Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: ThtyuAFAu6mFsZFxOlqO7za9jIApnjS0YNwZdNSvYkg=
Subject key identifier: F2:9C:3C:FB:A4:D8:5A:72:5A:F6:44:33:65:13:44:78:92:BD:30:9E
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019E30722E5A9364B5BD5BFA296826009944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 11:00:49 +0000
Manifest this update: Sat 16 May 2026 11:00:49 +0000
Manifest next update: Sun 17 May 2026 11:00:49 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: VkTNQTykibuzZSikHdBT3L+8KgSsQdY24nCFgMu4eR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:2e:5a:93:64:b5:bd:5b:fa:29:68:26:00:99:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: May 16 11:00:49 2026 GMT
Not After : May 17 11:00:49 2026 GMT
Subject: CN=f29c3cfba4d85a725af644336513447892bd309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:df:cb:e0:91:25:67:c8:ea:41:06:2c:d4:
ee:76:6e:71:b3:16:6a:10:c9:e4:f4:c6:ce:18:5f:
68:8c:4c:8e:a5:27:44:40:85:5b:2d:14:32:c4:1f:
f8:f2:17:20:b6:1a:37:c1:6c:c8:03:2e:4e:91:8e:
f9:14:5d:cb:bf:50:49:66:6e:0d:1c:39:09:35:5a:
8e:56:66:75:5d:b1:b9:0c:29:74:80:c0:fc:b0:f3:
5f:1c:12:08:da:f0:dd:b1:f0:55:6e:9a:ff:26:26:
1d:87:ae:4a:7b:2f:c5:00:6f:71:61:4d:f0:bd:29:
f3:d9:13:58:91:8b:c1:d6:2f:96:a0:c9:02:43:eb:
d4:08:b3:52:39:c3:e5:66:dd:74:bc:2e:9d:6b:ab:
9f:15:cd:56:8f:14:c0:27:06:07:7c:1f:2f:e9:2f:
e5:ab:25:a6:ed:d3:1a:d9:bf:76:84:9b:1d:6c:4a:
6e:af:0f:a9:c9:54:57:d4:b5:92:9b:dc:4f:27:ab:
6e:6e:e5:9b:c3:4a:9c:1a:ef:d4:18:31:b5:58:69:
73:cd:27:5f:de:ad:a2:46:c3:a0:97:eb:6e:82:1f:
c6:fa:20:b1:0d:b1:f3:39:81:e6:05:87:95:6f:08:
10:cf:86:5c:e3:d8:f4:bf:1e:fa:40:c3:67:eb:a0:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:3C:FB:A4:D8:5A:72:5A:F6:44:33:65:13:44:78:92:BD:30:9E
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:59:dc:aa:2b:dd:d3:f3:ec:af:13:2c:24:91:57:96:36:98:
8f:fb:c3:50:49:6c:c2:41:a3:d2:90:da:85:20:ac:ce:a1:5e:
da:43:48:8c:12:1c:d7:46:c0:0e:eb:c6:7a:9a:c0:3c:1f:25:
f2:e1:b5:20:17:1f:61:5c:1d:2d:f9:c0:a0:f6:16:de:9e:55:
a7:6a:95:29:a1:89:90:c8:17:87:cd:23:7f:e9:21:7b:ee:2a:
bd:5a:58:0a:33:f8:df:a0:55:62:94:45:f0:4e:42:cf:43:1c:
77:fb:f2:b5:51:19:f7:85:66:a5:0e:a4:46:bf:f2:67:af:ec:
fd:e4:7e:25:32:8d:e5:bb:74:88:4b:3e:1d:40:7f:0e:e1:68:
8d:b1:36:d1:a4:3c:a2:9d:48:c1:53:31:3a:96:0d:7b:19:28:
5e:22:cd:a6:ec:ae:51:c1:42:49:12:a8:f2:2a:94:01:cf:39:
51:36:0a:c2:b5:52:d2:21:9e:c7:20:fe:92:8e:2f:f6:af:cf:
84:16:90:fa:f8:9e:25:cb:c1:da:f2:a9:81:52:85:90:26:e6:
5d:b7:6d:c9:06:6c:0b:93:b6:c2:70:d4:80:d6:87:4a:00:6e:
bc:4e:d6:24:8c:2b:89:2f:7e:f0:5e:96:b8:89:b4:39:56:84:
66:80:5f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:26 2026 by rpki-client