Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: ZCFRszRzLyDr8tt65kepRGCoFOKxGgrDHY5q7ai2/fU=
Subject key identifier: 2E:9E:36:09:6E:38:B0:3D:EB:1D:3D:14:E9:22:A2:42:59:09:17:F0
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019F905A1053130C154A304F62DF037D53C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 19:00:49 +0000
Manifest this update: Thu 23 Jul 2026 19:00:49 +0000
Manifest next update: Fri 24 Jul 2026 19:00:49 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: Sv1RD+wHr5WemB6EWPGDF4/8EN7mqzldx623jVkeLuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:10:53:13:0c:15:4a:30:4f:62:df:03:7d:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Jul 23 19:00:49 2026 GMT
Not After : Jul 24 19:00:49 2026 GMT
Subject: CN=2e9e36096e38b03deb1d3d14e922a242590917f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:de:79:3d:3b:41:a5:d3:dd:14:d4:62:c4:
9c:fc:f2:1d:1f:e4:d7:e3:c6:04:6d:9f:60:9e:0f:
67:ec:35:65:1f:9e:09:d2:fc:05:a4:fd:02:7a:fc:
ba:4c:7c:24:f1:86:5e:a1:29:66:db:f3:56:6b:2b:
a6:8d:87:ec:d6:d2:ec:4d:f4:38:3b:d2:15:8c:80:
64:54:06:0b:37:1e:b5:86:6b:58:dd:4d:27:a3:10:
77:5d:74:72:1d:03:7b:b3:80:3f:2f:d8:f9:66:d4:
f6:f5:a2:0d:57:6c:3d:94:bf:7c:be:18:4a:5a:fc:
22:d2:ff:95:aa:d1:e7:c2:72:2b:89:6c:9a:e1:1f:
20:a4:7e:42:11:a6:72:e5:21:56:71:19:c2:2e:b8:
86:58:54:81:11:a6:29:1d:f2:fd:e6:16:f2:9a:a1:
e3:cf:74:a9:6e:72:97:0e:2b:33:e7:f6:e1:29:32:
fd:da:74:bd:d9:b1:4d:98:64:f3:a3:38:e4:80:c9:
f6:79:90:08:bc:35:44:a9:a3:94:af:39:ca:6f:dd:
6f:38:eb:d8:47:86:87:b2:e2:4f:75:58:6b:21:e1:
0a:dd:6a:bd:39:46:9a:76:70:88:c7:f5:f3:c3:74:
37:f0:e0:2b:89:41:c7:25:a8:58:78:fc:bd:9d:17:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:36:09:6E:38:B0:3D:EB:1D:3D:14:E9:22:A2:42:59:09:17:F0
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:2d:d4:04:4a:51:39:f2:7b:13:26:c5:09:90:d2:90:50:
58:15:3f:dc:99:c0:ed:a5:e0:ea:20:9d:c2:9c:c8:8f:a9:f5:
de:6a:7c:16:14:56:11:1a:cf:20:8c:c0:77:a1:34:25:e6:46:
6e:f8:32:a9:5c:5a:97:21:1a:5f:c1:d1:cc:f9:f5:f7:7d:64:
e2:e3:d7:2c:f3:2c:52:45:b8:ef:47:21:23:ba:19:ab:56:eb:
dd:44:dc:4e:6b:e2:c4:cb:ba:26:86:ea:9e:56:02:7a:63:33:
83:f8:f1:b5:5d:a9:d0:7a:c3:d8:fb:73:3e:f2:a4:41:c4:e2:
c9:a8:64:16:69:ab:0a:b5:39:c2:7f:19:58:7c:9d:94:80:fe:
1c:cf:83:d6:da:1b:e2:97:b2:05:11:ac:ce:c0:96:a9:91:56:
98:82:a9:3d:f6:eb:df:c1:d2:f0:62:3b:77:a3:c4:79:95:77:
e9:6b:8b:4f:10:4f:31:23:d5:6b:35:8f:79:e6:fc:dd:bb:c7:
ce:b8:bd:02:87:fd:5f:4c:56:a5:95:c2:7d:b2:40:37:42:76:
6c:d9:53:f1:ac:40:77:5b:7c:e8:04:8a:80:44:c7:0d:2a:7a:
bb:c6:85:86:30:56:7c:f7:63:ef:03:5b:78:08:26:a0:e7:0e:
16:76:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:45 2026 by rpki-client