Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: BQDSeP3XCzkzylBYf4IXix1tY0tcyBOq0xCrHWJuIRw=
Subject key identifier: D3:B7:03:73:C8:1E:E5:BF:34:5B:33:3B:D2:35:45:42:0C:D7:F2:43
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01A1D98154271A67BBC4987D7A4FE44AC711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1AF2
Signing time: Sat 14 Nov 2026 10:01:33 +0000
Manifest this update: Sat 14 Nov 2026 10:01:33 +0000
Manifest next update: Sun 15 Nov 2026 10:01:33 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: S6tk+Gz3WVsjx6fCxyvZUaaoa0OgIs5oCgpenashyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:81:54:27:1a:67:bb:c4:98:7d:7a:4f:e4:4a:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Nov 14 10:01:33 2026 GMT
Not After : Nov 15 10:01:33 2026 GMT
Subject: CN=d3b70373c81ee5bf345b333bd23545420cd7f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:74:d4:19:50:e0:b0:83:05:9c:96:69:0e:
bc:74:45:e6:11:a4:d8:5a:d7:77:28:8f:eb:ab:58:
db:17:1d:1a:55:09:ac:a3:57:43:32:f6:f3:c9:7e:
fe:d2:47:49:ca:05:71:be:51:f0:be:cd:9f:e3:5d:
01:57:f9:dc:61:57:cd:c9:7a:c2:40:56:df:a1:80:
bd:f5:c4:6e:3b:1d:59:f7:b8:83:c1:b2:43:7c:79:
d8:5e:6d:1f:91:17:c5:dc:3c:a5:2f:19:b8:b5:a4:
b5:b6:1a:c5:71:3d:a3:cd:c4:e2:b8:5e:20:01:ab:
c1:40:72:76:c2:dc:16:91:29:28:47:76:0d:4b:8a:
bd:c4:57:05:42:ba:e8:98:3b:07:ba:19:c8:d6:06:
cc:3b:0e:61:49:d2:c5:74:f1:c0:bf:b8:3c:88:d0:
8e:40:29:02:58:ee:5a:c7:96:12:09:fb:f5:65:1c:
4e:3a:68:a2:bd:0f:63:a7:f2:98:11:fc:9f:ec:ef:
0c:43:74:1b:6b:fd:48:0b:77:85:bd:30:da:ba:a0:
94:55:4e:28:fd:e6:60:6b:ad:a5:af:b3:89:cf:41:
16:25:a4:27:64:50:4e:cb:63:0f:fd:15:81:26:88:
86:6a:76:6c:bf:18:38:d6:ac:ff:5f:a7:8e:c8:66:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:03:73:C8:1E:E5:BF:34:5B:33:3B:D2:35:45:42:0C:D7:F2:43
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:e4:3b:b4:51:83:86:09:75:18:4b:c3:77:0e:ae:3b:80:
f1:e0:5c:52:25:51:c2:a8:b4:94:37:57:d4:74:b8:b4:c1:8c:
e9:d6:47:d6:bd:08:fd:e6:a9:cc:33:5e:0a:ad:bd:2c:07:45:
8f:35:d2:ae:45:45:7e:78:76:16:dd:25:75:f5:36:77:9e:1f:
2d:f2:28:fa:82:6e:59:01:9f:10:95:a6:7b:11:b9:bf:1e:b2:
77:f7:57:32:64:df:8a:f8:2c:5f:d7:c6:ed:9c:11:c7:89:55:
c6:7d:54:79:b6:e5:16:7b:a7:d4:5b:40:70:a3:a2:0f:7b:ec:
72:47:fa:6f:d0:bc:6c:c3:40:ab:04:0e:d7:d5:94:4b:9a:e7:
72:68:79:28:a3:2b:f0:d7:67:f9:50:a2:e5:f8:c0:7b:85:62:
a5:fb:08:2a:8a:83:8e:52:e1:a2:43:d5:18:f4:5f:71:a1:8e:
09:0a:37:46:74:b2:0a:f3:3a:8b:a5:93:f5:2d:c7:14:a4:34:
e2:fa:09:5e:03:f3:2f:a3:c1:47:ea:97:c8:12:70:ec:c4:f0:
3f:1a:c1:5f:73:cf:23:63:31:1e:ea:08:35:bc:5c:dd:be:a2:
e1:80:20:73:4b:b8:38:06:52:10:f6:d8:71:0a:ee:c8:a3:46:
b2:c0:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:12 2026 by rpki-client