Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: nQh/UjEihzJyhu3akuaIUPo0hLx1ws7tOANFEvMFPh4=
Subject key identifier: 4E:DB:22:93:C0:95:F1:16:11:59:1E:7A:7F:FE:6D:FF:2C:81:5A:08
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01A0CB2250E046A54CA305E3ABB91928ECB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 22:00:18 +0000
Manifest this update: Tue 22 Sep 2026 22:00:18 +0000
Manifest next update: Wed 23 Sep 2026 22:00:18 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: oOxA8yiZh7Gj4QCYcPN4w1ODmlTs29WjZHwmNL6t+AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:50:e0:46:a5:4c:a3:05:e3:ab:b9:19:28:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Sep 22 22:00:18 2026 GMT
Not After : Sep 23 22:00:18 2026 GMT
Subject: CN=4edb2293c095f11611591e7a7ffe6dff2c815a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:38:df:30:f7:d2:05:89:64:0e:d3:ea:85:
c7:ad:7e:2a:12:78:90:bf:7c:ef:f3:da:a7:0b:99:
46:59:43:79:7f:29:06:f7:1c:e4:00:ca:dc:f4:48:
53:a2:9d:bd:df:aa:65:43:d5:a4:83:e0:5e:07:55:
fc:18:1e:27:5a:ed:38:7b:19:80:44:c5:2c:28:97:
9f:22:f5:55:9c:c2:5d:d6:a1:93:7f:d5:38:41:0a:
d6:9a:95:4a:5e:50:eb:5a:e2:e0:88:e8:09:25:0e:
d5:e5:7d:99:53:a1:4b:07:ea:03:8b:77:ed:b1:72:
71:41:53:2e:bc:85:83:87:09:59:f1:99:e0:42:4d:
83:a5:e1:b0:ae:16:d4:13:35:25:f3:ab:d5:54:9f:
23:69:f0:4c:48:b7:58:28:03:73:9e:95:65:01:5f:
77:4e:a8:b2:54:40:43:35:43:db:08:fd:2a:e4:56:
eb:48:53:8e:88:00:f7:83:8b:5e:02:22:89:9f:67:
d5:4f:fd:e8:43:ac:91:ab:67:02:cf:06:54:c4:4c:
55:3d:20:44:11:ca:a5:dd:08:1a:fc:45:6c:95:4d:
ec:a6:09:d4:60:92:f0:8a:b0:34:b0:c4:27:c4:09:
b7:32:92:e7:6b:c8:85:50:ac:2e:33:1f:77:c1:48:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:22:93:C0:95:F1:16:11:59:1E:7A:7F:FE:6D:FF:2C:81:5A:08
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:3f:e1:90:42:b2:55:4a:69:ab:fd:76:fd:57:8a:c7:4d:
ff:71:09:3c:01:02:ac:cc:b9:40:25:c0:66:7c:38:3d:e5:46:
94:4b:f7:96:6c:30:66:a8:82:75:44:23:d9:45:7d:6e:0f:6e:
84:76:33:c7:4a:43:f7:35:fd:64:4a:10:62:09:b9:38:03:cb:
bb:9c:75:fc:a8:9f:53:55:d5:81:1b:3a:c1:a3:3b:50:53:46:
90:0f:56:33:6a:24:0f:44:1c:1c:53:db:9b:6e:9a:29:32:2c:
b9:c6:a4:12:74:60:60:97:c9:f5:f4:31:d8:0e:63:e2:29:70:
e4:82:0b:66:68:4b:c6:43:f6:91:5d:3e:31:46:83:87:79:01:
af:9a:77:57:4c:89:18:c8:13:56:0b:70:c6:7a:f8:38:30:67:
e9:a2:f3:35:30:1a:99:ac:e9:6f:ef:42:43:5a:f6:e3:f6:94:
f3:a3:45:4f:68:4c:dc:5b:15:83:9d:5c:c1:f3:4e:4e:24:d5:
9d:93:d8:d9:f3:31:7e:6f:23:47:67:8e:ee:db:c3:cc:29:6b:
df:46:30:43:30:2d:49:f9:f4:43:dd:ad:e6:43:3a:27:94:95:
7f:53:f5:c9:94:00:c0:fd:05:a2:75:21:71:07:d5:97:9d:3c:
0b:2b:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:16 2026 by rpki-client