Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: 7ow3bgG8rjbjtn0niEaOUV32WW0g53axNhgXRiJbLcA=
Subject key identifier: 11:36:1F:8C:03:06:06:CA:86:A9:96:6F:8B:0F:8C:53:10:AF:C5:71
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01A00100FCC01B1415F8A5A9E59BA19F6B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 157E
Signing time: Fri 14 Aug 2026 16:00:36 +0000
Manifest this update: Fri 14 Aug 2026 16:00:36 +0000
Manifest next update: Sat 15 Aug 2026 16:00:36 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: /jkHz1p0sYgqqLKY2TMqml+SH4QqTe71/69Xq8sJmgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:fc:c0:1b:14:15:f8:a5:a9:e5:9b:a1:9f:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Aug 14 16:00:36 2026 GMT
Not After : Aug 15 16:00:36 2026 GMT
Subject: CN=11361f8c030606ca86a9966f8b0f8c5310afc571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:b6:41:27:05:7c:1e:fe:48:62:2f:d4:05:
38:61:ef:eb:c0:e9:d8:7a:03:7d:2f:4a:9c:f1:05:
96:3c:55:f5:f8:74:e3:9f:26:ae:c8:3f:e4:f6:93:
9f:7f:26:36:d3:b6:54:46:ed:44:4b:4b:1c:b3:4a:
a3:b3:87:1b:3f:0d:d2:8b:6a:92:2e:65:c7:13:01:
8c:10:fb:09:08:d9:7a:a3:6c:e2:a8:c8:fd:f8:7f:
74:2f:5b:80:7a:c9:9b:61:26:5a:58:98:1c:fe:04:
3b:53:ae:bd:60:60:03:af:c1:9c:f6:da:d5:97:04:
f9:aa:cb:87:31:df:95:7f:bd:d4:ca:b6:3b:d4:a9:
bb:46:ac:88:0e:2d:00:f5:67:6b:cf:28:77:df:44:
9f:ef:6c:bd:1b:84:2f:46:20:23:c9:94:60:e8:d1:
e1:82:c3:73:14:f5:14:b6:40:0a:13:84:9e:91:bc:
2c:2e:df:35:61:cc:bb:3c:77:f8:de:c1:66:9a:33:
b2:b2:03:17:a9:7b:85:61:b9:88:d0:ec:94:d0:e1:
e6:2f:40:19:26:c2:b3:37:d2:3a:5a:27:84:05:d2:
01:b8:4f:c4:f8:24:cb:f4:03:4c:23:4f:2b:90:da:
c9:30:1b:b5:cb:7f:b8:92:7c:89:82:e3:d5:09:da:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:1F:8C:03:06:06:CA:86:A9:96:6F:8B:0F:8C:53:10:AF:C5:71
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9b:7e:99:c2:55:8a:d7:b6:7f:22:69:af:c9:b7:1c:a4:ae:
16:66:5c:3a:c7:21:07:c7:0c:64:03:76:7f:52:ea:b9:15:63:
33:46:4f:43:a2:43:03:dd:76:2f:b8:8d:4b:6e:38:aa:42:25:
ac:85:9e:69:af:08:c3:16:84:6f:28:0d:f1:74:b6:8d:87:c0:
19:26:66:fb:e4:cd:9d:ad:07:f4:02:99:97:a3:0b:39:f8:6b:
cc:54:2c:57:d8:98:5e:f3:33:aa:f9:c3:08:18:a3:1c:4a:13:
68:ee:62:c9:41:0c:ff:a6:63:4a:0d:57:d2:9f:be:33:d5:a0:
05:4d:c9:a6:48:b3:8f:00:e0:0f:0b:46:d5:5b:3b:e1:c9:85:
01:8d:1c:d3:65:52:4a:ee:a4:60:f1:17:ba:bd:e1:cc:3d:a9:
16:d8:84:48:be:44:9f:7f:96:24:28:6e:ac:70:e7:fd:2a:c6:
7b:a8:ee:cb:35:1d:e4:80:9e:24:34:c0:aa:98:f4:27:b9:b1:
96:73:3e:44:89:29:48:f3:f2:4c:10:1a:87:30:38:c2:e9:c1:
8f:b6:95:0c:e5:6e:08:03:a9:ea:cd:84:5d:50:4b:5c:d4:fd:
99:09:0d:63:92:73:ca:3c:8d:7a:02:a1:97:29:5b:51:32:13:
84:19:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:33 2026 by rpki-client