Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
File: 1-JnTgr62BW0U5qO8YYjlOS93LvU.mft (raw, json)
Hash identifier: hkZxKoFoQXCG+9wnH27KK5CYX2pDv/35mVaJJoONJk8=
Subject key identifier: FA:FD:37:67:B8:1E:4D:99:3B:5D:05:06:85:80:DB:F9:9B:76:D0:09
Authority key identifier: F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
Certificate issuer: /CN=f899d382beb6056d14e6a3bc6188e5392f772ef5
Certificate serial: 01A0412A4198C89C6036DEBE46294DEE7EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 03:01:23 +0000
Manifest this update: Thu 27 Aug 2026 03:01:23 +0000
Manifest next update: Fri 28 Aug 2026 03:01:23 +0000
Files and hashes: 1: 1-JnTgr62BW0U5qO8YYjlOS93LvU.crl (hash: CzlZ5838xTo45OqJinjhvelN07pkYqzPrJPgoLlpoNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:41:98:c8:9c:60:36:de:be:46:29:4d:ee:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899d382beb6056d14e6a3bc6188e5392f772ef5
Validity
Not Before: Aug 27 03:01:23 2026 GMT
Not After : Aug 28 03:01:23 2026 GMT
Subject: CN=fafd3767b81e4d993b5d05068580dbf99b76d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:32:42:78:09:1b:4b:cb:42:f7:99:3b:fe:
4a:f7:0e:71:74:6f:a4:1b:b4:ab:7d:ac:12:14:37:
3d:0c:a8:8f:7d:4a:dd:8f:54:f9:73:c3:0d:5b:50:
39:a9:b8:31:d9:cd:5d:8e:fb:04:82:29:71:82:79:
c7:3d:1d:b1:f2:b8:5d:cc:80:c3:2d:1d:7f:5e:6d:
19:a2:02:24:ac:74:48:d2:48:e9:1a:5b:d9:0d:82:
1a:ed:f8:cd:a3:f1:09:11:70:59:1e:84:9f:f7:ec:
31:a8:50:96:9e:32:a8:9f:c2:bd:a8:82:8f:8e:32:
ba:7e:2b:8e:28:92:f5:7e:1b:a6:6f:ee:c0:7e:a6:
9b:4a:9f:90:cc:22:7c:ad:ba:f8:05:a7:32:68:98:
f5:da:74:61:57:a3:60:1b:e4:4c:c0:36:52:aa:db:
08:aa:34:74:63:27:fb:1b:81:c3:ed:57:4e:fc:88:
08:a5:61:ec:24:03:3f:34:ce:33:da:b6:0f:c2:b0:
64:1d:cc:bb:94:eb:3d:ba:75:49:c4:6a:6f:57:ff:
8e:d8:ff:76:41:8e:c3:7a:6d:ab:f9:c6:58:ee:c1:
bb:11:24:dc:f6:c9:ee:af:39:1b:5d:ed:88:8a:43:
d2:fb:d9:15:03:6a:41:f4:74:08:ec:99:e3:aa:32:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:37:67:B8:1E:4D:99:3B:5D:05:06:85:80:DB:F9:9B:76:D0:09
X509v3 Authority Key Identifier:
keyid:F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:92:da:02:f5:42:99:ad:ba:c0:d0:bf:f7:92:4b:bd:99:
fc:54:20:e5:b3:0e:7f:0f:6a:5a:0b:e2:09:1c:0e:60:86:ef:
ce:a2:c7:d6:ee:26:ca:42:7f:01:ca:52:8b:25:f9:a3:c1:60:
