Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: Z7+rJu80tYVitJoorxCYCB1S9m44JTp773kvf1kpsdg=
Subject key identifier: 3C:92:20:3B:A7:14:BF:A5:D5:F9:C1:D5:0F:01:AA:8C:24:EC:33:58
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019EBEB6297B136BD2C7DEBB55BB91694BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0DA6
Signing time: Sat 13 Jun 2026 02:01:09 +0000
Manifest this update: Sat 13 Jun 2026 02:01:09 +0000
Manifest next update: Sun 14 Jun 2026 02:01:09 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: QXV5b/rlznD4fHJ0SKm1ZMl+2FnFsSEQD/adBvTm08g=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:29:7b:13:6b:d2:c7:de:bb:55:bb:91:69:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Jun 13 02:01:09 2026 GMT
Not After : Jun 14 02:01:09 2026 GMT
Subject: CN=3c92203ba714bfa5d5f9c1d50f01aa8c24ec3358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:d1:d4:dc:75:9f:6b:78:ba:a1:95:19:f2:
53:6c:6f:e4:49:19:f9:50:e1:45:75:2d:56:2c:48:
97:24:57:33:65:c2:d1:2e:8c:c7:a9:0f:84:a3:dd:
23:23:9f:83:58:6e:d3:f8:6d:77:c5:ca:dc:be:5f:
0c:da:7c:31:17:f2:c1:51:28:d3:a7:54:4e:b6:40:
73:0e:96:89:9b:5f:66:7b:f9:ab:ae:93:6a:4a:f3:
b6:e0:2b:19:18:7a:b3:30:a0:d9:7f:19:f9:d3:99:
2f:42:6a:fa:bf:a7:eb:5c:70:7c:4b:27:3f:62:b4:
c0:7c:cc:57:bc:21:e7:43:74:e8:92:a5:41:4a:29:
08:89:4c:29:89:99:d1:4c:c9:b4:c7:13:59:7a:53:
50:24:f5:78:8d:00:c3:c5:c2:1c:98:03:cc:97:cb:
86:8a:34:b7:1f:67:3f:3c:ed:4a:f5:91:5f:81:85:
6c:71:c6:51:1e:3e:6b:32:70:f1:bd:76:8d:32:8e:
4e:85:c0:d3:28:31:2f:ad:21:13:79:89:e5:83:36:
ab:dd:84:c5:79:23:25:6a:7b:f5:8f:0b:b4:cc:87:
1b:46:bf:d8:29:c4:7d:d3:30:a6:dd:5d:f4:10:07:
1c:5c:ac:3c:2b:c8:66:c4:d5:17:9c:82:d7:9c:18:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:20:3B:A7:14:BF:A5:D5:F9:C1:D5:0F:01:AA:8C:24:EC:33:58
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:d9:a6:4e:ae:28:e8:8a:33:06:20:96:1f:1f:d1:0e:4d:
d7:dd:2f:f8:45:d0:9e:8d:eb:65:c3:f0:f6:55:0a:73:71:0e:
80:bd:5e:5c:70:4d:06:73:c2:a8:81:8e:bd:56:1f:ac:cd:8d:
f0:3b:36:cf:f7:f1:d6:a4:f2:1e:b5:67:aa:9f:1b:7f:57:98:
1c:10:16:c1:f8:b4:69:19:14:6a:0d:3c:57:6b:d4:62:07:42:
dd:96:79:11:7a:23:e9:76:da:bb:39:97:73:05:c7:f7:77:9c:
36:27:1e:83:4f:f4:6a:4c:ca:ca:74:37:aa:21:e6:00:35:f0:
b0:f8:0b:53:d8:03:eb:bc:f5:33:d9:4a:12:f3:51:66:a7:8b:
62:e7:93:0f:23:d6:b5:9d:60:e9:dc:ec:78:4b:66:b9:0c:35:
f0:41:8f:9a:44:a9:0b:68:b8:71:95:ad:7e:66:e7:22:6c:c1:
5b:88:4d:a4:33:7c:e4:02:58:e5:18:b4:6f:9d:bd:36:40:a8:
16:65:74:23:47:d2:52:31:40:bd:95:e4:71:dd:29:86:f0:56:
0d:90:67:03:dd:d6:b2:97:41:cf:7d:2f:7d:d7:a8:ae:59:e4:
09:92:a4:23:5d:4a:6b:83:94:15:c9:90:83:13:b2:1a:54:10:
e3:50:b9:93
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+til7E2vSx967VbuRaUvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNTYwMjgwMmE4NzkzYTI0ZmRhNGQwZWRjYzMwYTE5NmMw
Zjc3ZTAwHhcNMjYwNjEzMDIwMTA5WhcNMjYwNjE0MDIwMTA5WjAzMTEwLwYDVQQD
EygzYzkyMjAzYmE3MTRiZmE1ZDVmOWMxZDUwZjAxYWE4YzI0ZWMzMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7R1Nx1n2t4uqGVGfJTbG/kSRn5
UOFFdS1WLEiXJFczZcLRLozHqQ+Eo90jI5+DWG7T+G13xcrcvl8M2nwxF/LBUSjT
p1ROtkBzDpaJm19me/mrrpNqSvO24CsZGHqzMKDZfxn505kvQmr6v6frXHB8Syc/
YrTAfMxXvCHnQ3TokqVBSikIiUwpiZnRTMm0xxNZelNQJPV4jQDDxcIcmAPMl8uG
ijS3H2c/PO1K9ZFfgYVsccZRHj5rMnDxvXaNMo5OhcDTKDEvrSETeYnlgzar3YTF
eSMlanv1jwu0zIcbRr/YKcR90zCm3V30EAccXKw8K8hmxNUXnILXnBj+jwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDySIDunFL+l1fnB1Q8Bqowk7DNYMB8GA1UdIwQY
MBaAFPtWAoAqh5OiT9pNDtzDChlsD3fgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0xWUNnQ3FIazZKUDJrME8zTU1LR1d3UGQtQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2
LWRiNWIxZjg5YTUwZC8xLzEtMVlDZ0NxSGs2SlAyazBPM01NS0dXd1BkLUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4LzgzODdhNy0wNjhjLTQ4MzItYWEyNi1kYjViMWY4OWE1
MGQvMS8xLTFZQ2dDcUhrNkpQMmswTzNNTUtHV3dQZC1BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4jZ
pk6uKOiKMwYglh8f0Q5N190v+EXQno3rZcPw9lUKc3EOgL1eXHBNBnPCqIGOvVYf
rM2N8Ds2z/fx1qTyHrVnqp8bf1eYHBAWwfi0aRkUag08V2vUYgdC3ZZ5EXoj6Xba
uzmXcwXH93ecNiceg0/0akzKynQ3qiHmADXwsPgLU9gD67z1M9lKEvNRZqeLYueT
DyPWtZ1g6dzseEtmuQw18EGPmkSpC2i4cZWtfmbnImzBW4hNpDN85AJY5Ri0b529
NkCoFmV0I0fSUjFAvZXkcd0phvBWDZBnA93WspdBz30vfdeorlnkCZKkI11Ka4OU
FcmQgxOyGlQQ41C5kw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:07 2026 by rpki-client