Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: R34RnqAxDGMhXWNQToly1gbYs9EaA2qS+MJgaePlAC4=
Subject key identifier: 36:BB:AD:0D:CF:45:CE:16:B8:26:8A:18:A1:D8:EE:EA:6C:B6:82:8E
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 01A0D15C0E7AF0AAED8057466EA65DAC858F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 1A8E
Signing time: Thu 24 Sep 2026 03:01:06 +0000
Manifest this update: Thu 24 Sep 2026 03:01:06 +0000
Manifest next update: Fri 25 Sep 2026 03:01:06 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: +feTIJgEMico7InxU/VT1ytkHcGOnd9NclTrBOqS2G8=)
2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:0e:7a:f0:aa:ed:80:57:46:6e:a6:5d:ac:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Sep 24 03:01:06 2026 GMT
Not After : Sep 25 03:01:06 2026 GMT
Subject: CN=36bbad0dcf45ce16b8268a18a1d8eeea6cb6828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:8a:0b:cd:d4:9a:87:d5:77:29:28:a3:b5:
e4:b5:06:5e:7b:11:32:e8:ff:85:9b:30:52:a2:ab:
4f:7b:01:e8:62:88:02:d4:7f:b4:44:62:8a:a6:9d:
c0:aa:9f:d2:82:9d:ab:69:7e:6e:7b:39:48:01:4b:
b2:7e:94:bc:d1:44:b5:5c:ad:02:08:23:53:a9:d3:
69:04:1f:8a:2b:c7:ea:19:60:6c:1f:03:c9:02:47:
d8:c6:6a:b5:44:59:d1:53:c4:af:e7:7a:b2:e7:e5:
20:a3:68:48:bf:c2:97:28:35:f8:47:05:1c:1f:53:
9c:fd:7d:8e:28:a0:e9:97:8b:0e:13:0c:cd:04:31:
8e:27:69:e1:77:fd:1a:d1:8b:51:a2:22:bc:74:d9:
64:1f:92:2f:b8:57:26:42:20:70:3b:44:1e:e2:72:
91:a0:49:ef:11:64:32:4f:53:33:57:41:8c:35:16:
76:10:7b:fb:7f:02:8f:97:ed:36:17:5e:bb:e4:23:
7b:37:8c:f6:2a:36:95:71:61:c7:06:af:a3:32:60:
e8:d9:98:53:1f:37:bc:07:b0:9e:8c:94:d4:aa:e5:
5a:2b:77:35:3a:7c:ab:10:d8:21:3a:03:6d:ba:06:
a1:d7:08:59:f1:39:02:1e:06:15:ca:f9:14:6d:5d:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:AD:0D:CF:45:CE:16:B8:26:8A:18:A1:D8:EE:EA:6C:B6:82:8E
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bc:50:f0:b9:9c:dd:ab:b1:72:2a:82:88:4e:4a:3b:fb:93:
b7:93:92:37:80:a4:a0:f7:6a:b3:26:5b:51:1e:87:df:7e:08:
e2:f9:66:24:f4:76:6e:87:39:16:89:4a:79:c9:0d:70:20:68:
75:cc:ae:2e:a3:28:8a:d9:31:05:c7:e4:e8:42:34:21:8b:4e:
58:ad:49:4f:f5:cd:40:6f:1f:d9:42:c4:69:2b:cc:50:6b:36:
92:3d:c7:92:de:cd:d0:e7:16:c3:b3:6d:61:0f:8e:2d:72:de:
62:92:3f:b5:00:99:f5:91:02:33:d0:3a:14:cb:ed:ce:c3:84:
96:93:9f:ed:99:92:99:42:b0:9a:38:64:b5:ac:34:60:7a:f9:
bb:fd:ed:ce:6c:05:62:4c:6e:7a:5b:1d:4c:39:68:7c:ad:a8:
be:65:da:f2:bb:a4:08:e3:37:89:72:3b:74:cf:f2:9b:47:a1:
30:77:71:1b:5e:82:f9:59:75:7e:e6:29:5a:ec:38:2a:fd:80:
f5:02:ac:a0:47:07:f6:7e:50:ff:0c:7d:bd:80:43:31:1e:27:
87:d8:23:c1:ab:0e:0c:06:39:56:74:f1:5b:88:fc:fc:cf:db:
e9:59:e2:4f:fa:35:cb:f0:c9:a9:f1:4a:82:7c:dd:13:77:f9:
f6:8a:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:35:19 2026 by rpki-client