Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: LMF2Ha3z4vdklfvqqbmE8NQ9ZTLGJWxfIefHzJ6wAhY=
Subject key identifier: B8:80:C2:7E:58:B9:80:F1:48:04:9E:5B:A0:69:39:74:16:16:E0:E5
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 019F905A8EFEB478918D18AC70859E0024DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1457
Signing time: Thu 23 Jul 2026 19:01:21 +0000
Manifest this update: Thu 23 Jul 2026 19:01:21 +0000
Manifest next update: Fri 24 Jul 2026 19:01:21 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: IaXte4tv80pHZxLjFfjImf4I5SQ7ylY4MmEf0T8jLgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8e:fe:b4:78:91:8d:18:ac:70:85:9e:00:24:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jul 23 19:01:21 2026 GMT
Not After : Jul 24 19:01:21 2026 GMT
Subject: CN=b880c27e58b980f148049e5ba06939741616e0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:94:60:f7:28:27:08:cc:06:26:77:f8:fa:
40:2b:3d:a2:61:d4:a7:85:c4:80:7e:ef:ac:6b:b8:
9c:8b:49:ed:bb:8b:b4:dc:72:65:63:e4:9b:69:47:
ec:7d:23:96:36:f3:72:97:81:ea:ff:6c:6b:62:9a:
01:64:44:90:ee:8c:66:e8:e1:15:31:d1:b5:35:3a:
30:ab:20:54:8e:47:47:f0:c9:10:0e:39:e9:cb:db:
d3:bc:05:1d:dc:2d:20:63:fd:c4:56:1f:5d:27:1f:
13:de:f6:61:bc:ae:41:6b:8c:be:c2:0a:f0:4f:9e:
17:ac:03:bf:63:b3:bb:5d:99:10:ef:2d:1b:6d:28:
1a:8d:ac:4a:17:85:52:8f:fc:3e:2c:76:81:8b:69:
08:95:75:94:d3:6d:b2:c6:6f:0a:ff:d6:8a:49:86:
d8:52:61:17:2e:c5:b3:4b:38:15:a1:a4:7f:48:8f:
85:ba:03:52:2e:74:73:1c:51:6f:6f:b9:99:10:de:
c5:94:89:d3:3b:6a:9d:d3:b1:53:06:8d:8c:fb:f3:
63:0e:a0:45:93:07:99:91:a5:19:e2:dd:e6:ed:e5:
2f:62:a8:98:ab:87:1f:9d:f7:04:5b:69:1c:18:d4:
43:94:dc:28:7f:88:c0:7f:b6:b1:9f:94:99:b3:05:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:C2:7E:58:B9:80:F1:48:04:9E:5B:A0:69:39:74:16:16:E0:E5
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:f2:71:0e:42:b7:01:c2:f6:88:2e:28:1e:b1:94:c2:19:
c0:c2:6d:dc:19:97:3f:f1:83:8f:23:53:c8:49:cc:71:6c:23:
1b:5b:f4:51:a6:ff:33:e2:14:f0:64:93:56:69:64:a5:6b:b2:
c8:dd:60:3c:28:4b:f2:10:35:79:51:68:62:b2:d4:3f:79:83:
b4:11:0e:68:d3:41:87:60:95:13:8c:fc:10:40:e6:52:3c:44:
45:15:84:3e:30:5a:2c:d1:ce:fd:27:bf:0c:0a:22:e1:8a:13:
fc:2e:d3:e9:d2:15:c3:08:27:9d:a7:32:4b:a9:12:48:7d:7e:
0e:b2:99:dc:7b:01:54:e6:6f:5a:c7:01:40:8f:63:20:a4:3a:
7d:0d:8b:57:20:2a:96:74:37:76:11:bf:24:89:c3:49:78:bb:
fc:7b:bd:78:93:f8:c5:b5:66:e6:4c:85:8e:97:99:9c:0b:7a:
1a:56:15:83:77:f3:a4:30:23:83:a6:12:de:2c:de:70:35:7f:
ba:5f:8e:ac:71:a8:48:72:6a:fc:e2:a5:8a:a5:e1:bf:35:a3:
95:09:e9:ce:dd:36:a5:57:db:ad:69:43:77:8a:74:7b:12:e2:
28:41:79:88:f8:39:ba:cd:22:1f:b6:95:ca:ae:0d:2c:12:c0:
1f:c0:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:59 2026 by rpki-client