8:
69:71:b8:e2:93:46:2c:86:89:d5:b2:9a:cf:a2:29:
0d:36:f9:f2:ab:a2:89:c1:5d:f5:e3:c5:0d:38:e8:
7a:78:df:cf:2b:5c:fe:9a:c8:a1:bd:2e:b7:5b:ab:
fa:ca:e3:1c:2a:46:6c:85:cc:ab:39:8f:f1:b1:35:
bd:a7:b9:52:7d:78:03:13:e8:d9:92:20:43:f5:c1:
cb:ff:a3:49:1e:7f:cd:0e:55:da:a2:5c:35:d6:53:
70:a3:d8:76:db:89:cc:a1:bb:54:be:d1:7f:a1:96:
fb:8e:82:05:e1:a5:0a:39:98:03:a0:9d:53:82:bd:
20:07:25:0b:a3:16:2f:b6:54:df:c8:2e:19:c2:e4:
2c:ed:40:dc:fc:bc:51:94:54:a8:37:4d:99:08:1f:
30:8f:42:9c:e4:f0:06:4e:17:52:f4:10:33:fc:7f:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:79:69:A9:66:3C:7B:FE:1C:2F:DD:D9:33:C2:4E:90:A8:90:49
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:15:10:2a:7a:73:e1:19:8a:d9:bb:be:42:d0:6d:2b:c1:24:
ea:b9:55:5c:ec:f0:3e:18:7e:d4:79:ff:8e:99:76:18:f9:6a:
42:37:6e:28:04:36:4c:12:c4:da:a1:95:27:52:c5:a6:b7:54:
8c:eb:82:11:a5:62:93:c5:54:30:19:0b:8f:89:73:af:1c:ea:
43:16:c9:08:b9:e0:f5:a8:2e:af:70:d5:a5:8c:4d:33:d7:fd:
8a:1f:21:dc:65:df:13:c7:65:b9:e4:e5:65:5f:7f:bb:6a:e8:
47:1f:3c:e5:5a:7f:3c:18:c7:90:06:7d:1a:9a:76:90:8b:33:
71:f3:ff:54:cd:88:27:18:9f:7d:5f:04:b7:ef:a5:e8:45:e5:
81:e0:06:53:a9:96:9b:d2:77:7a:e0:e0:eb:0a:92:69:82:0a:
8c:a8:5a:64:8d:9c:91:30:5a:20:22:e6:fc:84:21:65:a2:81:
95:45:5e:77:b9:11:c3:fb:8b:a7:7c:98:ea:9a:99:82:f6:45:
d0:02:4c:26:74:b7:aa:f0:1e:20:23:04:cc:59:69:68:23:a6:
fd:4e:23:f1:0c:02:25:ac:45:58:11:21:b1:5e:e1:bc:15:8d:
cb:c8:b0:80:63:4a:40:1a:aa:b6:a7:e3:8c:0f:a4:7b:81:b7:
92:aa:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:20 2026 by rpki-client