Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: EbAqLki1GJIpNaPYYY7+b1zcIBEm0ZGvrqgSJe72ZWM=
Subject key identifier: A5:58:2F:E1:94:56:02:D6:FA:56:AA:5A:40:2F:FD:9C:80:80:5F:0B
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019E2F96E06D0A26AEC4E7794FBE1955814A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 1268
Signing time: Sat 16 May 2026 07:01:17 +0000
Manifest this update: Sat 16 May 2026 07:01:17 +0000
Manifest next update: Sun 17 May 2026 07:01:17 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 9FbYYnl09A/kTv0G5FJZGkzpowUxvMy2wThtdG2wVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:e0:6d:0a:26:ae:c4:e7:79:4f:be:19:55:81:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: May 16 07:01:17 2026 GMT
Not After : May 17 07:01:17 2026 GMT
Subject: CN=a5582fe1945602d6fa56aa5a402ffd9c80805f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:40:90:a4:77:99:c4:cd:6a:67:ba:ba:c8:
ee:fb:ba:e8:7b:f9:5b:4f:0d:cc:d4:3e:a1:a7:03:
af:82:c8:b0:a1:b3:c2:72:f0:ce:b8:12:6b:51:90:
a1:63:03:b7:00:ad:02:46:90:83:90:76:ee:15:8a:
7d:c0:75:40:af:19:9f:57:35:49:44:fd:67:29:81:
95:e9:c1:4b:6c:8a:18:b9:73:67:94:b4:bd:64:0e:
64:94:46:6a:77:e2:0d:19:50:8f:b1:68:72:2a:b9:
82:23:76:74:b0:f7:1a:01:8d:0b:01:95:03:df:6f:
4a:c8:43:93:d7:73:e6:e1:66:58:67:4b:b5:62:03:
2e:cb:19:80:28:e1:95:66:b1:8a:61:8b:54:d5:58:
8d:97:7b:9c:6d:f0:9c:7c:98:fb:3e:46:37:47:30:
bf:59:8d:14:7c:ea:92:a3:ba:17:b1:b0:e8:a5:c4:
bf:3c:c9:58:2d:3a:00:09:6a:27:b8:2a:df:e1:80:
74:ab:3a:39:e6:24:14:6e:5d:bd:1a:1f:74:9e:12:
0b:b4:21:f3:c2:3e:ba:c2:a1:17:9b:2c:2e:82:a4:
66:d9:d4:c5:2b:36:2c:73:9e:58:2f:98:56:c2:2d:
2e:4f:fd:43:d7:9a:45:b4:58:d6:0e:e0:31:7a:66:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:2F:E1:94:56:02:D6:FA:56:AA:5A:40:2F:FD:9C:80:80:5F:0B
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cc:ad:c5:05:29:a2:41:5d:8b:65:76:47:0b:00:e9:47:8c:
0e:31:74:18:cb:c1:4a:a4:1a:66:35:73:2e:e2:9c:2a:d5:77:
47:f5:33:91:3c:e5:5b:c0:2b:97:72:43:b5:e6:96:fb:68:c6:
39:be:64:2f:71:30:16:a6:e8:84:22:4d:ba:6a:dc:a1:f9:82:
4e:40:59:2c:cd:dd:4d:4d:bd:c2:85:f3:8c:60:42:34:90:dd:
f6:86:23:4c:db:cd:47:62:0c:84:9b:63:d2:a5:0d:f1:1a:f9:
af:88:62:38:6d:f3:63:e5:0d:e9:51:13:4e:74:c4:4f:a6:45:
7f:72:a7:a6:3b:75:30:1a:2d:e7:07:0e:6c:4a:20:ac:71:76:
b6:78:f4:e3:b4:79:fb:90:85:a5:fa:bc:bd:f7:72:1f:55:71:
37:4e:3b:5e:ab:d5:45:d9:a9:b5:79:4b:69:a0:86:5b:3f:09:
a5:02:9a:be:9b:e3:31:19:77:3f:1e:38:2f:50:db:e7:a6:a9:
9e:a1:90:be:8d:51:a4:91:b1:11:91:2d:b1:00:2f:8d:60:48:
47:09:ba:c3:6d:7b:3f:9f:0a:f4:bc:dc:48:3e:69:b4:0c:34:
2d:b1:08:28:b0:97:62:02:af:14:20:6f:e4:08:da:4c:ca:68:
75:71:99:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:23 2026 by rpki-client