Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: s5xSj145KG0F5pH63IZm1JF8MDGNNu8oHHtoxC5sY9k=
Subject key identifier: 76:7F:9E:BC:35:F0:BD:44:5A:D5:1E:DA:5F:2D:0A:21:58:06:BE:34
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 019E1D90A1D1A8CD2941AF8CE53EE2FD2F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1397
Signing time: Tue 12 May 2026 19:01:18 +0000
Manifest this update: Tue 12 May 2026 19:01:18 +0000
Manifest next update: Wed 13 May 2026 19:01:18 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: jeKuLqFJpAAOFu0GHx2rEAlST2IdfR5I8VzFd2MEw3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a1:d1:a8:cd:29:41:af:8c:e5:3e:e2:fd:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: May 12 19:01:18 2026 GMT
Not After : May 13 19:01:18 2026 GMT
Subject: CN=767f9ebc35f0bd445ad51eda5f2d0a215806be34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:1d:d4:a9:28:ec:7b:28:92:10:e1:98:8f:
7e:a1:05:8c:2f:6a:61:ef:2e:26:ce:1a:96:82:2c:
75:0f:53:53:0e:93:3e:dd:89:b0:64:e5:57:8f:9a:
4a:be:a7:de:d6:f3:5d:1e:f2:4f:1b:b6:36:c8:85:
88:08:f5:10:82:14:0e:a5:49:8f:1e:11:12:19:4c:
8e:eb:65:33:aa:51:8f:20:8a:86:09:39:76:b1:91:
33:36:15:16:23:dd:7f:05:3b:8d:c4:35:32:14:2c:
89:ac:d0:60:0c:24:54:01:e8:2c:59:47:e1:76:9f:
df:95:3d:0a:c5:a2:7a:33:f7:d9:17:a3:a2:c8:09:
ea:ac:70:53:a5:d2:10:4a:23:b5:b0:70:fe:1d:53:
46:4d:7f:e8:c1:01:01:97:bc:5b:ad:3c:8b:9b:80:
d4:14:ca:6e:31:95:07:a9:27:0f:d9:9f:94:70:c2:
ca:2d:9f:7c:1b:17:ad:90:42:08:5c:88:23:8a:3b:
fe:e0:d5:f2:24:c4:43:c9:b1:85:53:16:81:1c:ff:
6e:2f:0e:47:bf:06:b6:ba:da:60:2c:d0:26:7e:f1:
d3:04:c8:1a:cb:2b:01:b0:2d:38:cf:35:22:1e:fb:
8f:2a:b3:c5:7a:9f:52:27:41:cd:75:31:90:99:1c:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:9E:BC:35:F0:BD:44:5A:D5:1E:DA:5F:2D:0A:21:58:06:BE:34
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:01:0b:a2:73:82:cc:e9:a6:33:89:63:0c:45:ce:f1:ab:
e9:32:c4:5e:f3:cd:75:06:f6:d7:79:1e:c9:ea:a2:88:62:25:
97:f4:6c:b9:e9:0b:db:88:7c:9d:25:b6:a4:92:42:64:40:7a:
05:c1:9b:82:83:16:6b:40:84:a5:dc:26:d2:85:48:a5:fc:91:
5b:41:a3:d0:cf:59:7b:70:8a:95:d0:27:da:c0:92:88:09:a9:
d9:89:31:ff:91:38:fa:7e:12:c4:da:96:78:1a:4d:4b:6f:8f:
45:d2:72:f0:96:2b:2e:ae:7e:4e:4f:f5:0d:65:a1:da:ed:5c:
25:3e:46:f7:83:5e:a3:a7:05:98:12:dd:b2:38:45:2a:e5:eb:
7e:09:e9:49:fa:b4:0c:c4:71:27:69:a3:93:f8:2a:f5:73:47:
f4:6f:e1:5b:3d:71:ca:b6:79:9b:ed:cb:2c:dc:13:b6:32:7d:
00:27:99:3a:a7:95:32:03:a3:38:bd:20:d7:48:64:4b:df:f5:
9c:70:36:65:5e:e0:40:fd:53:46:bf:17:bd:1e:94:ca:88:63:
63:a5:05:42:38:07:82:a1:ab:b9:88:72:92:3d:b0:bb:93:0b:
a9:de:2a:7d:35:5d:23:db:c9:b8:85:d4:52:2e:83:4d:23:3c:
08:2b:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:46 2026 by rpki-client