Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: Nau0icau542Gi3Y4Z0KMVVlDdzJH2iBRtDGOl/CZcq4=
Subject key identifier: 88:91:9B:90:50:AD:5F:AA:D3:4E:62:6F:B7:5E:9F:0E:35:3A:71:AA
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01A0C6A0EC24F41BC50F224E976D808BF949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 1A62
Signing time: Tue 22 Sep 2026 01:00:29 +0000
Manifest this update: Tue 22 Sep 2026 01:00:29 +0000
Manifest next update: Wed 23 Sep 2026 01:00:29 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: 1QILwx7p9UB957D+tnAF5wyRS/PgKRcfq4qRoWRQ7fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ec:24:f4:1b:c5:0f:22:4e:97:6d:80:8b:f9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Sep 22 01:00:29 2026 GMT
Not After : Sep 23 01:00:29 2026 GMT
Subject: CN=88919b9050ad5faad34e626fb75e9f0e353a71aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:da:bd:bc:60:ac:7f:ee:98:4e:bf:fe:a9:
a0:68:12:a1:22:5a:d7:99:88:79:48:05:2a:f2:d8:
74:62:f0:d3:53:2a:01:b0:5a:6b:56:29:c9:d9:20:
a8:b1:8e:95:2a:fa:37:b6:2b:78:11:1c:a2:0b:7c:
2c:72:2d:db:a7:a1:30:01:77:95:83:a1:87:4b:37:
de:c7:4c:f8:43:29:d2:7e:97:cf:c8:f8:44:4e:ae:
f4:98:c1:a5:dc:4e:15:44:af:78:78:4a:cf:06:a0:
b9:1a:24:b0:44:f0:23:e5:39:99:f0:ca:df:13:70:
d1:25:1e:f2:6a:6b:dd:79:49:33:05:ec:ff:4a:1c:
65:27:2a:09:67:ef:e9:23:b3:7d:72:41:1a:00:de:
28:08:32:02:8d:23:3c:50:ac:9e:90:11:15:35:87:
47:52:7d:da:5c:c2:0f:f8:36:b5:8b:28:4a:68:c4:
c1:77:ee:60:73:5b:78:c8:48:e3:22:ec:8e:98:c6:
58:a7:6e:80:f6:08:ce:84:98:43:ed:3b:f7:40:1d:
b7:34:24:0f:41:6c:17:dd:e5:fb:a4:28:ca:1d:12:
af:86:71:cc:6f:48:04:61:ad:fd:40:6a:78:59:ca:
55:94:67:70:33:b1:37:b8:b4:ae:44:e0:55:c2:c0:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:9B:90:50:AD:5F:AA:D3:4E:62:6F:B7:5E:9F:0E:35:3A:71:AA
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:62:65:46:fa:0f:4a:02:f9:e7:72:92:dc:55:76:9d:a9:86:
3d:db:58:48:38:81:82:4f:2e:38:cd:2e:0d:16:9f:d5:5a:08:
13:2a:75:cb:02:29:89:fc:71:f8:45:ba:44:d7:63:f9:cb:ef:
21:84:b3:2b:37:8d:72:3a:12:f3:02:4f:3a:c6:73:de:55:0e:
e8:b8:d7:d0:f8:8b:a7:12:b8:c6:25:f9:b9:37:6d:ec:80:d4:
08:b0:5e:e7:21:70:86:67:b2:d2:46:04:a2:eb:a0:c1:0e:fe:
92:9e:63:96:a5:ba:c6:82:da:a1:61:c4:0c:fa:93:b7:d3:56:
19:2c:f3:07:84:bb:7f:1b:a5:90:39:af:97:4a:f8:30:38:0a:
ee:39:ad:f5:19:5f:1d:5d:4f:30:58:ec:8a:bb:28:ec:d6:cc:
c2:80:0b:5b:87:4d:27:43:e6:6a:d7:61:12:8b:81:22:4a:f0:
90:2d:c3:1a:81:b0:de:2e:8f:0d:32:4a:0c:f9:27:38:2d:95:
36:e4:27:6b:6c:86:68:56:a0:c1:f4:78:67:3b:5e:f0:49:3e:
fe:1b:3b:e8:20:ac:35:11:54:32:b4:ea:c1:15:eb:4e:c9:9d:
4f:b0:4b:08:2c:0f:fc:fe:0d:08:62:9b:39:62:a7:52:cf:52:
a5:71:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:40 2026 by rpki-client