Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: WETVMVihQWDj9XC13xewlledbVl7tjHV1uUY4X+oOHg=
Subject key identifier: BA:CB:0E:D6:43:CF:ED:AA:9A:DB:0E:AA:90:1E:F2:EC:53:ED:36:07
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01A0CFA3FB1BB0BBBDFBEEF1EB29E5AB8ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 19:00:25 +0000
Manifest this update: Wed 23 Sep 2026 19:00:25 +0000
Manifest next update: Thu 24 Sep 2026 19:00:25 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: p8egxjtOuz+qnecMvjqXoWh1Z58cUQEZNNsFypJsVjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:fb:1b:b0:bb:bd:fb:ee:f1:eb:29:e5:ab:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Sep 23 19:00:25 2026 GMT
Not After : Sep 24 19:00:25 2026 GMT
Subject: CN=bacb0ed643cfedaa9adb0eaa901ef2ec53ed3607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:c4:05:cc:08:f9:3f:9f:2b:90:df:20:67:
36:99:64:a6:6c:b7:88:b2:30:4b:9a:a7:e4:74:96:
11:25:05:4e:b7:24:91:5b:dc:54:c9:1d:21:e6:14:
13:c0:78:c3:85:55:47:aa:4b:78:b1:65:2e:3c:2d:
78:87:ab:3c:4a:ba:c4:71:09:53:f7:47:ce:22:5c:
9e:a7:b6:d9:72:79:c8:e7:a6:8a:d5:60:59:f0:dd:
47:36:bc:4a:50:a7:c9:4a:b4:33:ac:c7:28:bf:97:
a9:89:cc:bf:38:03:95:7f:fc:4b:9a:7d:95:0e:43:
8c:f4:da:88:95:1e:0e:40:5f:29:40:ef:b4:80:e5:
fc:21:14:b6:90:cf:45:2e:c6:ac:77:09:f2:d0:fb:
97:7c:dd:58:85:4b:14:e3:3b:fb:79:f2:bc:74:96:
a1:14:72:f2:04:74:67:95:bc:82:13:1b:6a:dc:71:
c8:74:b6:f2:fc:a3:6c:ec:33:49:f0:e6:9c:f0:00:
8c:97:8d:59:6e:8a:dd:5c:3e:7c:8b:af:90:28:93:
75:85:64:a3:d5:75:64:9a:a4:ab:34:d4:46:8e:a0:
b6:f4:33:d6:64:e6:86:10:ec:0e:02:bb:72:ad:9b:
5d:e1:df:4a:fb:ea:a7:c5:b7:8a:66:7c:c3:29:cf:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:0E:D6:43:CF:ED:AA:9A:DB:0E:AA:90:1E:F2:EC:53:ED:36:07
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:10:76:e1:60:bd:1c:9b:76:85:b8:34:bb:e1:61:eb:a4:1b:
cd:98:e4:4e:be:66:a4:f7:c1:67:b9:88:99:c8:ab:a8:5e:a0:
02:ee:94:d3:64:62:50:71:40:eb:79:c0:01:e2:43:21:99:3f:
5d:4e:00:61:7c:f9:78:f6:cf:4e:af:1e:1b:df:bf:dd:92:45:
10:e9:98:31:39:ae:e5:4b:99:14:2e:1c:1b:05:cf:8a:68:e8:
c1:ba:6c:2b:bd:ab:b1:b4:d1:74:1b:41:4d:b7:6b:2b:45:6e:
f6:20:b2:0a:92:4b:c9:5b:2b:70:e1:63:ac:b2:04:6a:03:d7:
57:60:bd:bc:f9:1f:91:66:ca:3f:76:84:ee:8b:ec:98:ad:0d:
1a:58:c1:45:42:40:25:b2:88:b2:00:f8:ae:33:b8:50:2c:47:
9d:a1:d9:bd:4e:60:11:c1:68:a6:e4:f9:cb:26:22:16:24:01:
67:a3:7f:47:18:c5:50:f3:cf:09:f0:cb:4c:5d:18:2c:99:09:
2f:6d:40:67:ec:5e:ad:b9:a4:8d:21:30:db:ff:d2:11:77:63:
31:36:fe:56:70:f6:c0:b0:0e:a6:77:1d:d2:2a:05:19:06:25:
be:29:7c:b9:f3:f0:c2:53:c1:cf:6a:9d:c6:e4:f4:d6:fb:f6:
44:52:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:12:52 2026 by rpki-client