Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File: 20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier: eagZKMGpFqX+K5bVLceI5HJfTC/p9iINtZWr3OFsXsg=
Subject key identifier: 07:85:3F:0A:49:27:8C:1D:68:04:8D:94:A1:0E:8E:DE:24:D4:B6:E2
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer: /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial: 01A0CA7DBDDCFF103AC93BF6D66F058405B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 19:00:33 +0000
Manifest this update: Tue 22 Sep 2026 19:00:33 +0000
Manifest next update: Wed 23 Sep 2026 19:00:33 +0000
Files and hashes: 1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: hqxHT7aFRJ5LF8HOv5g9CnBoCDSCpE3ruQAaplZx0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:bd:dc:ff:10:3a:c9:3b:f6:d6:6f:05:84:05:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Validity
Not Before: Sep 22 19:00:33 2026 GMT
Not After : Sep 23 19:00:33 2026 GMT
Subject: CN=07853f0a49278c1d68048d94a10e8ede24d4b6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:6e:2a:2c:09:22:38:5c:ee:ee:63:d0:a6:
d5:4d:86:a1:7d:d1:f7:8d:75:35:a0:bb:46:f5:26:
1f:03:d1:89:85:1b:3e:f5:8c:e7:f9:07:5a:9c:1c:
69:26:f1:69:a6:99:f8:90:f3:db:51:d1:bb:ef:48:
43:72:8d:00:38:2d:bd:c4:14:4b:c9:58:18:31:e5:
16:62:2d:45:68:81:7f:b7:69:ba:50:11:71:30:71:
30:88:be:46:6e:64:ba:b0:cc:37:57:e6:e8:73:20:
05:84:93:c4:8e:81:fb:ff:50:ff:db:cc:30:27:61:
b2:7c:c7:4d:71:c9:f5:7e:11:24:0f:b9:ef:4a:f3:
76:c9:4f:b6:84:45:62:7f:87:99:d1:8d:85:7a:ef:
a7:67:d9:d7:1c:c5:f8:14:03:45:57:7d:87:cc:32:
66:19:ee:80:f2:ac:a2:94:b5:75:92:e8:61:8a:5e:
a1:6c:e4:83:81:3a:34:62:a3:a7:6c:64:2e:a0:e9:
58:97:34:d9:6d:62:fb:0c:1a:09:20:13:90:51:7d:
20:b0:c0:4b:43:c3:cc:92:b6:44:fd:eb:b4:cf:86:
a0:44:41:07:1a:3b:11:48:7e:c6:b7:6c:0f:7a:0c:
af:fd:79:eb:71:c5:6e:9f:9d:77:5f:5f:1a:04:f9:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:3F:0A:49:27:8C:1D:68:04:8D:94:A1:0E:8E:DE:24:D4:B6:E2
X509v3 Authority Key Identifier:
keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:56:af:c0:05:9f:3f:3e:4d:89:33:a0:48:52:08:e8:d2:
ad:b5:f5:3a:97:11:f1:f8:86:e6:79:c3:9e:0b:6e:93:d4:83:
69:bd:11:42:4c:ad:d8:4b:a0:ba:3b:41:01:94:28:d8:cd:b9:
be:32:4d:9a:fc:bd:eb:7c:e1:82:f6:45:37:ed:e4:e5:4d:60:
38:57:4d:d7:8c:aa:4a:9e:1c:e5:49:b3:f4:d6:ae:a8:b0:f4:
cd:28:11:e4:c6:c2:92:30:3b:b6:26:c8:55:02:37:39:19:17:
bd:f9:b8:87:9d:cd:6c:a7:8e:ae:e0:bb:8f:71:0c:27:06:9f:
4e:25:52:7b:d4:b3:a2:72:fe:5a:d2:77:a9:83:7f:33:7f:18:
85:79:07:2e:f4:3f:54:76:75:2c:dd:aa:e5:9b:db:ec:37:24:
57:42:c0:e0:b1:65:66:b0:16:2b:cc:95:d2:48:e1:22:71:7d:
62:19:5e:cd:3f:d7:46:6c:e6:73:e6:5f:41:b7:f8:c2:e5:4d:
c6:c8:ae:cd:a2:bc:9b:be:27:ad:7e:2e:0a:75:b3:db:61:57:
ff:62:68:87:fa:e3:0f:08:4d:b0:8f:6a:f6:e9:e6:59:39:07:
43:e0:27:83:5d:5a:d8:1d:b5:6b:81:52:89:82:80:24:e3:a1:
d5:df:cb:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfb3c/xA6yTv21m8FhAW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDYwZDIwMTc5NWE2YTk5MmVkNGFjMThiYjdjNTJjMTA4
Yjc4NTIwHhcNMjYwOTIyMTkwMDMzWhcNMjYwOTIzMTkwMDMzWjAzMTEwLwYDVQQD
EygwNzg1M2YwYTQ5Mjc4YzFkNjgwNDhkOTRhMTBlOGVkZTI0ZDRiNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5uKiwJIjhc7u5j0KbVTYahfdH3
jXU1oLtG9SYfA9GJhRs+9Yzn+QdanBxpJvFpppn4kPPbUdG770hDco0AOC29xBRL
yVgYMeUWYi1FaIF/t2m6UBFxMHEwiL5GbmS6sMw3V+bocyAFhJPEjoH7/1D/28ww
J2GyfMdNccn1fhEkD7nvSvN2yU+2hEVif4eZ0Y2Feu+nZ9nXHMX4FANFV32HzDJm
Ge6A8qyilLV1kuhhil6hbOSDgTo0YqOnbGQuoOlYlzTZbWL7DBoJIBOQUX0gsMBL
Q8PMkrZE/eu0z4agREEHGjsRSH7Gt2wPegyv/XnrccVun513X18aBPmp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeFPwpJJ4wdaASNlKEOjt4k1LbiMB8GA1UdIwQY
MBaAFNtGDSAXlaapku1KwYu3xSwQi3hSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2Ut
ZTgyZWQzZDc2YTg3LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjM0NmEtYTg3ZC00OTU3LWE0Y2UtZTgyZWQzZDc2YTg3
LzEvMjBZTklCZVZwcW1TN1VyQmk3ZkZMQkNMZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU9Wr8AF
nz8+TYkzoEhSCOjSrbX1OpcR8fiG5nnDngtuk9SDab0RQkyt2EugujtBAZQo2M25
vjJNmvy963zhgvZFN+3k5U1gOFdN14yqSp4c5Umz9NauqLD0zSgR5MbCkjA7tibI
VQI3ORkXvfm4h53NbKeOruC7j3EMJwafTiVSe9SzonL+WtJ3qYN/M38YhXkHLvQ/
VHZ1LN2q5Zvb7DckV0LA4LFlZrAWK8yV0kjhInF9YhlezT/XRmzmc+ZfQbf4wuVN
xsiuzaK8m74nrX4uCnWz22FX/2Joh/rjDwhNsI9q9unmWTkHQ+Ang11a2B21a4FS
iYKAJOOh1d/LLQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:05:10 2026 by rpki-client