Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: 6MZgM3QK9ORo/o9EnsVmhCFwRDYU8C865zdCkEhtvXY=
Subject key identifier: 77:8A:55:17:81:3A:9F:BA:D4:95:02:C0:2C:45:D7:00:9D:DC:99:7F
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019E1C7D5F054ABC6A585A9A37BDE38486AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0D52
Signing time: Tue 12 May 2026 14:00:38 +0000
Manifest this update: Tue 12 May 2026 14:00:38 +0000
Manifest next update: Wed 13 May 2026 14:00:38 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: nRX81YDAscoag1Bj2p8CUBjvWxP6w89bGmW2wxV4Jpk=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:5f:05:4a:bc:6a:58:5a:9a:37:bd:e3:84:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: May 12 14:00:38 2026 GMT
Not After : May 13 14:00:38 2026 GMT
Subject: CN=778a5517813a9fbad49502c02c45d7009ddc997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:fa:ed:6b:60:ee:1e:43:34:73:e7:37:53:
fa:66:36:8c:27:fe:af:77:f1:cf:4d:b7:3e:53:eb:
79:2e:e8:55:a4:8d:96:26:8d:dc:d6:ee:7f:39:70:
fa:35:75:84:45:20:7d:6a:fb:72:12:dd:a1:dc:1c:
6f:59:a4:92:f2:8c:8e:f7:27:8f:29:05:8b:b7:49:
f2:06:f6:a7:d2:46:36:2c:0f:e2:fb:b5:7a:00:c3:
41:f2:f6:37:b7:2b:2a:10:ab:b4:27:0e:2b:22:4e:
a7:59:5a:a2:01:a4:2c:99:5e:e4:73:f0:2c:91:d7:
47:bc:10:a8:79:d5:fc:50:e9:f4:7e:77:72:e9:88:
83:b0:2b:9f:e3:c7:b9:db:5c:2d:67:0c:9e:ab:23:
7e:02:90:db:95:4c:6e:50:2c:57:45:38:50:0e:4e:
92:c5:63:1b:3f:29:2f:89:cb:63:ee:07:30:c5:53:
08:d0:e8:32:e3:39:e5:f1:f1:0b:b0:70:b0:15:9b:
fa:56:ec:a1:6e:df:6b:48:bf:58:d4:f1:e3:d0:55:
11:b8:b6:be:7b:d2:a1:fd:1a:c3:a4:37:5c:59:09:
59:55:f9:97:7c:26:e8:2d:57:b5:a5:57:f3:37:f5:
30:55:b0:61:cf:80:56:5c:2d:29:6d:36:8f:1c:8a:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8A:55:17:81:3A:9F:BA:D4:95:02:C0:2C:45:D7:00:9D:DC:99:7F
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:80:fc:70:9c:23:e1:90:78:90:85:40:06:de:d4:3b:a7:98:
90:d4:40:9b:ef:36:cf:c9:88:ee:45:8e:3a:5f:6c:6f:eb:9f:
2d:97:ac:88:f8:10:28:17:35:a9:f7:fb:16:9a:fa:dc:f6:2d:
5f:13:53:d8:8a:0b:3b:68:37:d0:ec:51:4e:5b:59:b5:b7:46:
66:ed:8b:24:89:15:a1:8a:df:6b:5d:fd:64:c5:ef:78:fb:f2:
23:be:3a:8f:b8:8a:66:f0:45:d8:4b:af:fe:1f:9c:f6:a9:dc:
c6:50:98:b2:ea:db:47:10:1f:66:c4:0c:3e:e1:2e:91:7f:5a:
da:20:bf:a0:9f:cd:79:14:05:cd:77:05:f6:6e:0a:a7:c9:6a:
77:59:37:cc:bf:42:34:7c:42:4b:8c:95:fd:1f:3d:84:df:2e:
a1:19:32:a6:3a:96:f5:dd:27:45:d4:08:f4:4c:c6:84:34:56:
10:50:9a:e5:b3:68:59:47:cb:30:f6:6b:9e:d7:73:fc:ec:a2:
00:47:f6:c1:9a:84:d6:e2:a9:4e:da:cd:33:c5:38:0f:27:7b:
ca:9a:68:ab:cf:e7:11:f3:f0:68:2c:80:ab:94:98:12:53:29:
84:58:5e:24:96:1c:34:ea:66:30:d2:35:e1:8e:61:78:91:c3:
81:76:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:35 2026 by rpki-client