Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: HNi+vdXnnCb9n+O0h12h7HgjJsio4sMvciqFBl4dZ58=
Subject key identifier: FC:9D:56:9A:A1:49:22:44:78:BB:89:63:40:B8:6E:9E:D8:E8:4C:A6
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019FA975665BBEB13B3CEFC939E2EAA03126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 16:01:11 +0000
Manifest this update: Tue 28 Jul 2026 16:01:11 +0000
Manifest next update: Wed 29 Jul 2026 16:01:11 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: /r2pUtiYMzFWABaK8S+XhnswMe8YsnGRgSupDc2Nt48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:66:5b:be:b1:3b:3c:ef:c9:39:e2:ea:a0:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jul 28 16:01:11 2026 GMT
Not After : Jul 29 16:01:11 2026 GMT
Subject: CN=fc9d569aa149224478bb896340b86e9ed8e84ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:53:ad:a4:28:3c:bf:34:45:87:59:7c:8a:
eb:7c:64:c3:52:e7:2d:cb:3a:65:31:58:92:c6:8d:
ef:9a:e6:3c:98:b2:d3:88:98:36:8f:6a:29:81:ec:
e2:53:49:82:bb:dd:ec:f4:af:44:58:bf:03:06:8e:
e6:e3:53:bc:89:83:f1:ed:92:54:63:03:6a:53:e0:
b3:77:ff:da:4d:e0:4f:b9:08:dd:64:6b:1f:dd:9f:
c9:87:ae:04:79:88:0a:74:d8:bf:b4:4d:64:77:88:
26:b2:82:8a:33:b3:61:bd:71:07:34:35:55:5b:c0:
f9:1c:76:24:98:5e:e7:1d:8f:0a:5e:2a:b5:32:8b:
90:74:ab:07:e6:3b:39:cb:cc:ae:af:92:f4:81:43:
8c:b6:1a:92:0d:84:ea:fa:57:71:c7:72:22:55:89:
28:f8:6a:bb:6d:7e:83:3f:bf:26:f3:df:40:c5:51:
1e:42:8d:97:87:4f:03:29:d4:b8:60:79:6b:6c:76:
f2:e1:12:34:2f:b4:d5:42:a2:e9:bf:1d:54:e4:31:
29:15:a7:c0:92:05:1b:cc:00:3a:33:90:aa:a6:84:
7b:01:e0:a0:fc:86:f5:1e:44:f7:0b:86:5a:29:99:
f6:56:74:3f:80:c3:e3:61:62:a6:79:71:af:20:8c:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:56:9A:A1:49:22:44:78:BB:89:63:40:B8:6E:9E:D8:E8:4C:A6
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:23:3e:b6:bd:63:76:ea:cf:67:c3:4a:63:cd:04:25:9b:fb:
c5:29:7c:1e:d0:e3:b7:8a:4f:8d:57:6e:21:6a:56:b9:8c:c2:
b3:23:24:e9:54:b8:b7:2a:70:f1:e9:b3:95:10:1a:65:42:06:
2b:97:a3:de:b6:e7:01:eb:c8:bd:6f:82:7a:b6:7c:a4:bd:64:
21:84:45:fb:52:fe:34:7f:b8:72:1d:5a:19:9e:ee:5b:d6:58:
06:62:ef:86:19:3b:79:9f:f6:18:c1:e8:1d:f5:45:50:b9:af:
d4:c4:4c:55:3c:e7:09:da:93:fc:5b:1d:e0:02:77:fa:a8:24:
af:58:e8:d6:02:ff:73:41:61:8e:d9:fc:a7:7e:88:74:fd:77:
c3:63:90:a9:73:b1:ea:6b:ed:df:2f:40:62:34:be:42:42:4b:
72:79:5b:af:be:af:89:3b:33:2b:a1:86:43:b0:4e:45:74:21:
ee:71:6f:f4:09:4c:94:f7:57:cd:f2:3e:79:5b:57:fe:9e:cc:
ee:be:22:4b:4d:56:60:17:99:d4:c5:65:6e:e2:47:ff:e7:42:
d4:61:4a:55:e3:41:f2:57:b8:65:65:c3:9a:7a:c9:b0:28:95:
4d:4a:ce:d8:b4:40:45:a2:5e:58:7e:0b:2c:43:e3:9e:01:51:
82:1c:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:42 2026 by rpki-client