Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: /HlDNNrJyRl66zfKCB+eWJSsY/KybErOw/1yTliQ+/g=
Subject key identifier: F4:2C:05:22:2B:F4:A4:BA:04:1D:D0:D3:1D:13:B3:03:43:57:54:26
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 01A0CE91F7100656BDBDA255B807BF08205F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 1091
Signing time: Wed 23 Sep 2026 14:01:07 +0000
Manifest this update: Wed 23 Sep 2026 14:01:07 +0000
Manifest next update: Thu 24 Sep 2026 14:01:07 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: W0aQMb0GTsdMBUGL33Eq8Yxo87CoSkv8b6S0mfLItEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:f7:10:06:56:bd:bd:a2:55:b8:07:bf:08:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Sep 23 14:01:07 2026 GMT
Not After : Sep 24 14:01:07 2026 GMT
Subject: CN=f42c05222bf4a4ba041dd0d31d13b30343575426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:a1:82:f8:5c:8b:92:8f:09:34:5c:b6:f6:
e2:1d:e6:de:b7:dd:45:d1:44:86:40:51:c7:72:4b:
e2:9c:03:3f:da:39:e9:5c:67:2e:f7:e0:41:26:61:
dd:3d:f1:c3:0a:62:f7:a9:4a:12:7e:79:4d:bf:19:
c1:db:7e:16:b7:6c:6d:72:48:d5:6e:77:ab:24:bd:
8a:1a:3d:db:90:fa:9d:42:5a:1a:c0:ff:d8:b1:6b:
f3:b1:c4:ea:9c:44:27:11:d9:e4:82:9d:77:db:3e:
33:08:9c:b6:f7:95:74:0c:3f:a9:5c:61:0d:1a:9e:
f0:f2:7e:ce:75:9f:f8:3b:d2:68:ab:fb:18:32:fe:
9d:a5:67:10:e0:fa:81:f3:ff:76:73:cc:8b:46:ae:
98:ed:1f:65:d6:7e:66:7e:04:3e:63:23:c3:24:36:
7f:ea:72:2c:bc:59:77:4e:ee:da:71:85:ac:72:75:
2b:a3:16:47:81:48:96:eb:3b:4c:11:55:7f:d0:97:
b4:1c:c6:6b:e8:4f:2a:46:e5:f1:02:36:a9:2c:43:
d0:2b:70:a4:11:ee:be:2f:85:10:80:61:cf:da:d8:
cb:34:94:78:dd:0e:94:87:fa:52:3b:b9:fd:0c:9e:
61:6d:db:5f:de:11:cb:9e:c2:d7:db:47:13:02:8a:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:05:22:2B:F4:A4:BA:04:1D:D0:D3:1D:13:B3:03:43:57:54:26
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:38:fe:32:a8:55:ec:5c:95:f4:aa:8f:a1:47:ba:dd:f2:
6d:2b:42:4b:2f:57:c2:10:74:22:83:9d:e6:1f:56:f7:74:fd:
68:db:4e:d9:7f:7a:fa:19:87:4f:de:4b:16:7a:a5:9e:87:a9:
23:fb:96:d2:23:98:a5:88:83:c1:39:1c:af:d0:8a:e1:44:41:
f8:00:bc:65:6f:19:0d:c3:e9:f8:27:33:80:8c:cf:f4:49:45:
1c:f1:20:51:c6:9e:a3:9a:9b:01:78:90:b7:64:64:a9:a5:c3:
6d:b7:de:7b:11:c8:7b:43:18:3b:c2:9c:e7:4c:6e:cd:8f:80:
4c:cf:33:9a:68:40:57:8a:a4:84:8f:02:4d:87:09:0e:4e:e1:
29:66:67:fe:14:95:d6:c9:4f:35:4c:8a:6a:33:63:87:18:c2:
13:cd:e8:92:83:ab:67:e0:80:9b:88:3d:8d:fe:c6:82:93:b2:
66:f1:85:9b:30:fb:2d:2a:92:11:8a:aa:1b:6c:67:c8:c4:75:
83:cd:68:3f:26:b1:6e:22:4f:2a:a6:c2:0a:e7:5a:d3:67:66:
b3:3f:1c:b6:5b:60:86:13:4b:a7:c7:fa:35:e7:6d:90:d2:31:
72:2d:f6:56:a6:aa:14:0e:cd:ed:0c:3f:de:17:f4:77:06:d0:
66:22:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:32:01 2026 by rpki-client