Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: 9n03jZefrR6InacuviAh4D2fWm5vWz2TWgYj9lqvq8g=
Subject key identifier: 9D:6F:4B:A9:85:F0:6B:16:3F:0F:D8:02:75:D0:22:04:20:53:AA:82
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01A0DA9678F4069DFE8521C3FD738B54E926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1502
Signing time: Fri 25 Sep 2026 22:01:29 +0000
Manifest this update: Fri 25 Sep 2026 22:01:29 +0000
Manifest next update: Sat 26 Sep 2026 22:01:29 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: IZUOFe4hyXCEi2mz1MHTmV6lw07nMB5g8/68PYRnlSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:78:f4:06:9d:fe:85:21:c3:fd:73:8b:54:e9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Sep 25 22:01:29 2026 GMT
Not After : Sep 26 22:01:29 2026 GMT
Subject: CN=9d6f4ba985f06b163f0fd80275d022042053aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:f3:e7:0a:bb:60:24:f9:29:e5:11:d7:ee:
71:36:98:58:17:34:26:ac:2c:4b:01:72:9e:68:e9:
ec:43:1f:50:30:b0:68:a7:a5:5c:f0:40:0c:2b:dd:
d7:6e:8a:d0:3e:3b:0d:a7:e1:17:5a:7c:ff:d7:e0:
b4:4c:3a:bb:b3:1e:57:6b:bc:76:f3:a3:d5:69:15:
83:85:06:09:cf:ac:0c:9a:7c:6f:df:7c:b9:00:bd:
fb:fa:69:9a:e4:1b:c0:b0:27:da:20:13:14:93:0f:
a8:fe:8f:3a:ed:e7:91:f5:95:40:1d:37:c5:61:01:
04:0c:58:22:91:40:55:a3:fd:ec:3e:15:85:25:e5:
b9:ef:76:08:2b:bd:36:20:0d:9b:8b:9c:dd:85:c2:
20:c1:35:27:43:c5:6f:a4:e0:1f:36:2b:31:e2:32:
d0:dc:77:87:01:20:c4:6c:c9:0b:0b:4f:e3:9a:82:
4f:54:0e:74:01:4d:fa:a1:cd:e3:8b:4d:70:36:4c:
b3:c0:a3:c6:b4:30:39:03:1f:3f:71:dc:e3:d9:45:
ed:a0:8c:ac:71:cf:f3:45:22:c9:c7:72:7e:1f:3e:
45:df:74:7e:37:a4:5b:05:eb:1a:bb:7f:5a:42:92:
9f:6d:9d:47:91:3a:01:84:c1:b6:a5:22:12:06:0e:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:4B:A9:85:F0:6B:16:3F:0F:D8:02:75:D0:22:04:20:53:AA:82
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:9e:bf:00:b1:8e:9a:a9:11:e1:e1:1c:2d:b7:00:f0:f9:
6c:e2:58:cf:19:14:99:f1:6a:ab:f5:cb:8e:d0:2b:bf:22:dd:
99:5c:2e:19:17:38:64:d0:28:eb:d8:d0:6f:ab:4a:3b:32:d9:
9d:7e:8d:25:26:3c:f6:2c:29:c3:35:4a:8c:44:f5:cb:6c:38:
1b:91:c3:55:9e:b8:e9:9e:f4:65:11:31:72:a5:1c:87:b9:b3:
0a:8f:7c:c4:b4:00:70:92:be:8b:71:8b:8b:9a:bb:6d:2a:ac:
06:b8:c1:bf:b0:6d:f3:75:fe:c8:a5:43:88:2a:b8:53:6c:b4:
50:d3:25:25:71:7a:a6:51:24:45:ff:80:17:50:64:e2:f9:c8:
23:65:63:52:c3:eb:45:33:30:c7:ff:68:21:dd:ab:28:f8:2d:
fc:ba:ae:b8:ee:d5:0f:06:2e:1a:82:95:b4:5c:9e:74:88:ac:
5c:56:f5:62:0e:c7:c0:f7:dc:1a:69:6b:06:79:1f:b4:15:6e:
93:e8:5e:40:4e:df:de:17:51:fc:b4:8a:86:cc:f8:33:af:4e:
eb:02:d1:8d:79:a6:70:7c:e0:07:77:e1:70:eb:34:8d:c2:27:
a0:72:59:62:0a:bc:01:a4:15:c6:80:87:8e:cd:a5:f6:8c:d0:
19:0e:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:34 2026 by rpki-client