Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: oyGvE5fXBWR7fK5n1XsmtUGIOuRrWGzbDCpcbdq6BAk=
Subject key identifier: D4:E8:31:F7:1D:99:1D:11:78:08:E2:FE:F6:B2:12:49:7C:65:5B:7E
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019EC06D43B9936559B879041F6D1052A681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 10:00:46 +0000
Manifest this update: Sat 13 Jun 2026 10:00:46 +0000
Manifest next update: Sun 14 Jun 2026 10:00:46 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: 3OHR+ixxMTfcRKlW8H84Ay3NilcJPqjDC48qQ9okf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:43:b9:93:65:59:b8:79:04:1f:6d:10:52:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Jun 13 10:00:46 2026 GMT
Not After : Jun 14 10:00:46 2026 GMT
Subject: CN=d4e831f71d991d117808e2fef6b212497c655b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:b9:6f:cb:a3:be:e3:5d:ec:2f:39:00:96:
92:d0:da:1b:a5:c5:12:37:8f:e8:83:40:03:57:c0:
30:8d:08:a4:42:7f:02:b7:ff:93:ec:36:b2:98:d1:
6a:55:53:be:ae:89:e8:72:6d:9e:0f:0a:7f:13:00:
aa:bc:8c:a0:72:3a:9f:7b:32:0b:1d:02:d1:8a:b5:
a2:1c:43:23:b1:58:f3:cd:fd:4f:7a:60:5c:aa:11:
55:a7:4f:91:e9:ee:a0:65:35:f9:fc:d2:d2:f8:a7:
c4:02:06:39:0c:8d:22:c9:80:4f:86:4a:bf:d3:b8:
be:b3:75:12:9a:af:54:e1:9a:e1:51:d5:48:a0:20:
ca:0b:8c:35:20:64:e4:42:9c:69:d2:1f:48:e6:4a:
3a:87:a4:ff:dc:1e:cd:6a:7b:86:d0:a5:42:8f:61:
16:ec:4c:3d:f2:5d:04:a5:45:e1:0b:b5:ad:f5:6a:
b5:43:2e:2d:9a:d3:8a:c5:36:d3:bd:20:e9:fe:e2:
a4:2c:6f:70:71:99:f8:74:7a:64:6a:a1:0c:e7:15:
a1:b6:33:8d:e1:23:5a:2e:5d:fc:4e:52:26:80:9b:
6a:03:aa:57:39:3f:0d:be:fe:e1:bc:f4:06:92:15:
01:f3:19:f0:e3:c5:0b:77:02:39:bc:ba:7c:4a:76:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:31:F7:1D:99:1D:11:78:08:E2:FE:F6:B2:12:49:7C:65:5B:7E
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:54:c9:7e:76:59:f2:3c:dc:b4:69:15:65:7c:0d:70:96:f5:
e2:cf:4c:5c:fb:e7:9e:1d:1b:17:8e:f0:64:41:d0:71:72:c1:
07:09:fe:8f:52:77:61:ff:02:50:d9:09:e9:29:d9:48:7a:3c:
d3:13:e0:c8:a7:63:7a:82:2c:97:3c:7d:19:05:26:7e:cb:92:
81:81:e0:25:f1:89:6f:57:0c:42:ae:ab:d3:ba:0e:26:ff:4a:
af:3b:ee:ac:df:7c:a1:e8:29:5c:15:65:d6:65:fd:d2:98:19:
90:c5:d1:61:62:a8:77:40:b0:0c:03:3b:8d:11:b4:38:0b:51:
19:31:78:31:18:75:5e:ca:27:00:f9:aa:1f:74:fd:10:f6:3a:
64:84:5f:80:bb:83:2b:f3:a3:c9:34:51:cd:63:34:35:1e:43:
43:6f:b6:23:0e:c3:76:23:f9:f0:11:15:09:9b:3b:cc:55:e6:
4a:df:5c:7b:07:d1:8b:d1:3c:89:f2:92:aa:31:1b:43:62:61:
3c:40:08:66:f9:46:e6:63:60:3d:82:d6:9d:79:85:fa:0c:37:
27:98:d8:8b:91:d7:e5:f1:2a:d8:b4:24:e1:45:46:7b:a0:25:
ba:ac:32:f2:cc:a6:f4:20:73:28:0b:35:10:ce:c3:73:20:de:
09:b5:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:08 2026 by rpki-client