Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: o/PR0QmJM/a8j2Gn3jfHr1gNPnsG06sAnIR9l/1ZT/8=
Subject key identifier: 6C:11:01:39:67:DA:BE:E3:11:F4:1B:0F:7B:D8:4F:E9:02:85:DB:A2
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019EBEED0F565BC9077EBE807DBB6DAA77CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 08A7
Signing time: Sat 13 Jun 2026 03:01:07 +0000
Manifest this update: Sat 13 Jun 2026 03:01:07 +0000
Manifest next update: Sun 14 Jun 2026 03:01:07 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: YHZhQTwrxC2fiWkZnDJYPcWQkmh44Ey5ws4eY19ncYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:0f:56:5b:c9:07:7e:be:80:7d:bb:6d:aa:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jun 13 03:01:07 2026 GMT
Not After : Jun 14 03:01:07 2026 GMT
Subject: CN=6c11013967dabee311f41b0f7bd84fe90285dba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:ef:8e:7e:22:3a:92:74:48:ac:01:db:ed:
9c:8f:3b:c6:25:6a:d3:ba:f0:9c:0e:1e:54:2d:d6:
64:78:6c:8b:d5:6f:fb:e0:0e:8c:43:bb:c0:e0:ac:
1e:83:c7:25:0f:cb:a6:f2:75:05:1f:ab:89:77:a5:
ca:fd:3f:72:50:ce:ba:9b:26:e6:bc:ac:c4:20:36:
bc:af:dd:cd:e1:f4:13:92:bd:20:cd:46:f5:e5:b4:
b3:2d:c4:21:1e:f8:0a:98:0f:88:b6:91:4c:e9:87:
df:56:90:1b:b8:00:2d:7b:c6:f9:ca:70:f5:28:63:
70:d2:05:27:83:97:58:9f:f8:cd:ca:bc:a7:09:8b:
52:f2:f2:48:6e:da:97:57:3c:a1:6f:1b:28:5c:77:
dc:9c:ad:52:03:0e:9c:e2:5b:53:06:a1:7c:56:be:
ac:5c:24:4e:f3:86:9a:37:fe:9c:cd:5f:a2:f1:3f:
f5:68:25:6a:6d:e8:3b:eb:79:25:a5:56:38:6d:1b:
ba:e0:13:62:eb:48:d6:d4:f9:6b:4f:e7:e9:e6:3f:
86:50:f4:69:05:bc:8c:3e:45:fd:df:86:6c:bd:65:
29:9f:89:f5:f2:02:35:24:ca:cc:0c:6e:16:d1:59:
b5:53:ec:d2:cf:22:28:af:1b:53:8b:f7:b0:dd:31:
b9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:01:39:67:DA:BE:E3:11:F4:1B:0F:7B:D8:4F:E9:02:85:DB:A2
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9f:69:79:f2:c2:dc:c0:0c:d1:68:c2:46:b6:76:cc:db:2e:
44:cc:e1:d9:b1:4a:37:d1:70:7e:c9:95:68:37:e8:98:d8:09:
fa:12:62:4d:fe:9b:7e:f6:61:8c:09:d0:f0:45:4b:33:34:1a:
cc:b1:b0:d1:b7:5a:23:68:b7:00:29:9d:24:ab:0c:5e:51:14:
52:1e:09:1a:e3:eb:18:5f:be:43:a6:10:f0:a7:72:44:f9:fb:
21:fa:26:5f:8e:18:51:40:ec:28:b9:ef:eb:47:48:55:a8:aa:
e8:ea:0f:89:13:5e:15:19:66:5d:56:37:fa:a5:64:57:89:58:
0c:51:fe:ac:6f:5c:1d:50:d6:d3:bc:de:f4:d7:8d:53:4f:91:
ac:ca:2d:a0:6a:8e:b6:be:29:ee:9d:9a:46:34:aa:b0:16:af:
f6:94:52:03:90:47:d4:91:5c:6a:ee:03:35:7d:49:a9:64:d7:
ae:13:b3:04:8e:f5:1a:83:58:9d:84:2e:63:aa:2f:7b:fb:95:
75:4f:1d:77:34:28:d4:7c:a5:a3:bf:4b:22:b0:43:e6:16:e4:
a0:39:f4:99:04:82:fc:67:ea:7c:fa:db:d1:6b:24:3c:2a:cd:
0e:a7:d8:40:5b:2c:3a:e0:b4:15:e0:26:36:78:49:da:15:be:
67:55:ed:b1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+7Q9WW8kHfr6AfbttqnfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmQ2NjYxNmZmNjk3ZDUxNzY4ODY4ZThhMzUyMWI5YWRj
Y2VlNmQwHhcNMjYwNjEzMDMwMTA3WhcNMjYwNjE0MDMwMTA3WjAzMTEwLwYDVQQD
Eyg2YzExMDEzOTY3ZGFiZWUzMTFmNDFiMGY3YmQ4NGZlOTAyODVkYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuabvjn4iOpJ0SKwB2+2cjzvGJWrT
uvCcDh5ULdZkeGyL1W/74A6MQ7vA4Kweg8clD8um8nUFH6uJd6XK/T9yUM66mybm
vKzEIDa8r93N4fQTkr0gzUb15bSzLcQhHvgKmA+ItpFM6YffVpAbuAAte8b5ynD1
KGNw0gUng5dYn/jNyrynCYtS8vJIbtqXVzyhbxsoXHfcnK1SAw6c4ltTBqF8Vr6s
XCRO84aaN/6czV+i8T/1aCVqbeg763klpVY4bRu64BNi60jW1PlrT+fp5j+GUPRp
BbyMPkX934ZsvWUpn4n18gI1JMrMDG4W0Vm1U+zSzyIorxtTi/ew3TG5EwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGwRATln2r7jEfQbD3vYT+kChduiMB8GA1UdIwQY
MBaAFPstZmFv9pfVF2iGjoo1IbmtzO5tMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15MW1ZV18ybDlVWGFJYU9palVodWEzTTdtMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWQwZWFiLWUyYTEtNDM5OC05ODcx
LWZmYWNhN2UzMDlhNi8xLzEteTFtWVdfMmw5VVhhSWFPaWpVaHVhM003bTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzM2L2FkMGVhYi1lMmExLTQzOTgtOTg3MS1mZmFjYTdlMzA5
YTYvMS8xLXkxbVlXXzJsOVVYYUlhT2lqVWh1YTNNN20wLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ9p
efLC3MAM0WjCRrZ2zNsuRMzh2bFKN9FwfsmVaDfomNgJ+hJiTf6bfvZhjAnQ8EVL
MzQazLGw0bdaI2i3ACmdJKsMXlEUUh4JGuPrGF++Q6YQ8KdyRPn7IfomX44YUUDs
KLnv60dIVaiq6OoPiRNeFRlmXVY3+qVkV4lYDFH+rG9cHVDW07ze9NeNU0+RrMot
oGqOtr4p7p2aRjSqsBav9pRSA5BH1JFcau4DNX1JqWTXrhOzBI71GoNYnYQuY6ov
e/uVdU8ddzQo1Hylo79LIrBD5hbkoDn0mQSC/GfqfPrb0WskPCrNDqfYQFssOuC0
FeAmNnhJ2hW+Z1XtsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:27 2026 by rpki-client