Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: VDRd2Q2ASxXMm3ZULKOFsHAkAKd41wGbOJBGmcK32Xo=
Subject key identifier: FA:61:7C:CE:B0:06:65:13:F5:90:F3:AF:8D:70:A4:2F:45:32:62:5E
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019E1EA2B33A61022B593042E87F8E9B8327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0854
Signing time: Wed 13 May 2026 00:00:39 +0000
Manifest this update: Wed 13 May 2026 00:00:39 +0000
Manifest next update: Thu 14 May 2026 00:00:39 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: QF+36OrSZ2IjJ9XF9mEgv+mkHzM1kAqQtSjrnc51NXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b3:3a:61:02:2b:59:30:42:e8:7f:8e:9b:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: May 13 00:00:39 2026 GMT
Not After : May 14 00:00:39 2026 GMT
Subject: CN=fa617cceb0066513f590f3af8d70a42f4532625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:b1:8e:03:21:53:9f:31:78:4f:99:61:dd:
cc:8e:00:c8:a2:52:4b:cb:de:e9:40:07:ce:27:1b:
93:fa:fe:03:77:e3:55:17:9f:57:02:ca:b4:a4:dd:
36:65:f1:98:1d:2b:7c:c4:de:cd:b0:f2:fb:19:2f:
d8:d0:51:6f:d2:9a:ef:06:9f:66:be:a0:67:e2:30:
00:29:74:d9:06:f9:fc:0e:cc:13:f7:c6:aa:53:61:
63:9b:04:de:d9:15:71:10:4e:3d:b0:61:dd:dc:15:
90:08:a0:af:cd:50:26:fd:81:15:cf:96:6e:70:99:
1c:f2:62:66:45:b3:53:e5:fe:4b:cc:65:e7:22:eb:
16:af:2c:82:ff:8c:ab:84:99:26:2a:3b:7b:bd:36:
25:2d:6f:32:1e:bd:98:7c:40:f6:d9:f9:76:01:f1:
a4:95:d9:0a:c9:ce:b5:de:e0:4f:ad:4d:e8:a5:e8:
f9:13:98:c9:eb:6d:c1:38:48:fc:b2:83:17:4a:dd:
a8:50:3d:98:60:94:fe:89:36:0e:da:9c:38:3f:cb:
17:cf:35:11:8d:a2:43:31:c6:12:f5:31:ce:79:77:
1a:b6:f5:cb:5e:b5:8a:c4:07:48:d5:1d:d2:51:85:
85:62:9c:51:f2:b8:e9:e7:c2:8c:9e:19:bb:87:74:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:7C:CE:B0:06:65:13:F5:90:F3:AF:8D:70:A4:2F:45:32:62:5E
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bd:47:9f:ad:a0:0b:df:fb:9e:ed:29:93:77:84:f6:d9:ca:
1c:e1:a7:05:1b:2f:5f:7d:9b:00:db:b4:bf:80:6d:30:64:85:
5e:2a:93:60:16:36:99:c7:11:b5:d0:c1:cc:16:33:5d:8a:ea:
db:c1:9c:a9:f3:13:5a:93:09:9f:77:84:23:31:9a:9e:6b:f1:
6d:bc:86:0b:21:25:93:23:f8:77:2a:ae:6b:f6:c2:9a:be:87:
58:2e:3a:95:d2:6c:69:e3:13:aa:76:46:b2:97:bf:31:6c:b5:
12:ca:3d:38:f6:f3:0d:d7:75:00:a1:96:40:d2:80:5f:30:f8:
7a:a0:6c:86:fb:86:4c:51:6a:fa:0c:b4:86:3f:70:50:cf:b0:
ee:96:32:3c:30:dd:88:57:a4:cf:c1:7d:ac:48:4e:1a:88:72:
ed:2a:95:02:cc:f8:95:e4:d8:df:75:a7:24:35:e8:1a:11:f5:
ed:79:ee:a0:b9:b5:c6:c0:19:97:4d:8f:92:bf:ba:21:09:cc:
c2:57:81:e9:f5:49:a8:a8:d0:27:6e:19:16:a7:9a:95:4d:1c:
64:4d:b9:95:2b:52:88:41:14:47:61:01:bf:3b:8b:e9:ed:83:
34:f8:ee:e8:14:39:61:e8:4a:ab:1c:6c:3f:91:2a:66:c0:d6:
3c:7d:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:11 2026 by rpki-client