Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: sxJGaorKjwfdNPZ1wD8FSX4/JQXBiGU+sHsyHBLphw0=
Subject key identifier: 73:39:B6:A6:9B:38:E7:A2:09:23:13:1C:A1:B9:4F:C5:00:B9:C4:B8
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019D3940DF88765CD8D3242BEE2A64B5546E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 1ZSFW4AGdAYC3rLFN+wZ3zrUadepT2H+AQb4MVhe+7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:df:88:76:5c:d8:d3:24:2b:ee:2a:64:b5:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=7339b6a69b38e7a20923131ca1b94fc500b9c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:35:de:e3:46:5b:83:1c:77:dc:59:1f:42:
d1:33:ec:93:88:4c:fa:ce:45:23:77:a7:dc:dd:6c:
5f:79:30:0c:a3:5e:8b:c6:09:c2:eb:aa:f9:68:6a:
9f:df:0f:12:64:f9:24:0f:63:1a:a8:8d:e4:e9:bd:
be:d6:2f:57:28:84:b9:6f:1a:1d:27:76:74:cf:54:
4c:75:37:1d:e9:ae:38:1f:54:66:36:33:aa:a9:61:
f9:c6:6c:17:76:ec:b4:c0:bb:ac:1f:f0:8a:45:3c:
bb:4f:d5:8c:30:3c:64:80:01:87:e5:37:59:b4:c3:
0d:45:b8:63:a2:db:be:08:a0:3b:07:42:1a:43:44:
66:94:0d:b4:4d:4f:c8:44:cb:ce:ce:68:e9:2e:23:
9f:50:0d:71:47:bf:ec:53:e3:a1:c2:ae:24:9b:c2:
40:d6:43:d8:33:5b:67:b4:f4:ff:24:ed:e7:b1:bd:
38:19:fc:3b:9d:3c:07:f0:d7:69:28:f9:c4:5a:03:
27:c4:54:d5:70:e1:6e:b6:28:df:1d:b1:52:e2:00:
a8:aa:ab:28:d2:53:1f:f0:e7:d5:fe:10:51:fb:31:
8e:14:a6:25:4f:60:70:f8:7a:5a:c6:b6:89:f7:6b:
ba:b7:96:46:71:0a:83:5f:a7:51:1c:74:95:66:bf:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:B6:A6:9B:38:E7:A2:09:23:13:1C:A1:B9:4F:C5:00:B9:C4:B8
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1e:e0:72:20:a3:0b:61:1a:9f:c2:66:1e:e4:ae:dc:7e:5e:
f3:ed:a6:35:e6:29:e2:db:b5:c9:57:9d:ff:bc:c0:8f:b2:7a:
8a:d6:21:69:19:4a:8b:74:d2:b2:e3:dc:58:bd:c8:50:dc:cc:
74:58:24:b1:ab:f8:55:d7:70:e4:e1:00:41:cb:2f:de:d0:45:
b6:dd:d9:5d:31:bc:ea:20:30:18:28:47:39:89:10:69:1f:23:
a8:12:5a:5b:b1:14:e8:2f:c2:71:17:4a:3b:ab:3c:88:c6:ed:
da:ad:b9:aa:8f:2a:97:7a:23:2c:0c:e4:42:49:22:bf:e8:e2:
2c:d4:ae:cd:68:36:4e:46:fe:2b:70:3e:6e:88:1f:f6:4d:05:
65:6b:6c:7f:3a:b8:ce:57:0b:f6:e4:51:3a:df:05:30:98:d8:
5e:bc:94:cd:5b:b2:10:70:49:30:b8:71:0c:8f:1b:84:cf:3e:
15:e9:55:ee:f6:1d:05:11:88:e4:5a:d6:83:40:e1:0e:2c:5f:
56:98:43:3c:e9:de:50:62:db:19:34:10:b6:35:dd:66:71:da:
6e:34:bc:02:a6:cb:00:db:b7:d4:52:15:2b:c2:5e:de:01:f4:
52:21:a3:ed:3f:8c:6e:63:ab:12:75:dd:46:61:a3:40:be:e4:
cc:0b:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:39 2026 by rpki-client