Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: hiGuN09HVPirAMRt1i2BiNTA7+kuGvXXiDKY1lQUuig=
Subject key identifier: 57:FE:CA:89:08:BA:25:3E:D6:71:77:0F:BF:DA:79:69:4C:91:37:24
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 01A0CDB5908CCBA8C126490CC0C0055B1FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0D99
Signing time: Wed 23 Sep 2026 10:00:23 +0000
Manifest this update: Wed 23 Sep 2026 10:00:23 +0000
Manifest next update: Thu 24 Sep 2026 10:00:23 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: eihtYckHOsLc6pIArOm0YqN43+eIJbkc7bWuJvCWcgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:90:8c:cb:a8:c1:26:49:0c:c0:c0:05:5b:1f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Sep 23 10:00:23 2026 GMT
Not After : Sep 24 10:00:23 2026 GMT
Subject: CN=57feca8908ba253ed671770fbfda79694c913724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:ca:77:d7:fe:6d:b1:ca:bc:0c:06:ec:e7:
5e:01:6b:0c:bf:2a:42:93:18:87:e0:90:62:15:1c:
73:4b:40:77:03:46:87:2f:1e:08:bd:dc:0c:8b:0d:
44:47:7a:c7:0c:a2:13:f6:4c:b0:42:dd:58:8f:04:
29:35:80:0c:b0:ec:a7:ea:55:e5:81:b1:73:26:7d:
7f:05:5e:4a:96:fc:46:53:ac:9d:ed:2f:cc:6b:3b:
db:ad:99:9d:c1:31:07:49:83:b0:90:d6:75:14:e0:
24:92:cf:3f:00:93:3e:0c:2a:58:d6:71:b8:f0:f4:
ef:f6:48:a8:ec:71:6d:72:22:21:2b:1c:14:48:17:
3c:45:32:a9:79:b7:8b:64:8e:1a:62:11:29:58:b2:
28:bc:b5:63:d6:8b:0e:31:fc:07:48:cb:d4:74:2f:
cf:42:89:d4:87:c0:2d:df:3a:57:53:f5:5e:9e:a4:
e8:2d:9a:97:10:26:7c:af:1a:10:fc:4e:51:c0:3e:
ad:e7:d0:f1:77:74:ab:b9:e2:54:89:de:85:90:c9:
26:11:0f:f2:47:90:8c:1f:3a:f4:fb:4c:c7:70:64:
7c:f8:13:51:a2:86:6a:19:1d:61:29:67:71:7a:86:
8b:78:1a:87:e9:ea:c8:3c:0e:73:6e:75:d1:0d:79:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:CA:89:08:BA:25:3E:D6:71:77:0F:BF:DA:79:69:4C:91:37:24
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bc:8e:82:d1:45:dc:35:f0:0d:76:d8:b6:2f:14:0b:74:e5:
dd:f7:53:29:48:18:16:f2:db:23:e8:30:96:df:bb:53:d2:f7:
1b:20:c6:b2:55:ad:8b:a7:b9:f6:25:f1:43:f3:2b:e0:37:63:
56:d9:f3:b3:40:25:81:a2:9b:bf:7c:aa:f2:38:96:05:72:c3:
7f:1e:c3:ba:c7:bf:1d:df:ad:d9:8a:8e:5b:eb:77:54:33:cb:
b2:47:25:15:93:49:a6:3b:bd:50:e8:3f:45:80:1f:39:a3:3e:
4f:4f:d3:3b:ce:7c:02:ca:8d:14:56:e2:e7:62:12:97:72:ab:
fa:99:23:c8:fe:d9:20:3f:4d:c1:b0:af:4c:dc:da:3d:83:00:
b4:58:81:54:1d:84:03:4c:f1:12:67:e2:07:bf:86:28:5f:36:
f0:27:7f:c8:33:9b:13:41:c4:a0:c3:b2:00:7d:e4:82:0e:6e:
50:66:fa:e9:e1:00:c2:e3:87:e7:50:fa:ed:11:61:27:d1:df:
06:29:6e:16:5e:80:a1:89:57:6f:94:5d:d7:4c:21:d4:0d:ad:
4d:7a:c3:22:3a:7d:4d:09:02:9c:85:07:9b:a6:65:b5:ab:a4:
e2:a6:fa:9d:63:0b:af:1e:2d:b2:10:38:85:88:73:66:e9:a0:
4a:94:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:32 2026 by rpki-client