Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: MXkJ9WO6AQ1GzQSBPa1BPR/X2obwCon5O6q01uPU9lE=
Subject key identifier: 3B:96:D5:93:B4:CA:B7:0D:C6:AD:CE:3B:99:E1:4C:D7:DF:99:C8:08
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019CAB6B81D7F4AEA3EC423DF9AD86FBCA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: xweq14lyT09AK3igTt6UpYIPlfukj9ulVd3NrwRiW5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:81:d7:f4:ae:a3:ec:42:3d:f9:ad:86:fb:ca:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=3b96d593b4cab70dc6adce3b99e14cd7df99c808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:ed:bf:bc:ad:bf:48:6b:ed:91:11:b1:71:
26:4e:5b:9c:a4:35:e8:a8:69:59:4c:4b:c7:72:bb:
23:e5:1a:fa:fb:4b:38:6b:0c:ae:5c:dd:9c:1c:c8:
26:ef:7f:aa:a6:49:bd:7c:f4:fa:b3:ca:ed:39:3b:
52:43:62:df:c6:bf:d7:ff:6b:8a:48:16:44:64:28:
f5:eb:d5:56:9e:f8:f0:ba:03:c8:06:1e:c9:bb:54:
1e:27:ac:27:1b:60:5b:e9:32:8f:68:6b:e7:76:ec:
33:8d:48:ac:82:4f:67:99:fb:d1:68:dd:3c:dc:89:
6c:d9:c5:7e:ed:41:bc:54:ea:4d:ae:b9:8e:d2:b9:
56:15:02:72:42:a0:5d:34:ab:90:e8:58:74:95:0b:
4b:00:b3:d6:56:3d:ea:0a:93:61:98:a2:48:e1:d4:
54:66:1f:13:16:40:8c:1a:ba:f8:ca:0c:3f:eb:c6:
f7:ac:ba:e1:d5:72:34:7b:4b:64:3b:0e:5e:d9:fc:
47:ff:5d:73:49:a5:89:c7:26:fc:18:67:da:db:96:
0b:02:8f:82:d0:80:31:5c:da:2e:74:25:30:9f:db:
4f:5a:61:62:af:63:7e:34:30:a0:5c:84:3c:49:37:
6a:ee:4f:24:23:5a:10:07:18:16:3d:24:76:a0:ce:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:D5:93:B4:CA:B7:0D:C6:AD:CE:3B:99:E1:4C:D7:DF:99:C8:08
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:68:15:d0:26:9e:8f:89:24:42:1e:d0:e3:73:08:af:f4:cd:
26:56:0b:fc:09:1f:b8:6f:59:58:da:05:8f:49:74:d6:19:e2:
1c:5c:0d:26:d7:33:4c:d1:94:73:0f:5c:f1:07:5d:48:b5:0e:
f6:2f:0c:88:19:e0:d9:de:5e:c7:10:a2:3f:44:f4:f3:ff:5a:
d8:4b:a4:7c:c9:56:f4:d3:1d:b5:18:8e:9b:bc:52:67:ff:d1:
c8:25:91:ea:47:c2:6c:5d:c9:f2:15:f9:92:4f:ea:c9:76:63:
6f:70:5d:6c:c7:c0:4d:22:59:5a:07:7e:86:38:af:2d:0b:ab:
f9:6e:34:6d:e9:8d:92:ff:6c:f6:e1:ad:bd:6b:0b:a6:27:9d:
c3:a1:12:04:29:fc:05:fe:0c:75:f2:61:ec:a7:7d:3f:15:3a:
c9:be:5c:c8:70:a9:42:b8:a4:cf:34:ce:fc:fd:bf:e4:90:77:
40:51:27:46:a8:32:45:a8:c6:ff:78:b8:cf:0a:a6:58:fb:b7:
d8:d4:af:a8:1c:c3:8b:e8:d0:69:2d:d9:10:b1:99:7d:81:bc:
50:7b:4d:ff:fc:93:c0:a7:8b:40:12:ec:bd:dd:d5:70:5e:82:
35:2c:02:b6:e3:a3:7d:ae:32:8e:bb:fb:88:f1:8e:6d:e8:55:
76:d1:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:35 2026 by rpki-client