Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: 9n52Hcaazfjlhbr461fdbw5EcFt9WFmFzv60DOcAnMk=
Subject key identifier: C4:56:E0:9A:01:B1:60:55:5A:45:6C:3A:7F:E9:FF:7D:1C:69:99:F9
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01A132900E723365D36339416B81202E7994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0BEC
Signing time: Tue 13 Oct 2026 00:01:03 +0000
Manifest this update: Tue 13 Oct 2026 00:01:03 +0000
Manifest next update: Wed 14 Oct 2026 00:01:03 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: yjBg0FQLmhZSg/u/+NZUGlWdbrv9lA8uSVFfxrLrcu8=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:0e:72:33:65:d3:63:39:41:6b:81:20:2e:79:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Oct 13 00:01:03 2026 GMT
Not After : Oct 14 00:01:03 2026 GMT
Subject: CN=c456e09a01b160555a456c3a7fe9ff7d1c6999f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:f8:df:5b:33:8a:9b:47:ca:14:43:67:46:
5a:b6:4a:fa:e9:9b:cc:da:43:35:a6:71:5c:be:da:
ea:8a:6c:f1:16:ba:4f:0f:de:10:95:0e:7c:b4:a0:
8f:e2:e5:60:2d:34:14:e1:7a:6c:a9:4f:4a:52:df:
b8:0f:35:01:1a:d6:87:cc:ce:6c:c2:78:f9:94:1d:
d9:ba:d4:03:de:e9:e1:0c:71:82:66:54:73:15:67:
20:da:c2:d1:26:0a:c2:88:65:e8:9c:bf:35:39:4b:
1a:b1:7a:b8:7e:bc:6f:07:bc:a5:bb:ad:4b:c2:05:
af:cb:0c:c1:bf:eb:07:fc:46:9a:b8:32:93:5e:ba:
70:35:aa:97:da:a1:73:6d:6c:96:26:37:ed:6c:95:
23:9a:c0:16:36:cc:fa:61:c6:fe:d1:a5:e9:10:4c:
7e:1f:88:b7:05:9f:c4:f6:de:ab:cb:83:73:25:e8:
d1:63:5b:2c:06:c1:87:5a:00:d4:6d:34:33:0d:67:
4e:c3:f6:74:ee:90:d7:37:94:b9:51:0e:4c:91:cc:
69:8e:f6:dc:92:be:08:92:c3:ce:10:a8:49:04:20:
47:a1:62:25:dc:11:3b:cf:79:65:db:99:08:29:4a:
60:23:ff:b1:b4:1e:fc:45:6d:f6:3d:4f:b3:9d:34:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:E0:9A:01:B1:60:55:5A:45:6C:3A:7F:E9:FF:7D:1C:69:99:F9
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c9:48:9a:23:db:69:d6:66:10:44:4e:89:4a:2e:82:d6:7d:
86:e8:95:ea:44:e7:2a:21:61:ac:23:08:19:f1:93:cb:e6:8f:
5d:6c:5e:e3:c4:2b:0b:9d:6c:59:4d:9e:1e:3b:8d:ec:f0:1a:
7f:22:9f:c1:59:a3:c3:f6:03:8e:bb:a7:3c:65:47:2b:90:39:
59:86:f6:14:dd:79:1b:b7:b9:33:1d:c4:7f:4e:2e:72:dc:72:
94:f3:d2:11:ba:91:67:21:f3:ca:55:57:e0:53:ce:a5:f1:2c:
c4:20:10:4b:98:63:31:9d:1d:97:fc:f8:38:c0:47:8f:db:ed:
aa:1e:23:37:39:e4:ba:4d:f2:1a:fb:8a:51:d0:9f:02:5d:42:
80:9d:6d:ff:73:60:44:33:c2:cd:00:25:4e:1a:c5:4e:b3:9f:
90:a8:33:81:7a:d8:bc:6b:7c:22:09:a3:e7:4b:70:0d:e8:f7:
c1:77:b0:46:71:f9:92:a6:35:22:9a:60:18:bd:c3:89:18:04:
de:8c:91:dd:ca:35:2e:e4:85:1d:7a:61:6a:f6:2c:8a:95:bf:
b3:93:f1:55:46:37:da:f2:66:fb:80:9d:80:e4:25:66:9d:98:
23:62:3b:a1:d7:64:db:c9:67:d4:07:a8:8c:60:d8:f9:5b:77:
f2:07:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:56:21 2026 by rpki-client