Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: NGmFLwv73UI+CFS8cuZBUdjgilIAHuBHSKgabaAL90U=
Subject key identifier: 8C:EE:70:BE:01:D3:B4:F0:C1:CD:0E:C8:C7:A0:CD:99:D3:23:F9:38
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01A0D0123773287C0CD20FF5AF5DEA87DE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0BB9
Signing time: Wed 23 Sep 2026 21:00:49 +0000
Manifest this update: Wed 23 Sep 2026 21:00:49 +0000
Manifest next update: Thu 24 Sep 2026 21:00:49 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: q93wTxpDC+f2XcHjgjFZRHBFfpWxLBX/FmRARc4NsaE=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:37:73:28:7c:0c:d2:0f:f5:af:5d:ea:87:de:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 23 21:00:49 2026 GMT
Not After : Sep 24 21:00:49 2026 GMT
Subject: CN=8cee70be01d3b4f0c1cd0ec8c7a0cd99d323f938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:e9:7b:9a:d6:c6:d4:d0:54:0f:9b:4e:f9:
9c:25:65:d8:a7:0b:4c:10:2c:0a:b5:33:e3:bd:7b:
ce:f1:fe:0f:4e:09:5f:b9:e6:f6:b8:e7:66:a5:37:
63:12:e9:4c:a0:0d:a1:17:7a:34:80:33:85:e8:b6:
a0:b3:b2:43:42:6a:6b:26:c4:7b:3c:ff:7f:73:4f:
6f:66:1b:e9:e6:67:2c:58:35:91:43:b9:bc:9f:d4:
d2:f4:e9:8b:d6:23:c0:06:a0:5c:fd:67:ed:34:b8:
74:33:27:a8:e5:1b:29:75:37:3a:49:9b:d3:35:61:
b9:ed:d5:6a:ad:3d:0a:87:58:30:a9:e9:89:53:04:
ad:91:60:93:cc:46:af:86:e5:3e:9f:9c:87:83:83:
87:20:29:f7:a5:9b:5a:00:7c:0b:64:93:39:97:5a:
81:e9:44:8e:45:5f:15:6c:ee:25:5f:60:86:59:66:
6e:a7:9b:29:70:89:cf:36:01:d2:4c:c1:18:31:51:
b8:34:e7:8d:eb:32:19:7c:e4:d6:56:2e:b8:1f:9f:
c4:f8:ec:df:25:2d:99:6e:37:d8:9c:44:31:78:e0:
77:5a:cd:34:e0:0a:78:c0:10:a9:b6:6e:a8:32:4e:
56:e7:c3:92:0f:bc:34:1e:35:76:b5:9d:a0:3c:5f:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:70:BE:01:D3:B4:F0:C1:CD:0E:C8:C7:A0:CD:99:D3:23:F9:38
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:ef:0d:2b:26:dd:d3:53:b0:b9:25:b9:ef:0a:d3:99:ba:
0c:9a:92:ab:79:01:e8:fd:e7:a6:21:af:b3:03:37:76:70:f4:
77:90:6b:52:aa:03:48:88:23:f0:20:01:f3:a5:3a:44:a1:40:
99:f2:d6:7a:f7:0b:2f:b9:2a:67:6f:b1:d2:f9:0b:de:e7:20:
72:51:80:46:86:ea:4a:fb:32:db:6a:af:76:99:bc:94:75:8a:
88:a8:a5:27:ae:90:2b:e6:07:4b:ab:9a:db:ef:56:4a:0d:ee:
b7:cc:d6:6f:fa:d4:3e:98:46:aa:b6:9f:ff:d2:b5:ec:c3:23:
0b:8f:1b:a2:b7:9e:04:bb:d1:00:94:f7:18:48:9d:2b:77:38:
b1:84:d0:3d:1a:9f:4f:64:19:03:60:56:ca:75:4f:7f:32:4f:
4a:19:09:bb:30:fa:54:da:c9:b8:5a:37:f5:fd:14:7d:ff:81:
40:9c:10:b3:78:01:83:bd:7d:e2:71:d0:2a:5e:8c:d8:41:cb:
8a:62:24:6e:32:e9:90:ec:e9:94:9b:f6:51:3e:5b:26:53:a5:
c4:fa:dc:93:8d:f3:e5:b0:47:19:90:f7:a7:ac:74:17:b5:c3:
7a:6c:45:9e:bd:21:48:1a:6b:e4:49:f5:be:64:5c:4f:f8:c0:
10:01:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:52 2026 by rpki-client