Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: cxqIwuabClltv7LErbzp0RiMYn+6OobSrKANFY4Tftk=
Subject key identifier: D8:26:B1:57:0D:CE:70:A9:14:FA:6B:D2:53:0E:EB:A5:F8:69:5C:FB
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 01A00101E490676BAFA3DF2399C09AD40524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:01:36 +0000
Manifest this update: Fri 14 Aug 2026 16:01:36 +0000
Manifest next update: Sat 15 Aug 2026 16:01:36 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: dMR8wHy67Sj4xshP1QGNheTS9BC7Zugp0p1jeMiRwjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e4:90:67:6b:af:a3:df:23:99:c0:9a:d4:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Aug 14 16:01:36 2026 GMT
Not After : Aug 15 16:01:36 2026 GMT
Subject: CN=d826b1570dce70a914fa6bd2530eeba5f8695cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:95:d0:df:10:08:d7:c0:0a:9e:ce:bb:32:
11:e8:be:e1:1e:69:1e:8b:a6:eb:b2:20:77:08:b5:
cb:50:48:13:0a:4b:11:fe:2a:f3:bc:e5:8b:e5:74:
14:8c:96:83:42:10:0d:3d:31:dc:12:f8:02:ec:a0:
26:ca:73:b5:ba:c6:9b:3c:73:f0:64:d9:5c:57:6f:
98:a0:62:3d:d8:9f:17:5f:d7:85:65:a7:a2:ba:4c:
f7:08:97:68:f8:36:24:21:e3:ea:4e:bc:88:01:4c:
0f:c2:ab:a9:bc:c4:03:8e:bb:71:56:83:3b:da:59:
b8:d1:ad:e0:58:38:60:08:26:cb:f4:30:bc:df:8f:
eb:34:57:a2:6b:d3:0b:42:a5:e2:f2:64:4a:f6:68:
e9:7c:d5:bf:cb:ca:6f:ef:31:b6:2e:c1:19:73:b4:
20:f4:a6:1a:85:59:0c:89:53:83:60:05:4d:e0:7b:
fc:24:ae:f5:f0:e1:38:6f:09:f6:1c:86:73:10:34:
d8:67:0e:ee:10:7c:c2:ca:ca:72:06:93:de:8e:95:
c2:31:e0:9d:5c:51:98:36:f8:3f:30:84:59:83:5a:
01:df:9f:71:1d:d7:1f:ad:68:fd:b5:19:85:b1:1f:
18:59:c8:3c:a0:6e:2b:0a:e3:c1:ae:02:67:c0:66:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:B1:57:0D:CE:70:A9:14:FA:6B:D2:53:0E:EB:A5:F8:69:5C:FB
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:69:7c:37:63:82:b4:e0:9a:da:1d:fe:ff:cf:73:08:b8:
34:a5:fe:6b:fd:8a:8e:3f:b3:97:f3:7e:1f:de:3a:38:5e:a9:
a6:f7:95:c2:9c:d6:88:1e:9b:4f:82:d7:5f:5a:95:cf:d5:43:
66:90:7b:38:06:2a:37:e0:0b:79:78:40:e7:84:41:15:ae:c0:
cc:74:65:72:05:b6:bc:32:7d:b0:53:92:99:0d:8c:6a:7a:b6:
ce:e6:c6:6f:14:e8:42:02:1b:6f:9c:35:85:d7:07:6a:0e:a8:
bb:0e:47:19:ab:0b:45:72:7e:96:e8:04:ef:82:49:b1:d5:7a:
df:a5:18:52:85:87:fe:7c:b4:9b:ac:07:96:91:2e:22:81:d6:
f7:09:78:e5:42:8c:1e:85:05:4c:1f:82:f7:db:a3:c6:83:c9:
60:b9:cd:6a:9f:ce:3a:7e:56:65:01:67:d4:da:bf:04:7f:d8:
35:6a:f5:e6:63:a0:d8:85:d6:b7:b0:c6:04:ce:9b:d3:53:39:
90:8a:ae:8c:d3:44:75:84:9c:91:c8:88:13:cd:d0:42:17:c5:
a3:43:ca:69:1b:45:f4:cb:51:f4:a8:8a:2d:e2:3d:76:ba:ef:
90:3b:2b:10:4c:44:32:5d:a3:6c:d3:8b:d5:af:92:90:7b:69:
02:de:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:29 2026 by rpki-client