Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
File: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft (raw, json)
Hash identifier: jqSUZ7Nw6tky2cFN8P7/VGyZgXYrCg9YlQjpwefJyt8=
Subject key identifier: FE:56:C6:3A:47:56:71:15:34:4D:7A:DB:90:AF:B8:B0:AF:F4:34:A9
Authority key identifier: FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
Certificate issuer: /CN=fb2445f9eaca2080e657470405090cccec718518
Certificate serial: 01A0F29F18FE9210BBAEC2EFF8207A3C8329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
Manifest number: 0169
Signing time: Wed 30 Sep 2026 14:01:47 +0000
Manifest this update: Wed 30 Sep 2026 14:01:47 +0000
Manifest next update: Thu 01 Oct 2026 14:01:47 +0000
Files and hashes: 1: 1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl (hash: JU3+A55VPHIKiCpzQVf0s/iBKfx9aQY4k+074exigVM=)
2: x97mdtKpGTOO1cukgJmsPeM4jMg.roa (hash: P9iY2nb7fkn1P2NTqzyagvrr9TTLD7Tmn6hSWIxyZHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9f:18:fe:92:10:bb:ae:c2:ef:f8:20:7a:3c:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2445f9eaca2080e657470405090cccec718518
Validity
Not Before: Sep 30 14:01:47 2026 GMT
Not After : Oct 1 14:01:47 2026 GMT
Subject: CN=fe56c63a47567115344d7adb90afb8b0aff434a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:94:3f:9d:ec:b7:4b:c3:e9:44:b2:ce:6e:
d4:9d:23:55:98:27:cd:17:69:c9:a5:90:17:08:75:
4b:a0:7e:1d:3d:2e:c7:a0:a0:4e:2d:25:63:12:32:
60:3c:fc:84:2c:ca:f7:8f:41:5f:3e:9a:82:8e:ff:
cc:e7:07:53:c8:e3:b5:af:13:69:e9:e7:bb:f1:a1:
a8:72:c3:fc:f7:09:b9:87:11:98:b5:f5:56:e1:80:
c7:cc:52:81:a9:e5:86:92:3f:f8:1c:62:32:24:7c:
f8:4f:d4:89:87:d0:41:6a:2b:57:94:2a:35:c1:b2:
fe:82:c7:d9:91:1d:2b:3c:04:ee:a7:2f:bc:56:62:
55:a2:fd:0d:cc:b4:d7:83:ee:f2:6d:71:a5:56:47:
f7:df:37:74:a8:f7:d9:d1:e0:70:b2:8b:ff:9e:89:
23:cc:e8:f6:9a:eb:a8:eb:23:3e:5a:e9:66:c7:2e:
5d:34:6e:6d:14:87:a1:9a:55:03:f8:da:1d:26:7f:
73:b9:4c:51:35:c7:c2:da:c4:4b:e4:ed:89:c8:5d:
d4:8c:41:7e:e9:62:52:27:fe:8d:47:79:d1:32:aa:
fa:e1:f8:20:48:c7:a4:5b:39:1e:cf:3a:66:6e:69:
2a:83:cb:d9:8a:1e:6d:71:1a:5f:88:4a:ff:06:5e:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:C6:3A:47:56:71:15:34:4D:7A:DB:90:AF:B8:B0:AF:F4:34:A9
X509v3 Authority Key Identifier:
keyid:FB:24:45:F9:EA:CA:20:80:E6:57:47:04:05:09:0C:CC:EC:71:85:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yRF-erKIIDmV0cEBQkMzOxxhRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9b46a7-0515-4173-a2c3-aca3c5d09566/1/1-yRF-erKIIDmV0cEBQkMzOxxhRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:97:7e:4c:f9:f7:38:01:ea:55:7a:26:98:07:ae:1e:0b:
eb:85:76:76:63:df:ef:bf:31:44:c6:10:e7:79:bc:70:7a:67:
8d:74:18:08:f2:56:76:41:e3:26:ec:11:4f:4e:60:23:e5:0a:
39:81:39:80:5f:72:c3:a5:57:75:10:39:18:3a:fc:d2:ac:d4:
d5:51:15:3b:c8:43:06:26:04:d6:c5:de:37:97:ff:48:ec:03:
fc:2d:dd:46:c7:3b:c2:0e:06:c4:2c:95:7c:4e:30:91:4a:eb:
e8:f5:9c:8c:3b:a5:d2:83:db:6c:cf:1a:b0:6e:41:94:66:2d:
d7:4d:d2:ea:6f:4e:c5:1a:18:c0:4d:4f:00:1d:a1:e9:da:0a:
47:bf:b9:da:6c:10:e5:33:9a:e4:62:53:e5:d6:aa:2b:4c:47:
fe:e0:2b:70:99:f6:b8:52:a4:4d:5e:75:06:c0:93:10:8d:84:
f4:9e:97:44:8e:92:5f:00:b0:ce:ee:e6:18:aa:84:33:5b:2d:
fa:13:d1:46:95:fa:56:cb:09:1c:90:fb:c2:4a:69:82:52:13:
6f:86:ea:0a:0e:a4:82:44:27:21:8f:08:cc:6e:7c:a8:7e:f4:
91:7a:72:ed:af:0d:ec:9d:84:a7:0d:97:25:ba:83:b3:b4:3e:
f3:f3:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:07:13 2026 by rpki-client