
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: oSq9O3d6NTwViRTXSdAQMTzWRZNFO4S+JPYO+o6Lg1s=
Subject key identifier: A6:F6:AB:70:82:70:D4:84:C2:16:47:AF:BF:F6:09:7F:68:25:1F:D6
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 01A03F72258804BB086A5A80C0D4B397D47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 0373
Signing time: Wed 26 Aug 2026 19:00:40 +0000
Manifest this update: Wed 26 Aug 2026 19:00:40 +0000
Manifest next update: Thu 27 Aug 2026 19:00:40 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: f8YqbKuLkrK2HjFAUOATK7m1X+C9Kwb/B3Enhk+Jtlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:25:88:04:bb:08:6a:5a:80:c0:d4:b3:97:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Aug 26 19:00:40 2026 GMT
Not After : Aug 27 19:00:40 2026 GMT
Subject: CN=a6f6ab708270d484c21647afbff6097f68251fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:15:ab:d0:51:35:38:97:88:83:77:5d:32:
73:c1:b3:db:cc:50:b1:54:c0:c1:00:46:33:22:8a:
6c:fb:2f:1b:19:9e:2f:eb:16:f1:53:0e:79:f7:f6:
49:a8:ef:ac:e0:92:6b:79:4d:74:ec:68:07:e2:c1:
cb:c0:4b:5a:a3:1b:e9:10:d4:b5:07:6a:cd:df:35:
f4:03:07:2f:c3:2b:92:a8:03:c8:80:bd:a2:e8:d0:
80:41:ed:cd:47:91:74:5c:80:8e:76:b4:01:ac:21:
72:ff:54:14:96:af:7e:c4:f1:b2:70:30:ce:4c:76:
02:fc:b3:9a:19:c2:08:60:6a:3b:7d:96:d6:78:bd:
ed:41:71:1a:ea:0e:e1:de:24:b3:62:8d:b5:26:6b:
7f:7c:b4:8c:73:1d:9d:ca:2e:aa:da:38:29:64:5a:
12:a6:0a:63:cf:5f:3c:9c:eb:46:b6:16:ff:99:b3:
c1:fb:6a:ce:7e:c1:d9:e2:cd:6c:c1:65:99:04:15:
22:88:da:59:a9:51:72:d2:c2:11:e0:e4:18:52:a2:
37:f6:3a:1c:da:8f:f6:db:d0:a4:53:f9:6d:d6:4d:
5b:52:0a:95:92:54:ca:65:48:51:d4:33:56:a2:11:
1f:ef:d9:53:2a:35:e1:20:a8:45:3c:55:d8:79:a2:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:AB:70:82:70:D4:84:C2:16:47:AF:BF:F6:09:7F:68:25:1F:D6
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:f8:7d:9e:ce:6f:06:74:3b:3d:3d:a3:05:47:cd:11:96:
04:38:48:1a:b6:a0:c3:8f:b9:a8:d0:58:b0:cf:50:66:e6:d8:
4e:d0:78:47:9e:b4:e5:1b:3a:eb:09:d3:f2:4d:f7:1a:7a:9a:
a2:11:5f:c6:83:4e:b7:23:bb:fa:85:11:c2:4d:a9:69:77:47:
7d:e4:91:40:d4:7d:5b:2f:7e:00:dc:c8:21:28:3e:01:76:73:
b2:9f:40:bf:d6:0f:f0:bf:e4:e0:89:a1:b3:ae:61:c9:9d:1c:
89:c1:68:ee:e5:b6:52:d1:c3:cf:a1:a5:66:0d:81:f5:67:70:
50:47:92:d0:28:36:4e:74:aa:52:3f:d0:4e:70:70:9a:77:f8:
b7:c3:cc:23:52:37:59:3a:51:5e:45:83:55:97:b2:7f:75:bd:
df:3e:d2:26:15:2b:08:e5:c5:bc:5a:ae:e3:16:1d:2d:a1:3e:
77:a4:34:1e:67:98:8f:27:0b:0f:f0:e5:f7:f9:2b:90:cb:71:
6a:39:b5:3e:98:31:eb:5c:1a:51:2d:4c:89:69:d8:93:6e:a9:
26:89:bd:69:80:37:c0:9e:b8:08:45:28:a5:79:ea:bc:e6:84:
18:38:35:59:d3:98:01:f4:ad:97:89:18:1b:19:9e:ad:7d:ce:
76:11:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:04 2026 by rpki-client