Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: tTUDYm7lstowXdAAnk9xGk1a28KXCFAajI9ZfS8+rfk=
Subject key identifier: F7:BF:8D:DD:A2:D9:17:56:DA:07:0C:1A:D5:88:EA:EB:6F:07:22:DD
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019D38665E129DB781779DDB7386FC5086AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 11E8
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: ivJlLCQPIazV6fZdyA+wOWRDAeVTDj7IVp21F5wJ2rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5e:12:9d:b7:81:77:9d:db:73:86:fc:50:86:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=f7bf8ddda2d91756da070c1ad588eaeb6f0722dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:71:64:d5:7b:d0:c9:e5:bb:82:f0:f0:20:
79:72:e4:09:23:a0:61:34:a3:a9:97:e0:9b:ea:0c:
a2:4c:70:86:e0:20:33:69:93:91:f8:cf:a0:0b:2d:
0c:13:fe:26:f3:a1:3c:f2:88:32:3f:21:18:61:17:
b3:a0:5c:ee:ca:d2:21:bf:80:6e:8a:b0:aa:97:3b:
7f:e3:d9:10:23:09:08:b1:7b:ee:65:d8:da:f5:30:
f7:9b:12:c3:a0:6d:cb:49:6a:d6:de:78:ae:39:3f:
8d:a6:19:7a:bf:b0:c1:65:e0:14:e7:05:98:06:64:
15:64:87:e1:43:41:aa:df:f1:84:8a:37:9b:a7:56:
21:f5:c9:a7:ab:9d:19:82:0f:c3:43:18:b2:74:d2:
da:2e:85:9c:90:aa:29:d4:d5:57:94:24:29:30:56:
99:6d:c3:b5:d0:86:50:af:2e:81:0b:fc:3e:38:0e:
d7:73:16:ec:17:ec:85:fd:da:53:d2:57:c4:63:55:
61:ab:77:0a:29:26:01:10:01:c8:3c:fa:b3:e1:44:
89:47:e9:d6:f3:b5:d3:6a:35:08:3e:aa:d5:97:d3:
1c:07:82:34:be:c3:51:1a:c7:4b:f7:f2:03:e2:00:
17:a8:40:92:12:9a:04:8e:fd:38:60:5d:e8:75:0a:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:8D:DD:A2:D9:17:56:DA:07:0C:1A:D5:88:EA:EB:6F:07:22:DD
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d1:ac:71:ca:d7:1c:ff:e0:a4:8e:76:ca:e4:32:42:27:90:
19:a1:90:eb:4d:d3:dd:b3:75:7c:fa:7a:24:36:d7:00:17:f1:
68:72:88:d4:01:62:41:d0:fc:38:4d:5b:06:30:13:b4:b3:22:
c8:87:7a:7d:2d:4e:b5:e5:53:fa:db:ac:4b:22:aa:3d:2b:a9:
4d:3a:ba:12:59:88:38:83:3c:16:b0:a8:9c:71:ca:ce:f3:55:
9d:d1:16:8a:94:39:6e:28:b0:ba:2c:8b:08:13:0a:53:3e:78:
d4:93:72:a0:22:00:41:ea:10:d0:51:cc:48:41:e9:a2:52:92:
c9:33:d7:6b:95:23:60:cc:2c:dc:4b:7c:ff:10:a1:63:16:f5:
f5:9d:e6:73:87:ed:48:82:00:ed:c1:a3:83:bf:f8:f4:71:3f:
9c:21:77:33:81:75:24:cb:ca:29:a5:d9:ed:84:96:39:c6:7c:
da:2c:7c:90:73:19:f3:8e:db:df:a5:7a:8d:bd:8a:bf:3c:97:
95:52:8d:c6:a8:03:0f:ad:db:13:46:c9:a0:c2:82:d1:04:64:
4b:40:c3:74:29:8b:37:35:95:f3:39:a5:80:53:23:d3:bf:c2:
d3:c6:9d:48:0f:bb:f7:7e:52:69:1e:09:46:e9:2b:fc:84:b3:
ef:29:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:51 2026 by rpki-client