Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: n+i6zQifp1t6UmWJlJEHt3nCLghdEiSsZVQCEJmtuko=
Subject key identifier: 8F:48:BB:44:75:9A:3C:E4:E8:18:F7:6F:BC:7A:BD:B2:C9:01:7C:3C
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01A0CBC800E84E701B764A34391DECC12A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 01:01:17 +0000
Manifest this update: Wed 23 Sep 2026 01:01:17 +0000
Manifest next update: Thu 24 Sep 2026 01:01:17 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: HrAtM/lJu2tW7WMZ4SIPVSCVo7ObiyLdVbNJ+QiMmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:00:e8:4e:70:1b:76:4a:34:39:1d:ec:c1:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Sep 23 01:01:17 2026 GMT
Not After : Sep 24 01:01:17 2026 GMT
Subject: CN=8f48bb44759a3ce4e818f76fbc7abdb2c9017c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:9b:cd:ce:96:de:21:10:50:21:7d:cb:92:
e1:55:2b:c1:db:ab:87:e6:e1:bb:5e:b2:14:d3:90:
00:d9:60:59:4f:3e:b1:ae:05:2b:0e:b2:bb:87:c5:
0e:90:cf:a3:fe:dd:4b:9e:29:ca:b1:b3:84:7e:6d:
72:2d:a5:74:1b:85:bc:5d:b4:5e:0c:cc:3c:53:1e:
29:b2:e2:a7:24:be:b8:99:b1:49:28:3a:72:b3:a8:
cb:9f:f2:dd:3c:ff:b3:e5:9f:12:f4:24:a3:69:a0:
e1:2f:d6:f2:5d:99:dc:96:47:74:22:b8:5c:7e:da:
20:22:1a:82:12:17:e9:af:d1:67:70:6a:37:e3:d4:
c8:58:43:55:d2:98:a8:96:f8:c3:39:05:04:5c:7a:
06:9c:d9:50:a3:a0:9b:01:ad:c3:2a:06:0e:52:69:
28:34:a5:10:07:ad:ba:8e:72:df:2d:dd:b7:3e:5e:
96:2c:b2:65:ae:6a:63:e1:00:30:35:7e:10:ed:43:
9d:bb:a0:98:75:51:39:9d:6d:73:66:76:0f:5a:ef:
ed:6b:6a:c3:14:b9:a9:eb:7c:3b:ee:33:33:32:df:
57:7b:86:ef:97:f8:d4:d3:5d:43:7b:a3:a4:08:9b:
0e:74:9b:c0:5d:6c:99:e7:02:28:e4:b8:fd:3c:80:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:BB:44:75:9A:3C:E4:E8:18:F7:6F:BC:7A:BD:B2:C9:01:7C:3C
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5a:2b:10:95:a5:b1:d6:3e:0a:e3:d1:ab:e6:49:0e:58:5b:
a3:c3:e2:6b:6b:8d:38:95:fa:be:30:66:e8:16:bf:b5:05:5f:
1d:e8:74:33:24:a6:2e:23:31:99:22:3b:7d:d9:b4:6f:f9:07:
fb:ad:96:8d:27:d3:02:cc:2d:3a:1e:20:c0:c3:74:a6:b4:6c:
b5:9e:82:f6:8b:94:c1:63:f8:46:bf:47:f2:32:a1:9d:db:62:
c2:3c:01:df:4e:6c:92:3f:b2:94:70:c3:31:68:24:35:bc:38:
7a:3d:fc:f5:7c:60:b8:8d:61:fa:8b:fb:89:d0:cc:de:27:d4:
d8:98:d1:97:bd:96:21:cd:52:b4:2c:2f:29:7a:04:68:4f:0c:
54:39:b0:4a:d3:41:ee:25:47:3b:6e:41:8b:00:a1:49:db:5e:
42:31:dd:07:cf:f3:58:54:dd:56:83:a9:f0:e4:cd:49:63:98:
46:b9:95:b3:e0:38:83:70:96:8b:3b:83:8d:37:cd:7e:56:e4:
b5:3f:85:e8:0f:e0:ab:ea:bc:1e:57:d6:de:fd:d8:14:fb:a5:
a1:5f:d5:9b:7e:28:23:1c:23:f4:25:37:dc:33:96:4e:78:e1:
9e:2d:ba:2c:ad:d1:0f:d0:1b:1d:a0:86:c9:55:74:be:a9:64:
97:89:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:05:43 2026 by rpki-client