Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: N1UvsgQpTU46Q0zl3g6z4o+nS0tDdAYmqMJtd2aQyys=
Subject key identifier: 0D:BD:4A:D3:04:3E:9C:94:21:E8:27:70:79:F2:25:15:30:3E:5C:EA
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 019D98F4490DE3D03C1FDFA6A3740BDFA1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0BF0
Signing time: Fri 17 Apr 2026 01:00:39 +0000
Manifest this update: Fri 17 Apr 2026 01:00:39 +0000
Manifest next update: Sat 18 Apr 2026 01:00:39 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: uv3r50p4Qm4Jxg8T1I9r312+tiTofn7o8WgklEEEEOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:49:0d:e3:d0:3c:1f:df:a6:a3:74:0b:df:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Apr 17 01:00:39 2026 GMT
Not After : Apr 18 01:00:39 2026 GMT
Subject: CN=0dbd4ad3043e9c9421e8277079f22515303e5cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:62:39:95:c2:23:50:4d:9e:35:03:fc:40:
d5:67:15:98:6e:6b:60:2a:2b:81:81:06:ba:1a:8f:
fa:7a:b5:ba:05:69:d3:ef:ff:c3:23:02:6a:0e:e2:
7e:b7:9d:5f:d3:f7:3b:4c:f0:07:97:55:7c:8b:1e:
6f:a8:a3:1f:13:12:45:23:af:19:dc:f8:a4:6d:1e:
9a:52:9b:1b:d0:8d:d6:ae:65:5c:79:17:37:0a:96:
95:c4:19:b3:c8:df:f1:9a:d7:20:2b:c5:55:c9:6e:
53:73:4a:a7:63:b3:3b:82:eb:e2:8c:6a:81:ce:d3:
87:a7:4d:3b:52:20:ed:01:7d:7e:8f:1e:90:58:01:
fd:0a:fb:00:3d:cb:d7:37:bc:97:52:e9:f9:5b:6e:
1a:f9:bc:38:b0:1b:65:b6:84:43:53:c0:99:4f:ea:
9b:e3:80:b2:08:63:4d:c3:3a:bd:1e:9b:9c:d6:9c:
7e:47:e3:17:40:1b:7d:ba:5c:41:7c:dd:d1:98:c5:
a8:06:0e:a6:91:19:8e:ca:eb:80:2e:c7:24:d2:e4:
a1:31:49:a8:04:e3:7a:fc:5c:3c:fe:93:a2:1f:2d:
b5:49:16:4c:b7:cf:e8:f6:f6:e2:60:91:dc:3c:31:
49:6e:81:0c:62:e1:37:53:40:c4:45:31:1f:13:9f:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:4A:D3:04:3E:9C:94:21:E8:27:70:79:F2:25:15:30:3E:5C:EA
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:a3:14:b5:f8:35:d5:8d:f7:e6:58:d7:53:29:43:90:eb:
d6:c9:e2:9c:26:d2:f7:03:28:06:38:71:b0:c7:24:d8:08:42:
fb:0f:ae:fc:e0:a4:df:1d:ec:0a:f2:bb:e1:ab:de:dc:dd:7d:
e1:2a:9a:04:a2:6f:73:24:49:ed:4d:f2:4a:b0:47:de:bb:92:
2c:c6:5b:3b:ae:ac:b3:c4:4a:ff:6e:93:6e:fb:11:f8:82:d1:
f5:bd:5d:4e:36:09:a5:95:61:7b:77:a0:66:d6:c5:73:e9:57:
e5:ff:05:cb:65:5a:f9:e3:4c:8d:56:84:aa:62:38:da:5b:31:
ac:d3:c9:5f:8f:f6:30:50:a9:d1:8c:90:04:d2:1f:7a:13:ea:
09:6b:49:5a:67:b4:a9:2a:05:ad:1a:bb:dd:4c:22:6c:16:9d:
2f:b9:60:ba:4e:f4:95:0b:89:64:1b:18:91:b6:b8:40:8d:76:
4a:42:66:02:cf:72:f4:9e:57:c2:0d:20:b7:78:e8:6d:6a:d6:
87:a5:4d:e3:fc:02:b9:79:3b:5d:2d:1e:76:09:ac:9b:62:77:
1a:c1:c9:4e:60:da:cc:51:b5:d4:e8:ee:8f:74:48:69:94:6c:
4f:64:5d:f8:65:17:a3:5a:95:2a:a9:22:9b:e2:fa:0f:ac:ea:
6c:4f:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:04 2026 by rpki-client