Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: uRMwGmtCG6Z2/x03IFORsGfAiKeXg63w76Q3YL2Ni94=
Subject key identifier: BE:70:85:7B:96:8D:EA:F5:D8:EA:EE:CB:37:EC:F7:09:45:95:A5:B7
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 01A14082CD6B0601C21481C297FF98902375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 17:01:16 +0000
Manifest this update: Thu 15 Oct 2026 17:01:16 +0000
Manifest next update: Fri 16 Oct 2026 17:01:16 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: qSGgEo+38bz565El+xv5FNqHbAJLfTXV5iN8Exaey2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:cd:6b:06:01:c2:14:81:c2:97:ff:98:90:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Oct 15 17:01:16 2026 GMT
Not After : Oct 16 17:01:16 2026 GMT
Subject: CN=be70857b968deaf5d8eaeecb37ecf7094595a5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:5b:79:06:6d:62:06:95:4e:f8:51:19:36:
06:c6:3c:71:8f:63:e0:5d:22:eb:10:1b:f3:16:a0:
90:35:f7:6b:c9:54:17:cd:0b:a2:89:17:c5:94:4d:
0d:05:7e:6f:46:07:c9:43:b4:79:7a:c0:81:5b:27:
d5:24:ec:f5:47:08:a5:f1:a3:ef:c2:8e:0e:4f:f5:
e2:8a:ca:df:c2:e6:bb:3b:50:99:8a:c4:64:0a:1a:
3e:f7:ed:cc:e6:20:78:34:d3:76:81:c7:23:19:bb:
23:47:6e:87:52:28:80:07:c9:40:a3:e8:87:f8:ee:
7b:b6:f7:e5:ab:16:74:ee:2e:37:17:e1:75:ba:42:
ef:e0:59:cf:10:b0:fb:22:c6:e1:c6:1b:3a:95:7f:
90:2e:c4:a0:aa:80:46:2c:0c:05:e8:a8:fd:cf:e6:
ef:a0:e1:2b:d2:e7:17:4c:48:f0:1e:27:d6:8c:11:
8d:59:47:3d:29:b6:09:2a:dd:85:66:14:02:09:f4:
f0:d2:6b:7c:f3:a9:27:b3:56:2b:7c:59:8f:5a:5d:
73:68:f2:39:11:76:53:19:fd:7a:86:6a:cc:31:7f:
47:f5:46:da:12:71:d4:a8:fb:bf:a4:cb:1d:7a:d7:
8a:7e:06:83:88:9f:b1:ba:80:45:5c:2e:a4:c6:58:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:70:85:7B:96:8D:EA:F5:D8:EA:EE:CB:37:EC:F7:09:45:95:A5:B7
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:71:bd:10:ea:e3:b6:4d:4c:0c:c9:b7:fc:29:bd:20:56:
56:d7:80:20:a1:08:d2:b8:28:27:2d:ce:8e:ae:a3:b8:23:9d:
33:ff:11:9c:c8:0f:8b:cd:96:a8:54:b0:55:90:8d:77:07:1a:
0d:6c:cb:65:ce:a3:79:df:88:ef:ec:ab:fe:8b:42:07:9e:af:
f0:e3:99:57:91:6e:3f:98:5f:ea:8b:db:2a:71:6f:4a:11:78:
b9:f5:83:3a:13:e5:95:3c:cf:d2:cf:33:1d:ef:fa:dc:c8:ca:
3f:b2:d0:11:7b:26:d7:0d:4e:22:58:12:6e:dd:1d:0d:4a:f6:
d5:69:8c:ca:2a:f1:6f:9f:35:50:d0:62:e3:88:af:d5:b9:99:
fc:fc:77:20:43:b9:7c:d1:78:bf:68:1b:7b:7a:fd:b1:bc:db:
b6:53:c1:ab:34:41:cd:b8:f1:69:28:d9:4e:f9:bc:71:ec:4a:
41:13:09:37:b5:31:d4:86:14:ba:f1:37:d7:ea:85:f8:e5:b3:
7c:02:20:f9:f9:35:98:ca:8f:24:23:20:a2:91:df:16:5c:84:
61:b8:93:4e:4b:25:49:dd:8b:a9:7c:f5:46:19:87:e8:24:e6:
d1:5b:01:4d:c2:1a:69:66:2a:31:4e:dc:d1:35:8e:40:8e:42:
9d:e6:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:45 2026 by rpki-client