Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: N33dDJp6G8B6RnbWPVgvpiNaX2PJpZmCmQdBva4wC1U=
Subject key identifier: 9B:30:D2:5D:02:33:C7:30:68:22:49:19:B9:7E:E3:EB:26:05:79:47
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 01A00101C8C50F3DE5DB0F9929B28374DAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0D2F
Signing time: Fri 14 Aug 2026 16:01:29 +0000
Manifest this update: Fri 14 Aug 2026 16:01:29 +0000
Manifest next update: Sat 15 Aug 2026 16:01:29 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: q8ehkQcq54KgRP7+GuDdsKT5Pi7mH4j/Q36+433fXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:c8:c5:0f:3d:e5:db:0f:99:29:b2:83:74:da:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Aug 14 16:01:29 2026 GMT
Not After : Aug 15 16:01:29 2026 GMT
Subject: CN=9b30d25d0233c73068224919b97ee3eb26057947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:20:63:76:d2:48:7b:d3:84:b5:ac:bb:71:
c8:fa:7d:4a:c9:d8:49:f5:87:2e:eb:f5:0f:25:c6:
ab:58:10:4f:16:fe:dc:dc:dc:73:2d:5b:f8:0f:95:
eb:31:fd:8f:50:fd:0f:52:c6:31:49:f7:88:1f:57:
77:ba:bf:39:45:39:59:a7:0f:25:55:c1:bc:70:e4:
1b:bf:1e:3a:07:70:dd:ea:50:74:9b:f8:a7:5d:9d:
2f:47:ae:55:5c:1a:7a:92:ea:b8:6d:b7:a4:50:6f:
ab:c8:5c:d4:3c:1c:29:ac:5e:98:30:6b:9b:3c:65:
16:4b:51:11:5e:ea:3d:d0:4b:c5:b7:61:7a:36:5d:
78:02:cb:80:c6:16:15:c1:a3:74:0d:ac:b5:94:c9:
1b:56:6e:bd:94:d6:b9:e3:56:c9:f5:15:30:13:26:
83:34:01:34:0d:c4:3c:a9:09:4a:dd:15:85:08:d2:
9c:42:4a:c6:4a:28:1f:55:ee:f0:b4:85:58:3a:6e:
e0:65:a4:f7:8a:8c:c1:86:6e:f4:c6:c9:d2:81:4c:
3d:41:07:42:bc:8f:aa:22:6a:9b:22:82:30:8f:ca:
f9:a8:6a:b0:0b:38:df:85:b5:d5:af:07:40:e1:8f:
54:41:bf:8c:8d:55:cc:ea:86:46:80:83:df:26:d8:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:D2:5D:02:33:C7:30:68:22:49:19:B9:7E:E3:EB:26:05:79:47
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:00:0f:d1:37:7e:92:e2:7d:32:f4:22:b0:07:80:8f:08:c0:
81:4d:29:c6:63:5a:2e:de:1f:0a:08:08:99:88:3c:9d:1a:d8:
5a:ec:9e:06:9f:34:b1:70:61:21:0f:8d:f8:e8:a3:86:4c:f9:
a7:79:8d:66:59:cc:70:b1:5d:0a:12:3b:27:bf:93:43:45:a9:
5a:b2:f1:1a:2c:b3:6c:80:47:f3:8b:57:82:43:fa:e9:40:da:
2d:87:4e:16:58:07:7d:6c:7d:f4:76:90:b4:a6:59:b5:2e:eb:
af:9e:8b:40:0e:ad:bf:a0:3d:cc:e8:c6:c9:ff:f3:c3:05:9a:
d3:66:6e:96:a9:3c:e1:36:bf:fb:d9:e7:d2:6a:40:b7:42:bc:
20:e8:2e:d5:c5:8d:4f:f3:41:0e:9b:84:49:a6:0b:24:e5:e1:
fa:91:24:01:b6:60:8d:43:4d:86:47:cf:0e:67:23:65:2b:33:
2f:8e:22:31:03:5c:c6:22:ac:08:a8:10:45:b7:e9:6f:ed:ed:
08:cc:00:80:bb:38:e1:1e:70:01:a2:62:e5:2b:26:4b:48:16:
6c:a7:14:84:d9:f4:c9:de:36:19:69:6b:dc:11:d6:45:c7:ae:
0c:13:a6:84:a9:ea:f6:6b:92:28:51:84:13:db:d1:aa:cb:24:
4b:55:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:17 2026 by rpki-client