Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: nXvWeIRz6Y29SRmOlMGFjNTlfYze0LGl9OoXKQst6KU=
Subject key identifier: 22:D3:F2:AE:4E:5D:79:03:A5:C7:88:83:9E:B5:9F:8A:79:50:BA:1F
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019EBFC8C4520AC611D5BB178BAF6A751E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 07:01:06 +0000
Manifest this update: Sat 13 Jun 2026 07:01:06 +0000
Manifest next update: Sun 14 Jun 2026 07:01:06 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 2wBA1KTEcEtxRVHtL3mR5fuVGtLhnS7aEmh7dWXw28A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:c4:52:0a:c6:11:d5:bb:17:8b:af:6a:75:1e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jun 13 07:01:06 2026 GMT
Not After : Jun 14 07:01:06 2026 GMT
Subject: CN=22d3f2ae4e5d7903a5c788839eb59f8a7950ba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:46:92:aa:74:d9:d3:06:6d:a7:51:12:ae:
f3:09:1d:a8:a9:64:ca:26:6e:04:43:15:e4:5e:5b:
22:18:04:b3:ec:40:0f:f9:f4:40:ae:d4:75:6d:7f:
a1:d2:b0:7d:db:9e:83:a8:12:6d:12:77:0f:63:41:
14:ba:c2:8c:84:13:eb:c3:e8:e6:21:50:26:33:3d:
c4:d8:0e:b8:de:87:2d:2d:8d:63:d1:7f:5b:8e:be:
37:44:a0:38:61:50:8f:47:76:c2:ca:2e:e4:02:f8:
7c:57:9f:6d:0a:ad:7a:ef:ad:69:2f:d4:51:45:9f:
22:eb:17:e4:ec:4f:ff:68:6b:52:d8:8b:5a:64:e2:
e7:38:e1:9e:cb:ba:d1:12:aa:b7:67:fd:46:a7:d6:
42:2c:84:cc:14:6f:68:46:d3:5a:59:26:4e:4f:5e:
88:74:9b:12:09:d4:ba:52:d8:52:93:45:ca:c8:cb:
15:37:1a:6c:74:15:0e:30:8e:a9:32:80:99:04:ec:
7f:02:50:32:a3:90:7e:3c:4e:c8:d7:49:98:a6:e2:
8d:13:f9:a0:64:d8:b7:91:5c:63:60:cd:82:95:56:
ae:9b:f8:68:e3:91:58:b2:32:f6:c9:04:e7:a8:a6:
89:bd:19:29:fc:56:d7:8f:65:a8:78:f3:63:04:f1:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D3:F2:AE:4E:5D:79:03:A5:C7:88:83:9E:B5:9F:8A:79:50:BA:1F
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:61:aa:f7:9f:b2:d9:0e:7e:40:d5:19:a7:bb:e0:b6:53:
ef:6b:d7:40:6d:e8:3d:d6:5a:2c:e6:2d:23:99:5c:8f:67:35:
43:78:ec:d8:fe:2d:6f:e8:6b:ed:44:bd:65:33:4a:9f:65:8b:
f2:3f:f6:53:3c:ba:2d:b4:f9:23:b6:4b:91:7d:ce:81:cf:1f:
b0:a1:25:60:93:bb:e2:b5:b2:c9:f5:06:10:8b:0a:0d:a8:de:
b6:bc:5a:69:ed:ba:57:ac:14:1d:71:cc:32:bf:f2:87:79:91:
92:17:b3:7f:62:e3:0e:da:76:c0:0d:57:ef:d5:a8:0a:3f:82:
cd:bb:1e:63:4a:9b:cf:57:ac:03:9a:73:18:4d:07:ab:a5:bd:
3d:e5:78:6b:6f:a0:ac:3f:81:eb:58:48:e8:62:be:19:a2:a2:
33:64:43:38:da:d5:91:bb:f0:12:de:84:b2:76:4a:ec:d9:03:
5c:b0:b3:1a:e6:2d:e1:5f:2f:f8:c0:8c:b8:90:0d:13:a6:ce:
86:f0:a7:ab:cf:80:10:5e:d4:b6:ff:8c:9f:61:35:b0:a9:2d:
27:08:11:b9:ef:73:1b:f7:14:5f:66:75:fc:4c:d6:08:e2:6b:
61:5f:9d:7b:e0:8a:66:84:d0:2b:94:f0:ea:58:b6:46:12:36:
73:de:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:36 2026 by rpki-client