Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: ozQEwgyM/NxwlJSOlnVWcfMM3mbJMtWVzevJpvihdwA=
Subject key identifier: A8:FB:FD:7B:F8:C7:70:56:EB:45:53:80:68:FA:9B:86:7F:9C:B9:4B
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019E1EA35B43C02E42CE3600CA0586DE3229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 09D8
Signing time: Wed 13 May 2026 00:01:22 +0000
Manifest this update: Wed 13 May 2026 00:01:22 +0000
Manifest next update: Thu 14 May 2026 00:01:22 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: 6zs2LKXyekG/WXwMc1XOd8dl1fEBt51GIxNWjkicvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5b:43:c0:2e:42:ce:36:00:ca:05:86:de:32:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: May 13 00:01:22 2026 GMT
Not After : May 14 00:01:22 2026 GMT
Subject: CN=a8fbfd7bf8c77056eb45538068fa9b867f9cb94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:1d:34:79:1a:17:87:9b:54:ca:fc:07:0d:
5a:2a:64:6c:59:2e:e2:22:8f:2c:ba:0a:29:15:ff:
37:a8:d9:e4:e4:fc:44:ca:fa:93:02:47:9a:cc:e2:
55:52:98:f4:d1:f1:70:85:5d:27:d8:e9:45:ff:82:
6e:3f:9f:94:6c:cb:bc:82:25:48:b9:a1:92:8b:c9:
84:c8:63:c1:f7:a1:37:c2:e2:a2:59:10:06:23:72:
a0:41:be:d7:fd:f2:2c:53:b3:26:c0:bf:de:96:f7:
3a:9f:78:24:99:57:ef:3b:d2:38:91:60:23:73:68:
51:56:58:f4:cb:dd:de:b0:0c:69:d3:c0:5d:e6:28:
0e:9c:b5:dd:df:1d:77:17:a9:d6:d3:d3:ad:c4:d9:
69:bc:ef:91:53:ee:08:65:99:ef:2b:f4:20:77:52:
d2:de:92:90:25:a3:d9:f5:18:6f:8e:d8:c6:91:f1:
1b:26:2b:a5:d7:82:b3:a6:9e:fa:17:95:39:02:33:
b2:e4:8d:9b:64:69:ba:95:a4:99:0a:e2:7a:4e:4f:
58:46:ff:20:30:2f:69:ab:a5:df:aa:f4:74:b1:a1:
ef:cf:60:f1:7a:fa:90:9f:17:de:91:80:d1:df:c2:
24:33:96:07:d2:56:ce:03:93:74:78:2c:c3:f3:c3:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:FD:7B:F8:C7:70:56:EB:45:53:80:68:FA:9B:86:7F:9C:B9:4B
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:48:62:9a:b5:88:11:c6:6a:23:79:1c:89:e4:9c:2e:f9:69:
f9:d2:b4:d1:44:13:64:92:e2:75:a8:8e:d7:9b:af:20:88:5d:
19:3c:51:6e:5f:e0:9c:7f:b6:f0:42:95:83:84:56:02:7f:5e:
c1:21:ec:49:f6:17:14:09:7e:39:67:36:cd:a6:1f:f0:ee:e7:
a8:dd:b6:d2:a6:36:4f:7d:8a:7e:11:66:94:0f:da:9c:36:cb:
2d:91:37:f0:b3:78:c5:4f:07:84:d6:1b:b2:88:86:e2:e1:51:
89:e3:77:13:8f:32:db:c1:cb:3f:fe:a1:95:14:fd:39:39:06:
16:32:6d:d3:31:3d:29:be:74:92:dc:5d:f3:e5:72:c6:70:6f:
52:e0:36:ed:85:6f:42:26:00:b6:20:96:1f:b6:55:4d:66:e6:
90:43:ec:19:6c:d3:d4:24:2d:28:6e:61:64:e8:6c:7a:cd:c5:
c0:95:43:25:9b:34:22:8a:d6:1b:3d:e2:93:bb:a3:3e:49:4b:
54:67:42:d9:e0:18:78:4d:fe:70:4f:59:b9:3d:a5:99:1a:26:
d6:c6:12:d3:99:d2:e7:11:a6:9d:bd:55:1b:79:36:c4:02:e4:
24:47:14:ee:55:5d:c8:1e:72:fb:0b:d4:2e:ee:36:02:67:0d:
03:e5:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:27 2026 by rpki-client