Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: +9IRkiWA1cIxuXpgE+SLJD+OXFojKSWa7S7+N0d3adU=
Subject key identifier: 41:B0:54:C1:6B:2C:7D:9F:54:6D:97:07:E0:5B:31:5A:4F:49:5B:FA
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 01A1DFF114B30792670E928497419E7DB60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 16:01:20 +0000
Manifest this update: Sun 15 Nov 2026 16:01:20 +0000
Manifest next update: Mon 16 Nov 2026 16:01:20 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: 5RDaA1qTRBLegFMWNhXBZG+b+/GverdsxE8QcoUtv2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:14:b3:07:92:67:0e:92:84:97:41:9e:7d:b6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Nov 15 16:01:20 2026 GMT
Not After : Nov 16 16:01:20 2026 GMT
Subject: CN=41b054c16b2c7d9f546d9707e05b315a4f495bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:f6:78:cb:14:6e:35:9c:1f:5f:0c:dc:d9:
03:62:b1:09:fa:3c:22:d6:d4:fd:56:a3:d3:91:99:
66:c1:ba:9a:30:8a:5d:97:fe:f4:b2:fc:fd:ca:09:
dc:1e:2e:cc:86:03:5e:4a:fc:9c:75:0e:2f:7b:36:
eb:9c:2e:bd:e8:38:5c:ec:f5:81:7a:38:d5:52:d7:
e0:77:eb:ef:f5:31:69:04:e3:9f:0d:a8:76:19:56:
72:a5:1a:d0:be:8e:68:3a:3e:33:b2:de:dc:05:eb:
6d:46:62:53:52:b3:45:08:f2:dc:52:2d:cf:ab:a9:
78:ac:17:d7:9f:36:2c:b7:da:5e:fe:07:71:bd:ab:
02:bc:85:10:07:53:d8:bf:da:88:12:4a:25:3b:81:
98:d4:c5:75:8e:26:7b:ee:7b:f6:82:a4:71:d4:ed:
20:1d:8a:c0:3a:56:c9:c6:5f:09:ab:c2:ca:17:70:
be:3c:0c:84:bd:e5:64:11:a7:34:d3:e8:83:23:17:
6b:21:c7:3e:73:f1:40:96:a0:c7:4e:be:0f:0d:a2:
4d:90:6b:a1:52:fa:f0:2c:3c:d4:6c:af:9b:d9:56:
40:2a:f2:bd:6c:c3:ae:73:b9:13:d2:21:20:cb:d8:
39:a6:4c:d1:99:fd:04:9c:af:15:e9:0a:90:c7:70:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:54:C1:6B:2C:7D:9F:54:6D:97:07:E0:5B:31:5A:4F:49:5B:FA
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d3:8a:ea:4c:fd:8a:35:a2:34:26:a2:7a:5f:f9:38:db:52:
18:55:4c:c7:ba:6b:23:44:cf:31:57:f3:18:3b:fd:9d:92:d4:
4d:73:99:cf:03:13:5b:7f:4d:ec:c9:60:01:95:6b:82:c6:4c:
51:0e:99:a0:31:8a:d5:03:9f:09:19:fb:9b:63:8f:c6:0f:74:
8a:43:bf:9c:90:45:15:74:99:9e:32:c8:ee:7b:70:8d:7e:68:
54:b7:83:cc:60:be:06:4c:8b:39:48:3d:c4:f4:e2:a7:4a:b6:
a0:ba:f3:b5:19:2d:2d:97:22:83:78:a6:66:e0:0e:2d:d6:50:
44:e3:a2:57:25:ab:21:3a:4f:aa:f4:60:3f:18:55:55:a8:3a:
3a:cd:f2:7c:82:f2:79:d3:b8:7c:7a:eb:56:5a:eb:6c:0f:3c:
0e:a9:04:99:4b:c6:51:6f:6d:36:8e:34:2a:7d:c3:eb:64:4a:
f7:51:4a:26:e1:6c:64:c0:49:cb:0b:ca:39:10:8c:80:4d:6a:
6e:86:52:5f:ce:53:9b:fe:f7:99:95:5a:81:86:7e:33:0e:f7:
91:fb:9d:d2:42:15:b3:c7:fb:18:a0:06:4a:f1:55:5e:e5:22:
3e:21:19:65:2a:06:54:60:15:79:ad:9f:18:da:0e:9a:59:a8:
b3:72:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:59 2026 by rpki-client