Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: rVPNKAOXFWilacVegxewNwINq08z/02wlRezjLqZoA0=
Subject key identifier: 36:22:3C:F8:21:10:A6:A4:0F:31:E8:C7:FA:1F:AA:99:31:2E:2B:DC
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01A0C28D5D9A12D0E6F5B19205A4B2795E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0BB2
Signing time: Mon 21 Sep 2026 06:00:39 +0000
Manifest this update: Mon 21 Sep 2026 06:00:39 +0000
Manifest next update: Tue 22 Sep 2026 06:00:39 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: 7CTINAVboY/nC7ECFzy35a0pDVaOjxI+hUNy1wAFqvU=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:5d:9a:12:d0:e6:f5:b1:92:05:a4:b2:79:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 21 06:00:39 2026 GMT
Not After : Sep 22 06:00:39 2026 GMT
Subject: CN=36223cf82110a6a40f31e8c7fa1faa99312e2bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:a1:9c:65:30:ae:cc:e0:88:af:8b:e6:36:
a3:c3:17:54:18:e1:39:79:46:cc:ab:57:a8:60:7c:
57:46:71:2a:40:b8:f5:9d:c4:76:60:7e:2e:b9:68:
f5:36:7e:02:89:f0:ed:fd:44:63:b4:08:0d:b0:f3:
68:73:08:12:c6:08:9a:23:29:e2:56:ac:78:92:b5:
aa:ab:1e:7f:e4:33:40:98:28:4b:36:20:5c:09:aa:
9f:cb:66:85:b7:bc:ac:fb:7c:00:d8:a1:c6:5c:a6:
6d:ae:6d:7f:52:a9:da:1d:68:ec:c4:85:65:ad:c1:
de:e8:71:61:62:81:8c:91:09:72:59:91:9e:e9:26:
d3:78:b1:c6:bd:84:71:bc:ac:cd:cb:77:65:b2:06:
80:90:1b:a7:df:bb:3e:4a:c8:0c:d3:37:1a:b0:28:
34:7b:cf:43:fb:80:8f:67:24:1b:36:3e:0b:8e:7e:
ac:44:a0:1f:da:b5:59:19:5e:a8:84:78:89:f1:5c:
3c:95:aa:94:f5:38:6b:09:d4:7c:7d:4d:e6:a2:bd:
17:a9:e4:a0:19:1c:11:91:18:c5:20:b2:3d:8a:1e:
3b:7e:3a:73:01:e8:85:52:9d:3b:dc:06:f6:44:63:
e2:f2:4f:8b:c0:db:f0:d1:6e:31:8d:81:11:47:41:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:3C:F8:21:10:A6:A4:0F:31:E8:C7:FA:1F:AA:99:31:2E:2B:DC
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:10:d2:1a:f2:23:81:f6:af:b2:bc:71:1a:f5:67:31:c0:19:
9b:35:6a:3e:fc:de:cd:48:7d:58:c9:0d:52:90:35:d1:9d:93:
7f:76:ba:27:4d:35:82:98:90:49:80:20:bc:7b:c9:98:da:fb:
a1:9a:1d:d1:ae:d2:d7:bf:2d:7e:a2:c4:4a:c4:d1:3d:a3:a3:
e8:6d:4c:c4:3b:01:16:1b:07:f2:b9:a1:c6:80:3c:d6:d7:2e:
df:1a:e1:44:68:92:b5:dd:ac:39:d1:38:9c:30:69:44:a4:89:
2b:f5:61:e5:35:25:5c:b4:c9:31:c0:6f:f6:f6:de:5b:4c:3c:
59:bf:ad:f3:1d:28:dd:fe:86:bb:a3:cb:ca:bc:c3:4c:f6:00:
5a:95:b7:62:7c:7a:80:f2:05:e7:6d:5e:28:bb:5a:9d:21:93:
24:63:79:da:1e:6e:dc:08:71:ae:d0:19:b3:30:28:6a:75:80:
ce:cd:fd:e0:69:c4:a4:6d:7f:6f:21:0b:cb:32:39:c8:3f:3d:
ea:85:17:09:15:00:cb:77:58:93:61:11:87:3e:b9:4e:17:63:
ca:17:25:c8:70:03:52:ad:17:b2:64:56:ce:35:51:66:c6:1f:
02:82:3b:1b:48:87:08:3c:a9:d2:3a:f9:ee:39:ae:b4:9a:18:
bb:dc:80:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDCjV2aEtDm9bGSBaSyeV4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjYwOTIxMDYwMDM5WhcNMjYwOTIyMDYwMDM5WjAzMTEwLwYDVQQD
EygzNjIyM2NmODIxMTBhNmE0MGYzMWU4YzdmYTFmYWE5OTMxMmUyYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+hnGUwrszgiK+L5jajwxdUGOE5
eUbMq1eoYHxXRnEqQLj1ncR2YH4uuWj1Nn4CifDt/URjtAgNsPNocwgSxgiaIyni
Vqx4krWqqx5/5DNAmChLNiBcCaqfy2aFt7ys+3wA2KHGXKZtrm1/UqnaHWjsxIVl
rcHe6HFhYoGMkQlyWZGe6SbTeLHGvYRxvKzNy3dlsgaAkBun37s+SsgM0zcasCg0
e89D+4CPZyQbNj4Ljn6sRKAf2rVZGV6ohHiJ8Vw8laqU9ThrCdR8fU3mor0XqeSg
GRwRkRjFILI9ih47fjpzAeiFUp073Ab2RGPi8k+LwNvw0W4xjYERR0GfAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDYiPPghEKakDzHox/ofqpkxLivcMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YxL2Q5ZTdlZC0zYzBmLTRhOTItODcxNi1lZTA1N2NmOWMx
NjEvMS8xLXlxbHJQeWJzUDVya1I4ZXl0UHJWTlJjczI4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxDS
GvIjgfavsrxxGvVnMcAZmzVqPvzezUh9WMkNUpA10Z2Tf3a6J001gpiQSYAgvHvJ
mNr7oZod0a7S178tfqLESsTRPaOj6G1MxDsBFhsH8rmhxoA81tcu3xrhRGiStd2s
OdE4nDBpRKSJK/Vh5TUlXLTJMcBv9vbeW0w8Wb+t8x0o3f6Gu6PLyrzDTPYAWpW3
Ynx6gPIF521eKLtanSGTJGN52h5u3AhxrtAZszAoanWAzs394GnEpG1/byELyzI5
yD896oUXCRUAy3dYk2ERhz65ThdjyhclyHADUq0XsmRWzjVRZsYfAoI7G0iHCDyp
0jr57jmutJoYu9yAEA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:04 2026 by rpki-client