Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: j8TbXHfYNWEdH3tnL6etT9FYxtFJfbGzbsc0sHoZDTk=
Subject key identifier: 3A:03:1A:14:69:D5:90:57:C1:4D:C4:6E:D1:E0:37:0A:7A:D0:19:19
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019D992B1400FE6F92E70BC36C619FAB0D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0D0E
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: x2hCzRgvbjp9MkuurmCbaXxr+HkjvHVMBAq6a93fpMM=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:14:00:fe:6f:92:e7:0b:c3:6c:61:9f:ab:0d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=3a031a1469d59057c14dc46ed1e0370a7ad01919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:34:9b:b0:80:7f:8b:e7:ab:12:34:1a:ed:
66:da:90:ed:5c:bf:b0:1b:2f:12:d1:45:30:93:f7:
d1:04:94:98:05:0d:0e:4a:82:98:4e:42:43:80:4f:
8d:8a:d7:70:04:4e:d5:20:94:2c:bd:7a:5b:d0:31:
fa:e7:4c:31:0c:fb:a5:aa:39:62:1b:2b:e9:fd:e7:
ac:26:20:d8:96:84:51:16:b0:f1:a2:47:e9:e5:b1:
99:f5:22:f0:63:cf:87:9d:d9:89:f2:d2:11:7d:ef:
5b:6e:07:d5:fc:16:23:12:48:9a:59:06:33:0d:98:
34:6f:4f:80:c9:05:f5:3f:36:35:eb:46:1b:8d:54:
54:af:02:48:7a:d1:0b:75:33:42:4a:6f:e3:18:af:
ed:73:d1:aa:5e:8b:83:88:4f:c3:6d:a3:bb:0f:c2:
f6:dc:03:20:09:83:8f:cc:15:b6:cc:00:bf:8e:94:
0a:6e:40:cd:2c:30:db:87:e1:3a:2e:17:dd:7d:4a:
2f:33:ad:e6:7e:ed:a6:7a:1e:9f:0a:86:38:51:2c:
c1:66:77:d4:b9:c9:5a:06:69:2f:2d:d4:3b:2a:33:
1e:6a:31:6c:d2:dd:60:e6:db:7e:ae:e2:a4:aa:8f:
6d:2e:1e:77:2c:7d:8e:b5:f7:31:c6:79:b7:1a:9c:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:1A:14:69:D5:90:57:C1:4D:C4:6E:D1:E0:37:0A:7A:D0:19:19
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:7f:28:3b:92:52:78:c2:b7:58:47:5c:d5:e5:59:96:f2:
dc:55:f3:56:96:a9:82:73:e4:be:95:29:ca:ff:e5:05:1b:43:
79:78:40:8b:86:8e:7b:35:5e:07:93:81:61:e6:a6:34:a1:5c:
ca:a1:12:38:86:d9:6e:7e:93:94:31:7d:63:b8:e7:39:c8:0e:
29:aa:b0:0c:45:74:fe:22:38:d5:1c:8b:76:f3:ae:03:43:d0:
cd:32:7d:36:36:9d:17:25:65:59:b6:4b:10:d3:16:1f:20:27:
b1:c0:09:ce:3b:e7:7f:3d:87:69:48:8f:6f:77:5e:9b:32:e4:
db:60:62:6f:23:81:d0:13:fd:63:b6:b2:87:24:62:2d:a0:4a:
eb:8c:bf:d1:8f:e5:be:e8:ae:75:c4:d4:5b:76:71:2a:2e:2a:
8d:90:a2:42:ab:da:e4:5f:7e:ce:92:d3:a8:9e:1b:4a:61:20:
dd:3c:e9:05:61:03:cb:f2:bb:80:ec:66:25:08:94:35:65:4c:
e4:46:b9:72:e0:b0:f5:c1:d2:95:3c:c5:12:4a:44:f7:db:d5:
d2:3d:60:1e:cb:e8:14:43:2b:ee:36:5a:0a:c9:b8:23:7c:c9:
b8:af:d3:97:b2:0a:f7:4f:1b:18:dd:d9:06:74:0d:e2:49:4f:
ca:32:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:40 2026 by rpki-client