Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: 8slE1Azhv1FHzFW9fvjg06B5e1bUD19Jfi4yZaCKWg4=
Subject key identifier: B3:86:76:12:D8:5D:5C:BD:88:0C:6F:DE:1F:06:6C:84:F1:7E:6F:87
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 019D390A402C4AA1E701411512764D90BC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 01E2
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: lRvUqn2G841x0sA1MfIw2CYDItNLZ1BqqgOCesiY/SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:40:2c:4a:a1:e7:01:41:15:12:76:4d:90:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=b3867612d85d5cbd880c6fde1f066c84f17e6f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:72:57:b3:b2:70:b6:40:ff:eb:62:92:4f:37:
35:3c:ae:4f:10:8c:8c:f6:bf:ba:d6:a1:27:fd:65:
66:eb:2b:eb:6f:f2:b0:6e:ba:12:2e:19:d1:c4:09:
09:0f:21:22:fa:11:2b:8b:9b:ee:53:0e:31:7d:23:
21:ae:fc:68:76:e1:17:2e:ee:16:f4:7e:ba:96:b8:
59:25:20:ec:db:3b:7b:03:d7:38:54:de:0a:04:72:
00:89:d5:bf:95:f1:d7:bb:23:21:c2:e7:d8:93:1b:
07:09:42:2c:3e:78:5f:56:b4:4f:36:12:85:9d:9c:
ba:90:34:c6:08:8b:a4:c8:95:ac:15:7a:02:80:23:
3b:d1:e1:e4:2e:89:b9:03:31:2f:c4:0f:5e:f9:02:
b3:86:6b:35:3a:63:5e:8b:49:a4:91:3e:ac:d8:b3:
b5:e0:d8:50:23:f5:67:1e:58:f7:ff:22:8e:d8:64:
8c:60:81:f9:3b:7a:58:e3:60:01:35:7f:90:75:b2:
32:b8:ee:5a:3e:48:eb:c0:a2:b6:39:e2:75:03:b0:
d8:2f:eb:e8:47:36:c7:47:75:59:af:71:57:ea:35:
9e:00:a0:cf:68:d3:47:5b:30:45:35:2b:ff:4d:1f:
9e:c8:98:07:0d:a4:91:8f:54:74:0a:2b:b2:62:37:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:76:12:D8:5D:5C:BD:88:0C:6F:DE:1F:06:6C:84:F1:7E:6F:87
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:40:99:d0:24:67:08:35:b0:ab:8c:97:31:a1:4b:e2:12:0c:
97:02:f2:f6:44:8e:b8:82:9b:96:7c:a5:0d:34:0b:e5:56:ba:
93:0c:40:df:39:c6:a1:fa:ac:fe:57:29:9f:c0:9c:84:8a:b5:
4a:bc:a8:8c:b2:82:42:97:d2:91:52:1d:29:9e:9e:51:16:ef:
51:e6:e2:f1:ea:50:5b:7d:1d:cf:b3:27:26:ca:64:0b:e6:c8:
40:d7:74:39:25:fe:02:77:7e:11:c0:16:c4:07:05:c5:ac:d9:
e5:b3:41:f7:ec:59:60:13:db:d6:7d:ef:57:ff:77:d9:bc:36:
62:da:ab:c6:5b:97:32:82:4a:52:68:fe:3a:83:4d:8a:97:54:
ae:ac:91:f2:80:94:df:09:63:67:c1:05:66:f4:6e:11:d5:16:
29:57:f3:9e:a2:5e:15:f9:35:08:d9:04:0e:e9:12:34:ee:89:
97:82:24:33:0e:c1:0c:3e:4d:4e:c9:76:61:a1:44:f5:1f:80:
ef:54:50:97:ba:27:d1:85:f7:19:c9:97:0e:7f:b8:3c:17:24:
e7:d2:ab:4b:14:ad:2d:c1:8d:c3:08:32:9f:d5:69:df:13:a3:
8e:2b:06:5a:af:6d:e4:4c:9f:06:1e:5b:12:3d:de:df:83:38:
95:17:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:35 2026 by rpki-client