Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: CQJcgAnjCsihLZjmoBdShhjWcVk4vesiT4E5oKLOnJU=
Subject key identifier: 14:BF:A4:06:1F:C0:FF:4F:17:18:45:B0:F7:04:F3:96:D0:83:30:D7
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019D386631E42C2E7C26DFF0F4E9DB181778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0BBE
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: dDKmebIm/oSCcpnqspPieZRxr/lQPbHryNkE+ZTvDkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:31:e4:2c:2e:7c:26:df:f0:f4:e9:db:18:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=14bfa4061fc0ff4f171845b0f704f396d08330d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:6d:6a:86:41:6f:47:16:70:f5:d1:b7:87:
5c:48:41:02:95:4d:58:0b:9b:2a:d6:6e:db:c8:69:
ee:9a:f1:44:45:32:85:fd:a8:af:6b:8c:3d:68:66:
a1:68:74:32:17:d7:41:4a:bc:84:d5:b4:cb:df:d0:
f7:9e:39:20:32:af:99:c2:22:9f:aa:07:b4:42:4c:
f6:19:9a:1f:c0:51:1f:89:c0:0d:3f:78:1f:e3:4b:
3e:fa:37:e9:b2:26:63:73:d4:98:a5:2b:40:c1:c6:
56:40:57:c8:d2:81:ba:e8:ba:0a:3c:02:bb:c5:63:
82:9b:aa:1d:24:29:32:a7:f0:91:50:e9:a4:b2:5f:
44:1c:62:1a:0a:e4:a4:93:2f:0f:c4:24:ee:ef:20:
bf:13:81:53:d7:28:bb:1f:bc:fb:a4:b7:20:5d:2a:
a1:e4:14:ae:d9:6e:af:62:a4:92:93:b2:f5:cd:ee:
cf:2a:d8:56:2b:64:39:ec:fa:41:c5:60:43:51:95:
4c:10:db:6c:03:93:44:e4:ca:da:11:34:bd:81:83:
a9:12:44:e8:d2:0c:c4:e4:76:27:0d:10:0f:fa:ad:
99:40:e9:ea:9b:52:18:48:d9:26:49:38:30:74:a7:
45:5e:04:64:5d:79:3c:cb:5b:1a:b3:8b:37:86:55:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:A4:06:1F:C0:FF:4F:17:18:45:B0:F7:04:F3:96:D0:83:30:D7
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:12:b9:d0:c2:e1:47:0e:60:e2:19:26:22:a6:68:8f:db:
bb:bd:36:62:d5:c1:4b:ae:32:80:fa:65:90:4e:69:36:43:e2:
47:37:8f:10:74:82:42:44:14:68:30:c6:93:b2:2d:98:c0:56:
66:e9:9b:b7:ac:19:27:1b:f0:90:ab:69:45:31:db:2f:59:b3:
72:9f:bd:06:fe:8b:2a:b3:1e:33:2f:b0:86:50:31:f3:63:3e:
1a:17:c2:ea:8d:7b:98:93:bd:0e:5c:f5:e8:12:cb:55:90:f0:
5d:31:4b:c8:22:ab:36:7f:47:bf:a8:22:60:fa:8a:58:84:69:
fc:82:69:21:d0:3b:ec:05:69:60:e0:34:6c:ad:77:aa:ed:98:
48:9b:c2:99:d5:ba:fb:20:35:19:0e:a6:38:3b:a0:99:e2:5b:
48:3d:a1:ef:0d:15:ba:07:ab:91:45:7b:57:71:0f:f8:3b:43:
ce:c8:99:d1:ed:f6:85:5f:9a:06:9d:b8:f4:49:cb:ee:67:8e:
ed:7b:ab:48:f1:4a:ba:44:fd:07:0c:f0:98:e1:8f:53:20:8e:
1a:24:ed:e6:a1:ba:2c:27:0a:44:c5:d1:f9:ba:44:af:7e:c1:
93:af:09:9d:83:8a:79:10:3c:fe:a5:7a:c9:6b:d2:ee:81:79:
19:5b:9c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:02 2026 by rpki-client