Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: nCjCzE03neXLFTtOy+G7TFBQHD/WfevRj+39rX3J57g=
Subject key identifier: 9F:55:A6:39:03:B7:CF:4A:C0:76:9F:13:28:97:E4:F7:01:37:DE:62
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019F175526D88F9B157869F2EA9586A8EFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 12E0
Signing time: Tue 30 Jun 2026 07:01:24 +0000
Manifest this update: Tue 30 Jun 2026 07:01:24 +0000
Manifest next update: Wed 01 Jul 2026 07:01:24 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: Vc3G6cNDxzKTjSIgU2h0rGWPPMxPlz4eke4t5Q/oRUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:26:d8:8f:9b:15:78:69:f2:ea:95:86:a8:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jun 30 07:01:24 2026 GMT
Not After : Jul 1 07:01:24 2026 GMT
Subject: CN=9f55a63903b7cf4ac0769f132897e4f70137de62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:6d:a7:72:0f:a7:9a:6a:58:81:67:4e:e8:
fa:67:12:d7:1d:a0:3f:d5:64:e0:48:23:5d:1b:48:
a7:5a:02:3f:62:2c:3f:14:47:bb:ad:d9:d7:67:1e:
51:75:27:1d:b3:26:bf:22:81:b3:8f:d2:ba:8d:93:
1a:4c:1a:25:8f:ca:8c:b6:6a:e5:ae:3f:d5:28:ac:
bf:93:14:7b:26:76:be:20:39:7d:86:69:ba:c3:90:
d3:bc:c4:fd:ce:7c:51:cc:4c:6a:49:83:08:43:a5:
d1:39:80:01:d2:14:b0:90:ac:db:d3:83:8b:df:9a:
1c:20:74:dc:cf:89:51:c6:a4:71:0f:b0:84:1a:59:
72:03:4b:69:63:d5:4a:e0:7e:5e:d3:b3:6c:90:54:
ac:3a:a6:2b:17:ea:62:58:31:66:e0:ae:e1:36:72:
85:f9:77:6b:c4:42:d8:7c:ae:4c:bd:a9:81:ae:1b:
36:e1:af:00:3f:7a:f9:89:8a:5f:d6:f6:c9:9a:58:
d6:cf:d7:7e:f9:99:8f:ef:a8:cd:85:f2:68:0c:00:
79:e0:12:9b:73:cf:5a:e2:ad:cf:5b:9e:27:c5:ed:
10:ac:bf:f3:33:c5:4d:ff:25:2b:31:47:53:eb:74:
1a:c5:ed:94:4f:d8:4e:f2:be:66:45:63:ac:04:d9:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:A6:39:03:B7:CF:4A:C0:76:9F:13:28:97:E4:F7:01:37:DE:62
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a2:90:af:f9:d0:bf:b5:b9:f7:37:f2:7d:4c:0a:ff:63:bb:
ed:03:83:ed:2f:d1:c5:24:f7:a6:83:bf:d7:53:74:82:75:5b:
17:70:f3:ba:f1:7a:c6:b8:09:c8:98:f4:f0:70:3a:cf:93:9a:
28:dd:f5:e9:54:25:bf:18:f8:6d:cf:0e:fd:84:14:0f:f8:5c:
f2:f1:db:bc:8e:c8:20:38:26:b2:15:19:14:27:60:63:24:80:
e1:ce:ba:d4:f4:ec:54:bb:3c:94:90:71:95:27:a5:55:86:f0:
0a:15:f7:d0:8d:1c:b8:64:85:e5:74:01:ab:df:45:19:7f:58:
7a:0f:56:32:ba:ae:7e:b6:03:8f:b3:6c:64:13:ee:c7:ff:77:
37:2b:38:48:33:5d:a4:10:10:8e:a2:75:fd:d9:e9:29:8e:2b:
55:2b:82:be:05:e5:e8:a2:fd:40:c6:9f:0b:f4:e9:18:17:86:
c2:57:53:9b:0d:0e:ef:2a:1c:b8:72:39:36:09:68:8c:a3:56:
c7:57:05:2e:f0:12:da:4d:0d:cf:11:e0:59:d2:aa:46:d2:ec:
f5:fd:58:42:03:6d:6d:34:ae:a1:5a:c5:db:6b:af:ac:d9:b5:
26:f2:c0:d0:e3:78:d1:1e:04:75:a2:86:c1:b4:5f:0f:d5:9c:
00:14:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:08 2026 by rpki-client