Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: nyOvL9Q/954X7bvb3smn/oEOf6l11cOB6weDhgy82fY=
Subject key identifier: 20:19:20:55:06:BF:E4:11:0F:40:E0:63:1E:A4:D7:54:BE:78:71:49
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 01A13FA70DBD25B1C28D58EE51326BCF75E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 13FE
Signing time: Thu 15 Oct 2026 13:01:14 +0000
Manifest this update: Thu 15 Oct 2026 13:01:14 +0000
Manifest next update: Fri 16 Oct 2026 13:01:14 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 9oiv5mC0H5IpzEffoQsGLSVNCJQJUysUX0KZBh7LiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:0d:bd:25:b1:c2:8d:58:ee:51:32:6b:cf:75:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Oct 15 13:01:14 2026 GMT
Not After : Oct 16 13:01:14 2026 GMT
Subject: CN=2019205506bfe4110f40e0631ea4d754be787149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:19:75:49:8d:cc:2f:6a:43:85:6f:d6:c0:
89:c7:cc:c6:d7:79:05:b5:89:48:d0:72:69:55:00:
89:c8:db:6f:d5:4b:a3:b0:81:48:f7:61:73:30:89:
ff:1b:4a:12:8d:0f:b0:ce:bb:74:ee:f3:1d:11:4c:
b8:70:df:a8:e3:c0:62:bd:01:13:5a:72:ab:0b:d0:
32:33:29:08:95:14:a3:73:f1:6e:2e:16:6f:60:bd:
4c:aa:bb:d4:83:51:e4:94:46:26:3b:f9:90:16:40:
e6:28:bb:77:8d:df:13:a5:2e:b8:02:ff:1f:7e:12:
95:25:c0:25:01:c1:d4:3a:c9:9c:f8:10:01:1e:32:
eb:80:ea:a2:03:ac:9f:b3:03:48:d1:49:8d:76:94:
e5:b6:f2:f4:36:f6:9c:ac:54:0f:cf:cb:e1:f4:b3:
d1:72:ba:cc:db:37:a1:00:11:68:c2:11:8d:6e:4d:
6f:25:f8:f8:2a:0e:68:6c:bf:a6:02:b0:df:ff:0d:
50:dc:d7:99:98:e2:38:64:3f:a6:a8:fc:19:93:80:
0e:da:d5:76:08:c1:c7:3a:44:d7:02:8c:97:c3:c3:
0b:b3:68:ef:60:2c:cf:02:60:5b:28:58:53:c1:91:
9f:8d:76:ed:ac:39:85:b5:5d:7f:2e:8f:da:16:f9:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:19:20:55:06:BF:E4:11:0F:40:E0:63:1E:A4:D7:54:BE:78:71:49
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5d:3d:fe:4b:ec:a1:12:6c:a4:10:c3:e8:9c:97:02:3c:6d:
57:ca:d6:ee:15:0f:9e:ad:98:37:3f:cf:bb:6a:36:e6:05:1e:
f6:45:7a:49:5a:9c:9c:54:9b:79:4a:e4:6c:ea:f5:4e:73:42:
30:5f:b4:7c:0c:b8:7f:dc:14:57:d5:32:d9:9d:46:2f:ce:69:
3a:88:35:0f:67:0d:a1:b4:63:0f:44:40:d2:b0:88:43:99:0e:
6d:38:ee:4c:12:91:e6:16:0d:53:5f:1a:33:a3:7a:90:6a:46:
c7:f2:5a:44:18:5a:c7:0f:37:0b:73:9f:47:34:5f:ed:bc:ec:
ec:37:5c:18:39:89:4b:dc:92:de:7c:85:26:75:54:ce:f2:0c:
6d:61:6f:8c:ec:e2:6d:8b:08:4b:00:2a:10:79:cc:2a:d4:ad:
39:ae:99:b7:92:cd:8a:8f:25:69:b4:d0:01:cb:94:c0:cd:3a:
b2:80:f1:4a:c6:bc:0c:83:e6:78:d6:24:3d:19:32:64:f2:3c:
15:b3:a1:4e:d3:5e:4f:51:22:b8:8a:aa:09:c7:38:8b:a3:8a:
36:f4:9b:94:25:4d:55:31:90:5f:e6:c9:62:81:d9:3e:de:3c:
8e:18:19:a7:4f:2e:2a:dc:a6:5c:83:ab:e5:5e:99:ed:f6:50:
21:67:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:43 2026 by rpki-client