Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: Hohf5KkCaXDAtvUj+8Za0M8TD6GYmEA9NyGJA/Zl38I=
Subject key identifier: F2:87:5E:39:A8:81:58:E2:24:64:BF:4D:D9:F3:72:9F:40:67:25:3A
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019CAD5962110C9DFA34883AB311B092F648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0B76
Signing time: Mon 02 Mar 2026 07:00:41 +0000
Manifest this update: Mon 02 Mar 2026 07:00:41 +0000
Manifest next update: Tue 03 Mar 2026 07:00:41 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: gjHKWKn67LL6WVCgiuPyF8+cLrvW4B2O5DjM54nlnvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:62:11:0c:9d:fa:34:88:3a:b3:11:b0:92:f6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Mar 2 07:00:41 2026 GMT
Not After : Mar 3 07:00:41 2026 GMT
Subject: CN=f2875e39a88158e22464bf4dd9f3729f4067253a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:89:46:f3:0c:a8:6f:f7:f7:98:ab:04:f9:
da:39:23:60:07:d1:5b:b3:59:38:03:e6:27:e2:7c:
fe:fb:23:39:cd:ef:47:ac:b1:e7:a5:08:82:ba:fe:
0a:c1:96:c1:06:ca:7b:0a:ca:13:bd:a1:db:85:92:
1a:4c:2c:73:17:21:19:ba:a2:a9:a0:14:0d:db:2a:
1c:d8:d4:21:73:e6:20:ef:19:fe:c3:42:86:8c:8f:
d3:1e:47:f8:9f:ca:fd:f2:33:4d:88:97:25:28:d1:
34:4b:df:c3:80:92:02:e6:c5:78:78:00:80:f6:16:
83:43:6a:4f:d2:85:ca:7d:f0:3a:0f:70:21:e7:61:
7f:b2:5a:e5:fb:67:df:ab:8a:d8:24:92:d5:e8:a6:
55:16:f4:d9:49:e5:26:d9:3e:5a:cb:76:b8:69:42:
3d:61:62:bc:53:f2:b7:5b:21:d5:93:28:bd:6f:4e:
f8:b0:4e:01:01:0c:b3:32:ff:ae:2b:93:cd:92:8f:
28:f0:da:0f:30:bb:3f:ee:3d:a6:9b:36:69:4f:c8:
24:c8:1a:49:50:af:9c:f3:fb:6d:95:74:55:cf:8a:
e0:21:ba:03:0f:ae:7b:0d:3e:38:da:6d:22:00:01:
13:95:24:98:9e:ab:be:d6:97:37:16:f9:5f:80:0c:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:5E:39:A8:81:58:E2:24:64:BF:4D:D9:F3:72:9F:40:67:25:3A
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:a9:6e:b6:86:c4:69:be:1c:66:d5:8e:ed:ff:ac:bf:4f:
5d:e1:87:d0:0a:e6:2c:35:ce:d6:19:42:bd:82:22:cf:fe:49:
94:9c:8a:cd:9f:bf:da:93:73:ce:78:cd:04:e9:09:32:e4:17:
93:67:d8:3d:c6:b3:b7:96:bc:e5:92:0f:6f:cb:3f:d8:80:ad:
80:24:ad:72:d9:97:85:e1:8a:f4:a5:12:22:a5:c2:37:7b:9d:
2e:e0:a7:62:ee:98:6c:e4:55:30:ef:46:6b:e6:4e:e6:f4:cb:
d5:ee:d8:02:a4:2e:1e:24:0c:51:dc:4d:80:b3:84:cf:44:57:
74:ae:6e:e5:df:6a:af:0e:4f:11:48:7e:41:ac:31:d2:aa:0d:
4e:aa:2a:a2:a8:98:ec:3d:d8:ba:48:03:3c:5a:cc:c1:26:8a:
66:71:6e:bc:97:a7:f1:a3:09:db:11:1d:b9:cc:db:15:bf:e0:
67:3d:bd:87:d3:99:2d:9c:13:e9:73:54:2a:e7:07:58:3f:70:
13:fa:a0:65:e2:f2:7e:da:8b:ca:7c:ac:6a:d6:02:84:09:cb:
52:5d:71:d7:dd:da:88:88:f3:0a:14:0f:25:0c:b1:8c:44:15:
32:6d:a1:05:fa:62:24:a6:a1:65:14:be:e9:cf:f7:10:dd:b8:
54:8e:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:30 2026 by rpki-client