b1:45:c1:8b:70:f1:ef:d6:b5:8d:5c:c8:93:20:7f:59:84:29:
cf:ca:e7:b6:9e:dc:ed:c3:62:43:f1:4f:52:4a:fc:dc:9e:e1:
c6:4d:b1:92:1d:f5:8d:1a:38:c6:ab:be:8b:9c:28:2d:fb:a2:
03:37:e3:33:ab:f9:61:45:31:8a:b0:29:5b:df:38:f9:ee:18:
ed:f2:dc:23:cf:a9:6c:1d:8d:40:ce:6a:90:1e:25:77:d8:7d:
62:f8:ba:b3:bb:01:93:80:90:24:fd:14:22:a8:e1:0a:45:77:
ca:fa:68:2e:68:10:de:02:d1:b1:36:3d:18:e8:74:4b:46:70:
dc:96:88:d3:3e:63:00:fc:b3:c7:65:a9:82:7d:af:0b:75:43:
f3:6f:df:b1:ff:d4:81:e7:98:cb:a7:63:5b:41:63:ca:99:eb:
f3:33:d4:e8:91:60:3c:ca:28:73:ed:93:66:cf:47:4b:c6:62:
94:96:ed:98:23:cc:8a:e7:8e:d0:92:f5:5a:79:4c:b3:0c:a8:
2f:de:f0:ba
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaBBKkGYyJxgNt6+RilN7n74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTlkMzgyYmViNjA1NmQxNGU2YTNiYzYxODhlNTM5MmY3
NzJlZjUwHhcNMjYwODI3MDMwMTIzWhcNMjYwODI4MDMwMTIzWjAzMTEwLwYDVQQD
EyhmYWZkMzc2N2I4MWU0ZDk5M2I1ZDA1MDY4NTgwZGJmOTliNzZkMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9AyQngJG0vLQveZO/5K9w5xdG+k
G7SrfawSFDc9DKiPfUrdj1T5c8MNW1A5qbgx2c1djvsEgilxgnnHPR2x8rhdzIDD
LR1/Xm0ZogIkrHRI0kjpGlvZDYIa7fjNo/EJEXBZHoSf9+wxqFCWnjKon8K9qIKP
jjK6fiuOKJL1fhumb+7AfqabSp+QzCJ8rbr4BacyaJj12nRhV6NgG+RMwDZSqtsI
qjR0Yyf7G4HD7VdO/IgIpWHsJAM/NM4z2rYPwrBkHcy7lOs9unVJxGpvV/+O2P92
QY7Dem2r+cZY7sG7ESTc9snurzkbXe2IikPS+9kVA2pB9HQI7JnjqjKwjQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPr9N2e4Hk2ZO10FBoWA2/mbdtAJMB8GA1UdIwQY
MBaAFPiZ04K+tgVtFOajvGGI5Tkvdy71MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KblRncjYyQlcwVTVxTzhZWWpsT1M5M0x2VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvZTNiNjMyLTQ1ZTktNDA5My04ZDA2
LTUwMDZmN2Q0NGM0My8xLzEtSm5UZ3I2MkJXMFU1cU84WVlqbE9TOTNMdlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhL2UzYjYzMi00NWU5LTQwOTMtOGQwNi01MDA2ZjdkNDRj
NDMvMS8xLUpuVGdyNjJCVzBVNXFPOFlZamxPUzkzTHZVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKw6S
2gL1QpmtusDQv/eSS72Z/FQg5bMOfw9qWgviCRwOYIbvzqLH1u4mykJ/AcpSiyX5
o8FgsUXBi3Dx79a1jVzIkyB/WYQpz8rntp7c7cNiQ/FPUkr83J7hxk2xkh31jRo4
xqu+i5woLfuiAzfjM6v5YUUxirApW984+e4Y7fLcI8+pbB2NQM5qkB4ld9h9Yvi6
s7sBk4CQJP0UIqjhCkV3yvpoLmgQ3gLRsTY9GOh0S0Zw3JaI0z5jAPyzx2Wpgn2v
C3VD82/fsf/UgeeYy6djW0Fjypnr8zPU6JFgPMooc+2TZs9HS8ZilJbtmCPMiueO
0JL1WnlMswyoL97wug==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:35 2026 by rpki-client