Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
File: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft (raw, json)
Hash identifier: PelYz1Woex8JaErZrHK2sAzokXZ83cc38RqZCkscDnI=
Subject key identifier: 8C:4E:36:2E:5C:8D:7C:4E:2B:5C:5C:EB:D7:5B:2C:45:80:65:A5:AC
Authority key identifier: F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
Certificate issuer: /CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Certificate serial: 01A0D0126D36196FB0D0103419CD6568FFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
Manifest number: 08ED
Signing time: Wed 23 Sep 2026 21:01:03 +0000
Manifest this update: Wed 23 Sep 2026 21:01:03 +0000
Manifest next update: Thu 24 Sep 2026 21:01:03 +0000
Files and hashes: 1: 1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl (hash: u5E0UsqY8HlaW1V7xLy1E2kE0lhoYd6G6yMYX2BGg/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:6d:36:19:6f:b0:d0:10:34:19:cd:65:68:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f980bc0b4e28091cf9fb28a28f5afa5a9a7d4403
Validity
Not Before: Sep 23 21:01:03 2026 GMT
Not After : Sep 24 21:01:03 2026 GMT
Subject: CN=8c4e362e5c8d7c4e2b5c5cebd75b2c458065a5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:df:61:eb:b5:3e:82:5a:1e:86:e8:f7:4b:
de:37:c8:a0:53:83:19:e2:57:91:35:ad:b7:78:e0:
cb:95:08:95:30:59:0f:64:63:6f:97:60:5f:87:cb:
ff:1f:b4:a4:77:16:63:09:02:1e:df:5e:af:10:dc:
a7:3f:84:bf:b3:d3:c3:78:3e:8d:57:ed:fa:36:99:
89:ca:2f:9e:ae:5e:10:de:87:93:10:c5:12:93:f2:
84:fa:78:23:11:67:21:d5:b2:f0:3f:e4:28:61:87:
90:52:03:7f:1d:55:60:46:0c:eb:0b:03:6b:8b:c4:
61:5c:79:14:4a:05:4b:8c:c8:8f:f2:5b:b6:a9:2f:
fc:c5:d7:8b:fd:ea:d4:19:dd:4b:bd:7d:1e:91:28:
0a:c9:44:d4:45:77:1a:43:6a:b0:f8:39:d4:26:eb:
d0:f9:0c:98:ee:86:3c:01:24:06:de:98:4b:95:cc:
19:f2:7a:c0:74:91:d8:5c:e5:ac:d9:6a:db:a7:03:
b5:b8:bc:59:70:fb:ac:cd:25:40:6e:34:8b:e0:3b:
03:a6:b4:27:d4:35:ee:f4:b0:48:47:50:22:b0:ac:
98:cc:eb:d1:99:cb:47:50:38:aa:4b:d1:3d:3b:3a:
dc:b7:1f:1a:97:f5:26:7f:41:b7:5b:93:46:25:95:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:36:2E:5C:8D:7C:4E:2B:5C:5C:EB:D7:5B:2C:45:80:65:A5:AC
X509v3 Authority Key Identifier:
keyid:F9:80:BC:0B:4E:28:09:1C:F9:FB:28:A2:8F:5A:FA:5A:9A:7D:44:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YC8C04oCRz5-yiij1r6Wpp9RAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d72c6e-99e9-4794-a609-b733c6ca338d/1/1-YC8C04oCRz5-yiij1r6Wpp9RAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7b:28:7d:9f:d2:6e:e3:de:0a:28:f7:19:d3:0b:b5:c5:0b:
60:ff:4c:cc:07:8c:66:a7:5e:41:cf:43:54:e6:c3:cc:80:74:
31:b7:44:fd:33:3a:72:51:93:73:b6:8e:42:cf:c0:1a:a4:2b:
84:ee:4e:ff:57:0b:03:75:e1:67:9e:13:85:ab:1d:16:e2:72:
eb:b2:cd:50:d8:d7:c8:67:66:b6:90:25:37:d3:7f:63:a0:4c:
ab:ab:69:73:c6:ef:66:22:51:1a:a5:9a:c4:29:7d:e3:9c:57:
b7:b1:7f:ec:b6:6a:47:6b:44:79:88:18:2c:de:d0:56:b6:9e:
b9:87:5f:22:89:cb:f1:11:78:5c:83:d8:fe:1d:70:b6:d0:27:
de:1c:9a:87:b7:72:1b:f5:ed:5e:cd:6c:3c:4f:77:02:8e:b8:
e1:e2:c2:02:4c:70:5d:f6:02:4b:0b:ca:37:5a:ca:0a:24:41:
70:46:17:07:31:e7:e1:3a:a3:58:a4:ea:76:4d:02:5a:1c:23:
26:02:b9:f7:02:a5:52:6c:6e:a6:24:f6:4b:59:88:66:1d:f9:
e3:48:f4:8e:ec:4c:40:32:5e:5f:a1:33:28:91:38:8e:84:aa:
9e:ef:9a:90:b4:f1:f1:07:41:51:f2:4e:7d:4b:5d:2d:e1:52:
04:f0:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:55 2026 by rpki-client