Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier: ZYHSXYmbOrddEpJfwlSObfzZZ2V8uTNSYjoD5RBhziY=
Subject key identifier: 85:9F:DC:18:23:76:07:F0:A9:F4:3D:42:19:D9:EF:8E:D3:AE:CF:36
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer: /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial: 01A1DEDE3500ABE3975A5A031FB633203306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number: 080F
Signing time: Sun 15 Nov 2026 11:01:06 +0000
Manifest this update: Sun 15 Nov 2026 11:01:06 +0000
Manifest next update: Mon 16 Nov 2026 11:01:06 +0000
Files and hashes: 1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: gvRW+ZJTgSLQmAMe6QWdkY6X2U6upqn+CDsvyFs8BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:35:00:ab:e3:97:5a:5a:03:1f:b6:33:20:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Validity
Not Before: Nov 15 11:01:06 2026 GMT
Not After : Nov 16 11:01:06 2026 GMT
Subject: CN=859fdc18237607f0a9f43d4219d9ef8ed3aecf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:4a:68:ad:4a:e0:25:29:19:94:fb:fa:38:
21:b0:93:11:ba:c4:52:9f:98:2c:ae:54:c1:30:64:
f8:78:54:70:ff:89:db:cb:6a:43:a5:d1:ee:dc:ed:
18:61:68:5a:77:cf:18:ea:33:9f:62:14:a4:7b:64:
b3:80:85:dd:4a:73:a2:d7:f4:7d:df:9b:59:8d:71:
b6:18:f3:ec:0d:a1:1f:d7:15:a2:ed:b2:9f:fb:27:
e8:5d:a2:de:9d:6d:9c:15:64:90:30:b1:07:ab:e9:
9b:f5:0b:35:87:af:22:6c:ca:2e:3a:74:34:43:36:
9e:63:9d:46:6f:d7:52:d9:a1:ca:40:88:db:3d:4f:
ae:07:8a:04:ff:6c:fb:0e:c3:58:db:aa:82:05:d8:
9a:bb:3a:79:4e:48:4b:8c:e0:4c:cd:45:84:da:e9:
74:2d:b5:c0:88:1f:33:8f:09:a4:05:b9:09:f9:c3:
78:42:c9:96:1c:32:dc:df:39:82:f6:93:3a:3b:d0:
13:e2:56:a5:e5:97:8d:36:32:9f:0d:ae:eb:aa:7f:
dd:98:11:95:6a:72:fc:ce:bb:f2:16:25:d5:93:be:
e2:2d:50:ae:24:17:b1:12:59:ae:7c:4b:18:7f:cd:
c0:83:4e:57:83:d7:45:48:11:e1:03:35:ed:a6:51:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:DC:18:23:76:07:F0:A9:F4:3D:42:19:D9:EF:8E:D3:AE:CF:36
X509v3 Authority Key Identifier:
keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:14:2d:bd:4a:f5:19:ef:e2:48:28:58:05:63:f7:77:65:
23:7c:a0:f2:6e:b1:52:7f:9e:23:ce:9e:ae:9b:20:44:5d:ce:
af:64:4a:fc:72:37:63:af:93:ab:ff:8c:19:96:70:1a:07:c8:
14:7a:7d:02:73:e0:e2:24:ac:99:ac:e9:3f:50:ce:cf:2b:11:
21:9f:3e:11:25:a9:23:e8:9a:a8:69:07:7a:78:0d:03:d7:1f:
a3:21:8b:b4:1b:69:f8:d1:0b:c5:79:93:0a:5e:4e:a6:62:02:
38:93:cc:5d:04:52:9d:48:07:e6:28:80:8b:12:e4:2f:db:bb:
aa:fa:bc:2e:30:5f:1b:ac:b9:d5:fc:9a:f7:ca:25:d0:2e:7f:
95:41:d7:b4:28:ad:8a:01:23:8d:8a:80:8d:87:b0:88:4b:36:
ac:f2:d5:c4:e1:77:ab:6e:90:01:18:44:3a:ee:3e:65:c6:82:
b6:cf:7e:0c:20:b4:63:2a:c5:db:3b:73:d3:66:1f:1b:c4:5f:
06:eb:f4:61:0a:f3:da:ab:63:7b:ff:a0:5c:1f:bd:37:1f:d9:
fe:2d:c0:fb:ec:a2:bc:24:2c:9d:ca:d0:53:5f:ad:4b:49:7d:
de:62:37:14:14:10:68:53:0b:a3:12:4d:49:94:ad:c6:bd:bb:
c6:f1:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:30:20 2026 by rpki-client