Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: Bx43jhm8RhiEtrZG2xHDlbpwnQkcTfL2OCMQLc1Rjm0=
Subject key identifier: 81:92:EA:DF:39:5C:18:34:3A:71:AD:F2:BF:92:65:83:CF:52:C8:58
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019FAA88828DC28CA0490EEE8E3F6C1E71EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0B21
Signing time: Tue 28 Jul 2026 21:01:40 +0000
Manifest this update: Tue 28 Jul 2026 21:01:40 +0000
Manifest next update: Wed 29 Jul 2026 21:01:40 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: z5gSY7iOflFBJhm3d275Hp2DjATT/PWfkHAq7ljXCQs=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:82:8d:c2:8c:a0:49:0e:ee:8e:3f:6c:1e:71:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 28 21:01:40 2026 GMT
Not After : Jul 29 21:01:40 2026 GMT
Subject: CN=8192eadf395c18343a71adf2bf926583cf52c858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:d3:4b:8f:eb:26:37:24:4d:bb:a7:2c:a8:
88:45:25:de:b7:2a:24:a7:55:c5:a8:96:f2:34:5c:
f6:78:d2:03:c5:db:14:8d:68:61:ef:db:09:25:cd:
e3:55:75:8c:b1:fd:93:ff:1f:3e:69:7a:cb:d9:68:
96:7a:1b:ac:39:e2:bd:a1:29:e4:34:e1:13:39:3e:
82:19:61:12:1b:44:b0:5e:6a:e0:1c:32:4a:4b:31:
a3:db:82:11:68:cb:a4:09:03:9e:0e:a5:97:bb:be:
67:d7:57:79:e5:ba:bc:3d:c4:f7:20:6b:e7:7f:43:
85:c6:fe:e3:3a:53:53:18:63:28:d2:b5:b6:45:dd:
82:7b:bf:c7:2a:c0:63:cc:4a:e4:b5:70:a9:02:73:
af:c5:bf:68:7b:01:11:b6:69:6d:81:c5:aa:09:68:
20:80:5d:89:4b:2e:82:92:e8:fb:c2:2f:f6:59:42:
b4:a9:eb:56:4d:da:dd:0f:2b:27:29:cb:bf:76:51:
8b:c9:de:45:24:d3:97:d3:80:8a:de:6a:84:d8:3a:
d3:92:3b:f8:64:b0:52:e0:82:be:c2:a2:04:aa:74:
c2:70:9d:28:36:c7:a1:66:d5:f4:9b:c7:f0:0a:00:
71:9c:0a:d8:47:ef:70:c6:bb:67:fe:e8:ee:2c:1a:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:EA:DF:39:5C:18:34:3A:71:AD:F2:BF:92:65:83:CF:52:C8:58
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:3f:09:af:b4:94:f1:d6:e4:13:86:ba:8c:d1:c2:a7:93:
a9:26:b6:c6:ac:66:65:ab:00:db:7b:fa:cb:78:48:cb:de:7a:
32:98:78:82:73:c6:2d:8a:f0:e4:86:14:22:18:de:43:ec:e0:
f1:f4:43:d1:d2:95:d0:90:25:d2:44:71:e5:cc:44:60:01:88:
10:7c:5a:b1:a7:8e:87:9a:f8:ed:b6:12:d4:c0:fb:fe:32:ae:
0c:01:ae:2a:6d:fa:1e:15:fd:cd:3a:76:6c:28:73:a9:c6:41:
71:2d:b8:4c:63:41:04:87:cc:38:9d:0f:65:c8:88:a3:0a:06:
d3:b2:34:1b:0a:fb:22:a9:c2:33:e0:6e:d7:3e:f5:fa:c0:de:
2f:32:6a:5f:ea:66:1c:b2:94:dd:66:a8:67:f3:44:12:03:71:
b4:16:63:c9:0f:d5:df:c3:30:f7:67:03:2b:16:dc:eb:f9:07:
04:78:23:d9:2f:e9:64:89:4f:30:b5:d9:04:28:6f:73:4d:0c:
ea:e8:be:ba:ec:f0:c4:d7:e0:6f:bc:d3:5c:19:af:e9:99:16:
ad:e0:24:6f:02:13:70:97:df:9c:00:0e:88:ac:7b:bf:37:94:
a4:81:14:3e:95:da:7e:13:dd:9b:57:b7:5a:96:41:67:a1:b0:
28:8b:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:17 2026 by rpki-client