Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json)
Hash identifier: 8NnUOToDgt98pVvcYmqF8uUMY3Uq0GWGm5qD9nAHVw0=
Subject key identifier: D4:58:A5:D8:98:A9:42:41:58:53:44:62:BC:D6:0E:D7:A2:39:9F:74
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 01A0C74671D7AE668C2060EA55A06E65BA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
Manifest number: 15EC
Signing time: Tue 22 Sep 2026 04:01:17 +0000
Manifest this update: Tue 22 Sep 2026 04:01:17 +0000
Manifest next update: Wed 23 Sep 2026 04:01:17 +0000
Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: h9QmyGLQXkdJp8HPCDxd2abFzaXzfRJRdvyGha5QB3Y=)
2: oIFDamMFsaAUv3_QXk-wIETOecI.roa (hash: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:71:d7:ae:66:8c:20:60:ea:55:a0:6e:65:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Sep 22 04:01:17 2026 GMT
Not After : Sep 23 04:01:17 2026 GMT
Subject: CN=d458a5d898a9424158534462bcd60ed7a2399f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:73:b3:ba:88:66:25:c3:1c:27:06:07:73:65:
7a:c5:36:c0:e0:c1:85:18:a7:06:89:07:a4:6d:b4:
48:db:83:b1:0d:88:de:83:e3:7a:d1:aa:ff:5c:ac:
9b:c9:15:3b:c8:a3:b8:ea:55:98:92:54:d0:33:eb:
43:26:61:02:df:19:1d:9e:43:a4:9e:12:bd:23:36:
df:3c:5e:f5:bc:3a:10:7a:20:8e:5b:32:bd:f9:44:
7d:66:60:1d:9b:13:60:d3:dc:58:39:26:71:14:bc:
c5:d8:c3:d2:0c:ab:da:5d:d5:be:7b:44:c5:c3:d3:
50:a4:d1:fd:3b:ae:27:c9:1a:0d:cb:de:f8:69:2a:
72:01:da:ad:88:47:67:7e:f7:64:02:f8:9f:20:24:
3c:6c:30:05:4b:81:f4:52:9d:c1:dc:1e:d7:b5:d2:
21:ad:e0:95:a4:e5:b4:a3:5c:c2:07:cc:64:99:0e:
76:08:48:e3:a0:63:d9:57:09:53:e0:48:d2:cf:53:
b9:c2:a5:d7:a6:b2:06:13:45:e0:35:ac:42:2e:01:
a5:6b:97:9d:11:67:20:a3:58:ae:f0:25:13:48:de:
b2:f0:d8:4d:2d:b1:3d:f6:e5:41:3f:b0:6f:ec:cb:
8e:34:cb:37:b8:4e:3a:bb:25:50:27:36:f7:98:89:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:A5:D8:98:A9:42:41:58:53:44:62:BC:D6:0E:D7:A2:39:9F:74
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:31:59:2f:cd:da:04:5a:6d:ed:30:e4:75:62:69:02:84:43:
06:93:69:90:44:b9:0a:11:ec:39:7c:15:e5:21:34:9e:00:6e:
16:f2:3c:ff:40:ca:4c:ba:b2:2c:7b:e9:3b:0e:c4:04:9b:70:
c1:09:1c:02:c9:17:ce:8b:89:6f:65:16:96:3c:d3:11:66:cf:
74:93:f5:e0:36:93:4b:7f:7b:b6:d4:3b:c0:3e:a0:f0:ee:ce:
a3:22:b4:ea:65:1e:e7:f8:45:cc:5e:e2:0f:c0:38:2d:5d:e6:
a2:c9:34:53:fe:c4:56:04:d5:69:48:16:b7:8c:04:08:d0:2e:
09:29:9b:f1:51:10:b9:e1:40:c7:49:10:29:16:97:5a:f8:70:
de:7b:c0:36:a5:1e:66:b2:1f:89:fa:ee:a9:52:bb:17:5a:1f:
c4:f9:e6:30:58:be:a9:83:1d:5a:c4:1d:72:fa:4f:f1:28:ba:
ea:e3:6d:5c:59:36:04:b8:7d:5a:e4:f6:9d:20:e8:60:79:76:
3a:4e:b5:2a:ba:41:a7:bd:c8:ef:09:3d:71:84:46:35:d1:00:
7e:b3:4a:60:5b:ee:a6:40:c4:af:0f:06:68:4c:29:39:23:3a:
67:e2:71:2d:94:f0:a0:66:fe:3c:d1:b3:73:54:b6:df:77:c4:
2f:10:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:54 2026 by rpki-client