Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: RTaY19yn2N4D4Wg1eZM7tjDZPHrj+oG2v78B6NWZY3E=
Subject key identifier: 28:53:71:6B:B5:82:D7:EC:BB:4A:E5:81:61:94:EE:D6:EC:BD:D3:FA
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 01A0C444A89A64BF1E6F27E7308A02AE621B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0EB2
Signing time: Mon 21 Sep 2026 14:00:28 +0000
Manifest this update: Mon 21 Sep 2026 14:00:28 +0000
Manifest next update: Tue 22 Sep 2026 14:00:28 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: /q+Fy2hHTlQ1kZLb5qN2K2sS0acO/07mCuPe393XmO8=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:a8:9a:64:bf:1e:6f:27:e7:30:8a:02:ae:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Sep 21 14:00:28 2026 GMT
Not After : Sep 22 14:00:28 2026 GMT
Subject: CN=2853716bb582d7ecbb4ae5816194eed6ecbdd3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:75:94:4b:db:d4:f5:ae:95:f7:fb:e6:1d:
f4:4c:a7:54:6f:3a:ed:91:5b:b5:36:fa:c9:96:78:
17:01:55:45:96:cb:a8:43:ea:ee:1b:83:4c:c1:95:
75:26:5a:09:40:f2:a1:77:1f:3f:a0:0d:24:ee:86:
07:b2:bb:d8:70:ee:37:ab:3f:7e:21:59:a4:12:f5:
72:c7:cf:9a:16:bf:a1:f1:d9:6f:d1:b2:a3:e9:42:
ae:5c:a5:c6:fb:99:43:1e:ee:68:16:33:5c:36:13:
50:59:10:1f:8f:0e:f1:eb:60:4c:53:cd:d8:77:ff:
98:3a:9a:30:54:c6:3b:31:9a:0f:2d:72:88:08:76:
2d:7f:ba:b2:16:05:5b:ea:c1:0c:e9:c9:41:d2:b4:
e5:46:6d:ce:55:3e:ac:ee:96:61:84:31:5c:50:bb:
44:53:8f:5e:75:24:b3:69:03:ba:fd:3f:8d:d3:b0:
77:61:f5:02:2a:f8:f1:c2:65:ab:7e:cd:c0:33:f8:
cc:b3:da:76:25:79:13:a9:a6:eb:1c:83:c2:18:b4:
9c:d8:35:87:17:95:ee:66:18:44:79:db:89:68:2d:
ba:ea:9f:be:0f:95:cc:f8:ea:c2:25:8d:9d:0a:c6:
50:90:d5:34:b8:7d:7f:e7:67:85:41:ed:d7:8c:26:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:71:6B:B5:82:D7:EC:BB:4A:E5:81:61:94:EE:D6:EC:BD:D3:FA
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:24:fd:90:49:d6:85:8b:7e:c0:ea:e7:10:9b:99:65:1e:
d3:09:17:9f:f6:5a:35:32:2a:65:8a:88:68:7c:a3:fc:b9:d9:
63:93:c2:3e:a5:2e:34:2c:32:9f:fd:50:d1:f2:64:19:4a:0d:
32:c0:60:c3:93:36:1e:e2:ed:56:41:8c:19:9f:5f:28:ec:b9:
c6:ef:f4:3f:ca:19:b2:3d:5b:30:a9:ef:23:f6:41:25:d5:dd:
70:24:43:fe:06:ae:e3:ee:eb:a3:85:2a:77:23:1c:9f:88:b0:
36:d8:d1:dd:bd:d0:2d:72:91:27:d9:a7:f9:47:d9:51:0b:f2:
c8:8f:59:39:8d:90:d3:b0:3f:d0:0b:29:8a:06:43:5f:c3:b2:
9e:91:26:66:1a:61:47:e0:8a:41:e2:ea:1b:81:97:f7:e7:e6:
0f:44:36:b1:a3:87:06:f9:ab:e3:e7:67:f2:0e:2f:b0:4f:0f:
ec:39:ba:b5:70:06:27:73:02:38:1c:4d:c4:c3:37:27:af:e1:
35:ac:4a:e1:1d:29:6c:3f:52:4e:1d:3a:3d:36:5c:d0:ee:3d:
de:dc:8c:de:1a:ae:14:da:cb:18:e9:74:b5:18:4d:22:df:4c:
9f:92:cf:4b:a6:99:32:8b:43:99:12:2c:e4:c4:c9:d3:b1:5a:
9e:bb:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:17:29 2026 by rpki-client