Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: gizuiFA6qTgrQDisoCUksnaXHeEJOhJVogSSOuryZAk=
Subject key identifier: A5:59:B1:2C:AF:E9:AA:C3:2A:0C:64:74:03:CD:42:CE:13:E0:A6:74
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 01A0010181FFB3D244FE2F766C304A5FD239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 1359
Signing time: Fri 14 Aug 2026 16:01:11 +0000
Manifest this update: Fri 14 Aug 2026 16:01:11 +0000
Manifest next update: Sat 15 Aug 2026 16:01:11 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: GXMLzhYf6VQgIiqXcTcdweBWo2MJgrUrAXRRYP1IZZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:81:ff:b3:d2:44:fe:2f:76:6c:30:4a:5f:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Aug 14 16:01:11 2026 GMT
Not After : Aug 15 16:01:11 2026 GMT
Subject: CN=a559b12cafe9aac32a0c647403cd42ce13e0a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:d9:b9:28:d2:82:b5:97:41:1d:4b:94:34:
da:7f:54:f1:b7:f3:14:5d:ba:48:90:4b:68:e9:7a:
aa:65:41:6f:18:3d:26:ae:6f:2e:b3:ad:dd:1a:73:
c5:bb:37:b5:ef:93:20:84:81:98:08:63:13:72:17:
42:b2:36:3a:67:44:95:71:ed:2f:39:6e:56:6d:5a:
b3:dd:b7:9c:b4:60:fc:7b:54:27:2b:f9:3b:63:65:
69:4f:bb:a7:c3:ff:6f:fc:45:b3:19:50:aa:90:a6:
ef:27:90:04:f0:ef:65:28:c4:64:1e:8a:98:b0:e9:
d0:24:99:8d:5f:8d:98:f2:7e:ee:d7:a8:41:9b:3e:
84:6e:93:9c:68:19:ca:14:18:b1:25:7e:37:9a:a9:
d1:8f:01:88:1f:da:14:72:fd:85:39:0e:32:9d:b0:
42:35:b5:17:f4:83:97:c1:58:74:d2:19:8f:58:58:
a6:fb:cd:f8:33:1d:ce:89:c3:d4:db:b5:40:ea:29:
d3:59:0a:41:69:ea:a2:ee:78:8f:dd:b7:ab:c0:89:
00:a5:92:4e:ab:59:28:fc:bb:73:6e:f3:88:3b:18:
1f:95:3c:53:24:41:69:ba:65:89:52:fc:6c:cf:3a:
f2:94:fe:c7:ca:4c:e7:1d:c4:c6:e0:b0:c3:cf:5f:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:B1:2C:AF:E9:AA:C3:2A:0C:64:74:03:CD:42:CE:13:E0:A6:74
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:e6:90:db:eb:f7:4f:58:e8:a0:ba:2b:b4:a3:be:fe:ad:
c4:93:e2:86:69:03:35:b3:0c:94:ad:de:1d:0f:01:95:89:e7:
fa:0a:d0:68:90:83:6d:2e:be:70:93:f7:32:8e:17:85:56:cf:
6b:73:b3:18:ea:ca:11:67:90:c9:58:38:79:15:dc:7b:9c:6f:
03:ac:55:f1:55:c6:bb:78:de:17:4f:73:56:4f:37:8a:97:44:
67:61:d2:8e:25:5b:a8:7c:ff:c1:1a:38:be:f1:5d:c7:18:8d:
6b:c5:4a:52:aa:c2:5a:56:1b:b8:54:09:5f:58:21:5c:26:21:
38:2b:f3:de:c8:7c:80:50:4d:98:14:16:48:ed:c9:da:8e:74:
e9:fd:a0:75:9e:c9:30:f5:ac:79:ce:5e:23:df:25:bc:f9:8f:
10:70:5c:77:f2:3b:bd:fb:87:25:99:a1:02:69:67:95:70:00:
8d:75:08:d3:ec:9b:a8:1d:fa:c3:f5:7c:b0:55:df:fa:f7:c5:
2d:d0:98:a6:ab:ac:0d:62:85:ae:a5:4c:cd:41:a8:82:96:77:
0e:a7:a0:ab:ad:f5:14:8f:56:66:01:94:89:40:56:f6:27:87:
e6:92:67:f4:33:19:00:3e:48:a3:17:42:97:35:d4:61:3e:0d:
8f:7d:de:55
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaABAYH/s9JE/i92bDBKX9I5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjYwODE0MTYwMTExWhcNMjYwODE1MTYwMTExWjAzMTEwLwYDVQQD
EyhhNTU5YjEyY2FmZTlhYWMzMmEwYzY0NzQwM2NkNDJjZTEzZTBhNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmfZuSjSgrWXQR1LlDTaf1Txt/MU
XbpIkEto6XqqZUFvGD0mrm8us63dGnPFuze175MghIGYCGMTchdCsjY6Z0SVce0v
OW5WbVqz3bectGD8e1QnK/k7Y2VpT7unw/9v/EWzGVCqkKbvJ5AE8O9lKMRkHoqY
sOnQJJmNX42Y8n7u16hBmz6EbpOcaBnKFBixJX43mqnRjwGIH9oUcv2FOQ4ynbBC
NbUX9IOXwVh00hmPWFim+834Mx3OicPU27VA6inTWQpBaeqi7niP3berwIkApZJO
q1ko/LtzbvOIOxgflTxTJEFpumWJUvxszzrylP7HykznHcTG4LDDz1+N4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKVZsSyv6arDKgxkdAPNQs4T4KZ0MB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkXm
kNvr909Y6KC6K7Sjvv6txJPihmkDNbMMlK3eHQ8BlYnn+grQaJCDbS6+cJP3Mo4X
hVbPa3OzGOrKEWeQyVg4eRXce5xvA6xV8VXGu3jeF09zVk83ipdEZ2HSjiVbqHz/
wRo4vvFdxxiNa8VKUqrCWlYbuFQJX1ghXCYhOCvz3sh8gFBNmBQWSO3J2o506f2g
dZ7JMPWsec5eI98lvPmPEHBcd/I7vfuHJZmhAmlnlXAAjXUI0+ybqB36w/V8sFXf
+vfFLdCYpqusDWKFrqVMzUGogpZ3Dqegq631FI9WZgGUiUBW9ieH5pJn9DMZAD5I
oxdClzXUYT4Nj33eVQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:08 2026 by rpki-client