Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: pCaz7ASptYsvEuTQReHB+mjGNxIySPHGQSiKjGmdPU8=
Subject key identifier: C2:43:96:9A:F4:89:7C:88:0E:FB:0C:EC:EB:B1:81:93:BD:A6:E7:EB
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 01A16E0060CE601DAA108A61F05E8B76C241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 1ABA
Signing time: Sat 24 Oct 2026 13:01:20 +0000
Manifest this update: Sat 24 Oct 2026 13:01:20 +0000
Manifest next update: Sun 25 Oct 2026 13:01:20 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: V3GN97IZnSRZzsgeVGxoGAnErXGQtaGEy5uFg0lreyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:00:60:ce:60:1d:aa:10:8a:61:f0:5e:8b:76:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Oct 24 13:01:20 2026 GMT
Not After : Oct 25 13:01:20 2026 GMT
Subject: CN=c243969af4897c880efb0cecebb18193bda6e7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8d:04:76:0f:5d:66:67:2d:9a:96:00:37:b8:
12:2e:79:9a:68:c7:fd:12:4d:ac:59:30:c2:dc:83:
d9:27:ec:eb:36:82:11:8a:03:68:a2:3f:0e:cb:53:
dc:b2:99:58:de:ea:1d:23:33:f7:a5:91:74:a2:56:
ac:fd:69:44:f1:c8:28:1e:2c:20:66:d9:78:41:8e:
52:35:7a:58:dd:b4:47:4a:c4:30:cf:7f:5f:5c:da:
71:9e:48:20:e9:a3:88:0d:d8:c4:75:48:6e:38:6b:
c7:33:3f:a0:a3:73:86:eb:77:48:bb:f0:1a:65:37:
de:b0:ad:aa:e2:ce:db:49:e3:9f:96:2e:db:36:09:
c0:dc:c3:12:f8:51:65:a9:e6:12:28:6d:5e:c0:ee:
49:4b:39:b9:5a:dc:43:46:f4:60:eb:f8:12:a9:0f:
47:fd:60:2b:a8:ab:cb:48:37:2d:59:a8:bb:55:ba:
f9:c3:46:73:2a:36:8f:8a:ae:ef:be:61:5b:eb:02:
8a:e3:9d:5c:c2:2a:e6:a8:2a:cd:f9:8f:d2:ce:d6:
5b:13:c5:10:8c:60:56:08:ee:62:24:fd:f8:1e:67:
ad:c7:89:9c:c5:4a:b1:50:35:19:97:b3:c7:1f:cb:
a6:ea:8e:eb:66:3b:22:08:de:52:aa:a4:2a:51:e7:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:96:9A:F4:89:7C:88:0E:FB:0C:EC:EB:B1:81:93:BD:A6:E7:EB
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:2a:a6:87:bc:52:35:c7:8a:fc:89:af:10:c0:0f:17:bf:
30:69:f1:7a:03:34:2c:c3:e0:ff:aa:3d:17:df:4b:f3:16:36:
ed:06:14:df:00:02:1e:44:48:6b:3e:88:84:98:5a:f7:89:3d:
b5:87:3e:82:c9:f6:14:90:3e:19:52:d6:c1:9b:62:08:29:aa:
0e:ad:cb:e7:b8:a6:ca:3b:12:9a:89:ab:06:5f:c2:25:b1:d3:
62:bd:42:e8:f1:8e:44:93:a2:7a:f6:fe:5e:22:4b:4d:d0:be:
cd:19:58:e2:ab:82:1d:63:c0:cc:5a:db:67:6e:b6:b5:78:42:
a2:73:18:4a:cc:86:04:c7:da:2b:44:c1:d6:e0:06:c2:68:b6:
4f:3e:ed:4c:e5:63:91:c8:9d:24:e6:0b:9f:58:5b:b9:b8:c9:
41:aa:67:d1:6e:3d:b2:8d:a1:8b:55:f8:76:0e:2d:f3:2d:3d:
67:46:f1:db:da:76:36:6d:67:82:33:e8:fe:c7:51:d4:01:a4:
b3:28:ab:6b:93:01:7c:96:a3:28:fc:ca:d9:7a:4a:b1:7a:e3:
06:00:49:09:a8:ba:e6:9d:75:ef:e1:23:e2:a7:4f:7f:48:0b:
6a:63:7b:2c:51:9d:e4:67:9a:57:3b:69:d3:49:e1:eb:74:f6:
c9:d0:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:31:47 2026 by rpki-client