Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: PwTx8NTR9SfrCnCsaNKXtetEw0mKloOgw1FzFk9vyVE=
Subject key identifier: 2E:4C:A2:85:39:29:0F:0E:E5:61:BD:2E:EF:8E:02:A9:EE:10:F4:45
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 01A0CFDAE80B8E1320CD6CC74C5B5E417E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0EB8
Signing time: Wed 23 Sep 2026 20:00:24 +0000
Manifest this update: Wed 23 Sep 2026 20:00:24 +0000
Manifest next update: Thu 24 Sep 2026 20:00:24 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: csKIRHuUTFftFPlYRC1Zhyi403jwBlgoIXcGwKlSU1Y=)
2: waBpAN9vgWoJZ16stjfS0W9YhCk.roa (hash: zjbsi6uKqamU37PZUdeMKzkzKXpoFYorr604US4cNqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e8:0b:8e:13:20:cd:6c:c7:4c:5b:5e:41:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Sep 23 20:00:24 2026 GMT
Not After : Sep 24 20:00:24 2026 GMT
Subject: CN=2e4ca28539290f0ee561bd2eef8e02a9ee10f445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:09:d8:9f:7d:14:ea:bf:6f:c1:e6:ce:19:
5d:45:50:c5:2e:18:ff:12:75:00:47:88:60:80:ba:
38:17:1b:f9:e7:04:d8:4f:3f:09:f2:eb:c8:ed:49:
13:6b:03:2e:12:a3:c5:4f:ae:3c:4e:fd:c0:b9:ce:
9d:91:5a:ad:15:d0:49:02:81:3b:18:42:9f:4c:75:
60:5e:71:11:90:84:3c:d0:88:d5:43:46:d9:e8:66:
6e:26:3d:65:ee:3f:cf:0c:47:bf:58:32:2c:a0:e4:
10:7b:0e:dc:f5:4b:18:96:5d:84:56:4c:81:f7:61:
8c:78:d3:f3:41:8c:a2:8a:03:e2:e6:92:62:23:63:
79:1e:76:ec:15:e9:e4:5e:95:a6:9a:77:7b:6b:85:
0c:89:9e:95:0d:9d:25:d9:90:dc:7d:fa:75:4b:3e:
b7:8d:9d:1f:e9:4d:d1:e8:36:4c:eb:c3:2a:ff:31:
e1:b9:cb:55:02:a3:37:32:e1:f9:3a:e5:d8:50:54:
96:a4:5a:29:4f:33:87:79:ac:67:10:cd:d3:88:3f:
a9:a3:99:27:c7:c3:32:91:d0:2e:32:c2:a1:97:8c:
f3:9f:d8:f8:62:2e:0f:93:e4:f8:3a:42:46:f8:cb:
22:61:a4:2a:6c:a9:fe:32:8e:d0:99:7b:01:c2:a0:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:A2:85:39:29:0F:0E:E5:61:BD:2E:EF:8E:02:A9:EE:10:F4:45
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d7:bf:d2:8c:35:c0:bf:37:6f:e7:90:09:2f:2f:da:2a:eb:
f6:6b:5f:54:51:9a:15:f7:47:03:fe:98:ae:86:74:fe:7a:25:
1a:9c:b8:41:63:b8:4b:1f:f0:b9:c1:0d:be:82:c7:b4:00:f8:
45:9e:69:ec:3a:4d:88:62:26:65:4b:ac:18:fa:d9:27:9e:9e:
40:ec:15:47:85:75:a1:35:27:09:f6:5d:bd:15:b2:e0:80:b4:
a4:b9:10:af:49:38:fb:81:27:82:02:92:ad:3a:c7:20:31:39:
ce:75:a5:bb:83:08:16:0e:bf:73:6d:be:fb:9a:c4:90:32:5d:
e8:86:44:7b:30:42:76:f4:b1:cf:34:4f:be:f0:ad:3f:db:57:
8c:1b:8b:9d:b7:ef:0e:93:6c:9c:de:14:da:17:69:57:57:f8:
0f:cb:25:72:1b:93:55:cf:10:1d:6e:68:c6:d3:4f:24:06:c6:
45:3e:29:59:57:9b:b7:2c:df:46:16:60:3b:4b:26:67:5a:cf:
e6:fb:20:42:fe:85:52:84:6f:72:b2:79:f2:6d:bc:2c:47:8b:
a3:33:21:25:2e:d1:39:d8:85:6c:ae:56:e9:d3:49:e2:36:07:
bc:19:9d:0d:a4:a8:46:1e:cc:c6:7d:cc:22:12:e8:4d:d8:8f:
f4:53:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:07:07 2026 by rpki-client