Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: zs7bV51k2COS3cugnY662iZSAJcT1daBwOmrgE4boK4=
Subject key identifier: B7:A0:36:07:A2:12:CA:72:65:ED:B3:DA:C8:B6:8A:DA:7F:32:9E:44
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01A0C93494810EC18798BECC8DB84FBB0661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 13:01:01 +0000
Manifest this update: Tue 22 Sep 2026 13:01:01 +0000
Manifest next update: Wed 23 Sep 2026 13:01:01 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: TvMb1JvhoXsdmrI09NvEszDZdHoRy3xxEqyY1n/4hr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:94:81:0e:c1:87:98:be:cc:8d:b8:4f:bb:06:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Sep 22 13:01:01 2026 GMT
Not After : Sep 23 13:01:01 2026 GMT
Subject: CN=b7a03607a212ca7265edb3dac8b68ada7f329e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:2b:c2:3a:c5:ae:b8:c3:70:11:b7:c3:ca:
21:33:54:05:de:f9:f1:81:b8:d8:07:e1:a3:22:72:
43:20:19:e9:8c:fe:5d:40:22:08:9f:c1:2e:25:8c:
db:d4:62:f0:92:2d:8b:e1:1b:0a:61:f5:f2:b7:1f:
d0:98:d5:0b:fd:cc:22:5f:a2:9d:c9:92:8b:d5:7f:
5c:a7:53:25:c1:33:dd:e8:c6:0c:b8:d5:1e:32:00:
fa:0e:79:35:2c:cd:ba:fe:4a:06:45:a2:92:16:95:
5b:f8:09:0b:0d:e1:a8:d8:0e:93:b9:ca:2b:90:15:
ab:01:0c:39:51:1b:2d:e1:5a:5c:35:16:25:f7:42:
bb:b2:c9:34:e7:b4:cf:09:3d:ee:8f:94:a9:cb:77:
6f:0f:b4:d5:9f:a2:cb:dc:15:d5:d8:49:0d:63:d1:
4a:c1:06:48:3b:3c:96:e8:6b:b7:a1:9c:d4:71:49:
1a:ff:69:a6:cc:87:70:02:89:6a:9b:49:80:b3:a2:
50:85:be:b8:81:f6:97:14:1c:5e:3c:e0:9f:1b:86:
b5:f5:7e:0d:40:fe:80:3c:c5:79:7c:cf:39:f1:d4:
26:f0:bd:bc:54:2b:2e:e0:7b:9c:69:24:f7:b8:3f:
75:75:33:1f:cc:99:f7:ad:fd:94:f5:48:f3:16:74:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:36:07:A2:12:CA:72:65:ED:B3:DA:C8:B6:8A:DA:7F:32:9E:44
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8a:3b:84:fb:32:d8:fc:08:4b:2b:ec:bb:70:ea:cd:7e:be:
9d:8a:ca:fd:6d:71:7e:ec:73:7f:69:dd:10:ef:61:4a:71:d5:
ab:13:a3:bd:2a:a9:b9:d7:55:2b:9b:b6:bd:6c:1d:96:b9:2a:
10:23:74:95:1c:12:19:d9:34:5b:3d:61:96:ce:87:b2:99:30:
0c:36:2f:52:47:ea:8e:14:43:e1:3b:5d:6f:ad:7b:8b:65:52:
2a:b6:92:31:66:a3:38:cb:6f:9a:d6:a7:b0:d3:bc:cc:89:4f:
6f:09:47:28:82:eb:9a:97:e2:10:4d:87:22:2e:2a:55:48:aa:
22:ae:73:12:7e:68:75:b1:39:f3:12:2c:d2:c4:3f:08:6f:a8:
b2:dd:c5:6b:c7:52:8d:35:bc:27:1a:ce:ec:ff:55:56:7d:02:
99:40:79:4a:9f:90:7e:5c:a2:6c:ab:90:4d:fc:27:ef:70:24:
04:0f:85:26:e5:d2:74:a6:ca:e6:74:99:d6:f2:74:e5:bb:6d:
2f:55:c7:58:4b:8c:c2:00:95:63:56:de:ed:b6:6c:cb:d8:c9:
21:42:8f:62:55:ec:01:1d:30:91:ff:85:fc:1f:ac:64:34:64:
51:af:c1:2f:94:6c:a3:6f:47:61:88:9f:6f:7f:a1:7f:68:a9:
92:55:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:45:48 2026 by rpki-client