Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: iT7XMeUW9Xq1EYCnzK25dNKzUzXGxz7zKA8E4dK3e0Y=
Subject key identifier: AA:76:76:89:FD:F7:1E:2D:63:B8:CE:94:67:38:75:8D:EA:53:E3:A1
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019CAD90267AA0A9F04F4DAEFFAB0D3AE7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0C94
Signing time: Mon 02 Mar 2026 08:00:31 +0000
Manifest this update: Mon 02 Mar 2026 08:00:31 +0000
Manifest next update: Tue 03 Mar 2026 08:00:31 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: 6QlEgjMYKIYH0o+7zJ8ejKC3m0hJj7nmDO6OQBBRh3w=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:26:7a:a0:a9:f0:4f:4d:ae:ff:ab:0d:3a:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Mar 2 08:00:31 2026 GMT
Not After : Mar 3 08:00:31 2026 GMT
Subject: CN=aa767689fdf71e2d63b8ce946738758dea53e3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:41:55:b5:d2:29:be:0a:39:83:64:03:ee:eb:
cf:12:1a:1c:4e:60:7f:f0:d8:d2:ba:60:3b:ad:e1:
b6:86:35:19:8c:6c:44:70:09:d7:d4:c2:e6:5f:1e:
c5:cf:e3:ae:3e:fd:7b:f9:3b:77:6b:35:03:21:69:
ca:2c:c7:92:d8:c6:4c:76:f9:b7:97:04:1e:ec:0e:
7f:9d:e2:4f:25:73:fa:f0:57:cb:ad:ce:40:40:3d:
f2:c7:e2:6d:4e:b8:76:b0:68:45:49:de:17:c6:5e:
64:e7:30:7b:11:84:96:bc:7e:a5:a4:a9:98:b1:bb:
ec:88:8c:c6:98:ac:a5:ac:e7:2f:05:ef:1d:cd:fd:
c7:23:61:8c:03:f2:99:9d:c8:59:53:91:1e:78:21:
19:ff:de:51:71:77:e7:79:1e:f4:94:2d:68:8f:6b:
59:11:6c:39:ac:62:79:42:a5:69:0a:fc:40:52:bb:
96:12:b7:d4:61:25:a3:08:9e:bd:a7:bb:86:39:53:
3f:ff:0f:75:73:d3:3a:23:1a:aa:ef:a5:96:da:bb:
03:da:d6:f4:81:a2:b7:f3:d7:10:b2:e4:a2:a0:aa:
19:bc:6a:48:11:fa:68:c9:15:e0:da:80:1f:54:f2:
16:0b:24:24:d9:ac:80:83:68:db:93:be:ec:d2:ea:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:76:89:FD:F7:1E:2D:63:B8:CE:94:67:38:75:8D:EA:53:E3:A1
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4a:27:8a:3f:42:5a:23:5b:c0:bc:2f:17:c6:01:66:05:36:
8b:11:e7:b8:19:be:80:5b:6c:f9:d2:9e:c2:2b:c2:94:b7:21:
15:fb:63:64:79:73:df:f7:ea:90:49:59:f3:d7:86:21:75:49:
41:9e:c8:63:0e:55:14:78:52:4b:07:43:fd:52:a8:e9:ec:25:
5f:4f:55:66:fd:30:c5:bc:76:d0:6e:b7:c9:48:f0:9e:2f:ed:
0c:48:e1:c6:57:15:91:f9:93:0c:f7:15:5a:ff:42:b6:0c:11:
16:ee:a1:06:1e:a7:cb:f6:1d:89:63:1a:8d:c5:f2:42:9e:f6:
6b:d8:ef:00:6c:05:ff:57:26:6d:79:65:a0:a5:af:74:18:94:
7b:fc:b8:a3:73:e8:a7:c6:27:31:74:13:b0:60:99:aa:98:2d:
a6:fb:db:24:ba:46:f4:6f:33:a3:59:10:1f:f2:ae:98:20:1a:
bf:50:77:18:25:93:a6:5d:03:69:1a:26:50:9c:eb:ed:8c:5c:
fa:81:2c:72:4b:d5:6a:77:c0:f7:64:ae:bf:d3:6e:e9:9c:b0:
ca:e2:79:d3:7d:2e:64:d9:61:02:3d:aa:99:3b:37:87:a2:e5:
07:41:d1:ed:56:03:65:d6:29:ab:f3:d8:2f:66:a4:14:04:71:
2f:be:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:10 2026 by rpki-client