Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: TjhuF3Vl4uHfVgllhacIx63ObN0VnqHLviQTuqCWlAs=
Subject key identifier: F1:2A:3D:70:F7:15:FA:37:41:B2:C4:E5:AC:51:46:68:B4:2E:07:A6
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019FA8621E9E789AD908A400D66077B2891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0E1F
Signing time: Tue 28 Jul 2026 11:00:30 +0000
Manifest this update: Tue 28 Jul 2026 11:00:30 +0000
Manifest next update: Wed 29 Jul 2026 11:00:30 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: Ry9v+2ILvaolyMW8Tyv15NBo+sWrBQyvaZ7szjBQ81Q=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:1e:9e:78:9a:d9:08:a4:00:d6:60:77:b2:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Jul 28 11:00:30 2026 GMT
Not After : Jul 29 11:00:30 2026 GMT
Subject: CN=f12a3d70f715fa3741b2c4e5ac514668b42e07a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:15:6c:e8:80:2b:5d:a6:35:87:c3:b5:c3:
9d:af:fc:70:a7:bf:02:8d:bd:28:2f:19:c6:37:ce:
ee:9f:08:ad:b8:b0:ae:d3:bf:23:14:f1:e7:d2:cd:
74:aa:f5:79:a0:e1:5c:c6:32:e0:14:10:17:77:f1:
66:0c:f7:8f:06:30:fc:49:cf:63:82:4d:88:d6:9b:
72:3a:04:ce:51:52:89:dd:38:2e:34:62:60:cb:fa:
c6:81:b9:c9:26:f5:84:55:36:14:07:57:87:6f:35:
9b:c1:f5:3c:7d:ba:2a:37:42:98:bb:95:56:b1:60:
ae:5d:c6:71:16:df:26:87:a7:7d:9f:96:30:2c:fb:
7c:07:4c:48:09:7c:32:2c:58:5c:2c:db:8e:77:09:
a9:18:f4:d6:ff:92:a9:78:cd:29:6a:77:c6:98:e3:
07:c8:a0:bc:b8:a4:7c:6d:44:f6:d9:b9:bc:ec:29:
37:9a:d5:de:9f:b4:3f:05:96:35:3f:2c:91:ad:fe:
e8:5c:a5:13:85:46:2e:59:4b:9c:d2:ed:f2:80:3f:
41:77:34:52:26:75:71:09:86:24:e1:f2:bb:79:7c:
2b:fe:bd:0f:b4:ca:bc:2d:81:81:c3:3a:9c:12:d1:
fd:ab:4b:fd:f9:17:85:2d:08:a7:3e:b7:c6:9c:13:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2A:3D:70:F7:15:FA:37:41:B2:C4:E5:AC:51:46:68:B4:2E:07:A6
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:4d:61:63:2c:d2:c2:b2:67:9d:f4:29:e5:eb:91:11:00:
02:27:6b:96:33:c4:61:fc:7a:b2:96:92:26:29:19:cd:6b:9c:
36:4b:9c:c7:7a:80:ff:1f:af:5c:62:69:ce:21:19:ef:82:c2:
2f:78:54:0b:85:1f:3c:73:ea:90:d4:3e:ed:d3:c8:a1:e3:60:
1c:5b:52:c4:40:06:39:a4:af:e0:4c:dc:67:3c:4f:24:56:22:
39:4f:1d:43:16:0b:ac:92:c9:35:46:e2:ff:8a:8b:5d:9c:aa:
8b:77:07:a2:54:58:e0:2d:34:61:6c:5e:0d:2a:bb:25:62:ce:
32:49:8e:97:71:8c:a1:d4:5e:ad:97:d3:f7:4b:29:8d:6f:d0:
a7:62:7e:cb:88:b6:57:09:9c:20:21:2e:09:14:68:a1:c7:1f:
72:b0:2a:ba:8b:f6:1c:2c:09:2d:65:7c:7c:b8:54:c9:9c:4e:
9e:f7:98:76:d6:90:6d:9c:12:8c:af:f8:b5:04:4b:24:d5:48:
68:bf:a8:0a:a8:38:d1:4c:67:eb:f9:0e:ed:31:dc:7f:e8:cd:
96:67:2d:52:87:a0:8e:2f:6f:83:86:6a:75:7d:cc:e7:98:53:
54:8e:cc:f6:dc:e2:5e:17:c2:88:cb:74:43:b3:22:11:64:87:
c9:a3:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:56 2026 by rpki-client