Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier: UyAe4J5ehfGoR1sUIWAig1WnlVSXANcmFOGwd3Kflpo=
Subject key identifier: BE:BE:B3:3B:1B:EC:B7:4E:8A:84:82:AB:BF:A2:B5:A3:EC:BF:C8:E0
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer: /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial: 01A0DCBB4C1B9618F4A2DF831C70B4D1EC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 08:00:57 +0000
Manifest this update: Sat 26 Sep 2026 08:00:57 +0000
Manifest next update: Sun 27 Sep 2026 08:00:57 +0000
Files and hashes: 1: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: pQbKr08EEe3ne54bou401PCdW8XxDLbAcia3qyc7wZ4=)
2: vagnBvJ7GZHzOrybHsBa0u1gBGs.roa (hash: AHj1V+feefzLimbaTSC6tcBNqcISih6luVdAk+cmYzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:4c:1b:96:18:f4:a2:df:83:1c:70:b4:d1:ec:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Validity
Not Before: Sep 26 08:00:57 2026 GMT
Not After : Sep 27 08:00:57 2026 GMT
Subject: CN=bebeb33b1becb74e8a8482abbfa2b5a3ecbfc8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:d2:b0:18:88:16:80:28:c8:9e:1d:dd:ca:
72:e2:a8:b4:77:0e:1e:d8:bf:e1:5f:c5:38:e2:49:
48:e9:79:07:0c:13:ff:90:dd:44:9f:3f:62:f2:59:
b6:f3:0f:b4:0a:9d:7b:33:3c:a2:bd:99:46:c4:d5:
68:ba:aa:85:97:ee:3d:da:bf:ad:f0:59:0f:2f:69:
c9:26:1a:6e:e2:5f:ae:d5:d8:cf:e0:cf:fa:7e:d3:
8d:7a:3d:e2:13:2c:b1:31:e5:4b:a8:7c:af:d1:30:
e6:18:ab:ef:a8:61:8e:80:a0:a1:e2:56:c2:50:66:
6f:40:88:43:63:b3:07:62:01:14:0f:38:b7:96:12:
37:78:18:0b:ac:da:0c:bd:c6:4f:56:af:7b:1e:6b:
74:15:23:56:99:ed:6a:94:d9:21:b1:3a:35:ba:9e:
92:ba:5a:62:d1:ca:16:34:06:d3:6f:5b:65:fc:22:
0b:f5:f2:a4:7a:f4:4f:4b:86:f3:b1:bb:d7:e6:8d:
c3:08:b0:d4:10:e0:4c:cd:a9:02:22:70:de:69:aa:
c2:00:9f:8d:68:3f:79:c4:38:9d:a4:59:ce:be:5d:
ec:40:b0:a8:a6:ca:86:eb:85:1a:35:b6:9c:f8:f0:
3d:cf:94:f8:c7:e6:58:93:0f:63:40:ac:f3:3c:98:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:B3:3B:1B:EC:B7:4E:8A:84:82:AB:BF:A2:B5:A3:EC:BF:C8:E0
X509v3 Authority Key Identifier:
keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:87:04:6d:ce:62:e5:a2:c9:51:6d:9e:00:e1:28:8e:b7:a6:
e1:3f:fc:e6:6a:99:a9:f0:5b:11:2f:10:27:ba:ba:93:1e:c8:
8b:57:98:cd:54:0b:a6:c4:7d:92:dd:95:ae:5c:6c:77:9d:e5:
b1:26:7d:d7:de:56:4c:52:76:ee:e4:07:83:0c:52:55:0b:6a:
06:45:fa:bc:f9:b6:05:27:72:9a:3f:41:a7:80:67:6e:4b:d5:
93:c0:1c:37:fb:cf:2a:c1:1f:29:40:97:ac:a7:79:44:6d:fb:
24:2e:e2:54:58:e0:e1:ee:a6:7e:43:28:0d:c8:21:69:d7:0a:
33:50:da:59:2e:a2:15:50:46:ff:70:12:ed:dc:be:5b:49:95:
9f:93:87:5d:ab:a1:56:a9:b2:11:e4:1b:89:d9:8e:a0:22:2e:
83:0b:27:c9:ab:f7:0e:43:73:26:3d:17:3a:62:4e:ac:75:00:
80:62:62:09:e9:45:d6:2c:f5:eb:c8:d2:9b:61:82:b6:3e:29:
cb:9d:3d:f0:28:d9:f7:79:57:30:fb:3d:54:b0:2c:73:aa:0e:
72:9f:2c:1f:58:c8:44:95:6f:76:c9:db:ae:35:41:86:83:38:
f1:88:30:47:89:c9:58:42:7e:ea:ff:b5:93:1c:83:e1:d5:a4:
01:d2:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:40:28 2026 by rpki-client