Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: JUWoDvLYC9V2PL8Gg2DNCMYmCqqtZ3V5j0jPY9f1paM=
Subject key identifier: 43:A4:93:41:1F:A9:BB:5F:26:5B:DE:1F:BD:28:47:9D:3F:83:12:6A
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01A001DCC07B10A8CAE15A2B855AB3698C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0C13
Signing time: Fri 14 Aug 2026 20:00:39 +0000
Manifest this update: Fri 14 Aug 2026 20:00:39 +0000
Manifest next update: Sat 15 Aug 2026 20:00:39 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: Y2mrYSGom9LI0lbZyHkgquqw2XPwrlE6o6zM+THF9AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:c0:7b:10:a8:ca:e1:5a:2b:85:5a:b3:69:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Aug 14 20:00:39 2026 GMT
Not After : Aug 15 20:00:39 2026 GMT
Subject: CN=43a493411fa9bb5f265bde1fbd28479d3f83126a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:96:23:ee:ae:3e:f3:7a:37:56:c3:40:35:
62:93:a0:dd:e1:a1:31:c7:2e:8a:c9:44:00:e8:f6:
f3:56:df:b5:7b:8e:3e:a1:7d:0c:5d:71:f7:c9:91:
6e:cd:61:0b:77:c3:f4:05:dd:7b:05:67:7e:f9:a8:
04:d3:2f:3a:98:ea:3b:b3:af:d1:5d:e7:07:cb:d3:
0c:04:1d:9d:31:bc:31:56:52:fc:63:4e:5a:59:b5:
4f:63:77:76:59:3b:79:e0:f5:9a:38:4d:87:28:b4:
7d:bf:50:10:93:a8:a5:89:66:e7:8c:89:1c:18:df:
2d:2b:3d:d1:95:1f:6b:28:91:29:83:88:07:25:f5:
7b:7a:75:4d:6a:e4:71:83:d1:fc:5a:86:cf:8b:83:
87:17:cf:74:ec:1c:aa:b5:af:88:f4:07:3d:25:77:
5b:43:98:dd:b5:62:89:51:77:da:d0:6b:cc:84:2e:
75:14:38:e8:e6:ee:38:7c:26:c8:f7:a4:3c:04:b0:
8a:17:64:77:c4:18:26:33:43:f6:88:a7:97:16:89:
7c:eb:54:02:bf:14:d1:16:7e:e0:82:bf:9f:4b:5f:
74:b1:1c:24:99:f7:3a:3a:f1:29:45:b2:45:1b:04:
42:23:33:9b:f6:2c:4e:7e:bb:e3:01:74:e1:8d:7d:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:93:41:1F:A9:BB:5F:26:5B:DE:1F:BD:28:47:9D:3F:83:12:6A
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:2d:a8:8b:47:38:9e:dd:af:ff:26:25:35:cc:9a:ce:6e:
ea:4f:87:72:30:db:c2:c6:90:38:6d:63:db:8d:ea:33:21:72:
e2:51:67:df:6e:1e:8a:f9:b5:dd:15:07:ac:64:01:ef:d8:fe:
d0:e8:c9:09:4a:b8:b2:1a:44:c2:f3:53:7e:c8:61:0e:b8:a0:
79:03:fb:5a:01:24:dc:9f:e1:99:98:8e:65:b4:39:6f:2f:36:
b3:d3:1d:3f:e0:98:f7:86:76:aa:a6:94:03:ee:26:d8:fd:5b:
b9:e6:f9:8b:6f:0a:41:fc:6b:bd:b7:ba:23:ed:92:60:e9:62:
67:a5:42:08:ca:fa:8c:97:7e:4d:49:6f:15:66:8b:62:d2:5d:
8d:8b:63:b2:9d:51:b8:82:5f:1f:7c:67:b7:4e:5c:50:65:4c:
47:61:ed:8a:5b:35:ca:79:34:05:ee:f2:b0:ba:d1:b9:00:0e:
d1:d0:bd:fa:e4:c6:26:11:2f:60:40:bc:4e:63:66:fa:29:5a:
a5:e9:8d:3c:d4:95:cc:dd:e2:5c:10:ed:90:89:c4:16:1e:e5:
fb:d5:0e:39:4d:8d:11:f0:f3:0f:a9:78:24:0e:09:ee:fe:a3:
49:f6:9c:bc:13:f8:38:01:68:ca:c0:0a:7a:b9:22:e8:cb:9c:
c2:2d:c4:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaAB3MB7EKjK4VorhVqzaYxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjYwODE0MjAwMDM5WhcNMjYwODE1MjAwMDM5WjAzMTEwLwYDVQQD
Eyg0M2E0OTM0MTFmYTliYjVmMjY1YmRlMWZiZDI4NDc5ZDNmODMxMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3+WI+6uPvN6N1bDQDVik6Dd4aEx
xy6KyUQA6PbzVt+1e44+oX0MXXH3yZFuzWELd8P0Bd17BWd++agE0y86mOo7s6/R
XecHy9MMBB2dMbwxVlL8Y05aWbVPY3d2WTt54PWaOE2HKLR9v1AQk6iliWbnjIkc
GN8tKz3RlR9rKJEpg4gHJfV7enVNauRxg9H8WobPi4OHF8907Byqta+I9Ac9JXdb
Q5jdtWKJUXfa0GvMhC51FDjo5u44fCbI96Q8BLCKF2R3xBgmM0P2iKeXFol861QC
vxTRFn7ggr+fS190sRwkmfc6OvEpRbJFGwRCIzOb9ixOfrvjAXThjX1BOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEOkk0EfqbtfJlveH70oR50/gxJqMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU0t
qItHOJ7dr/8mJTXMms5u6k+HcjDbwsaQOG1j243qMyFy4lFn324eivm13RUHrGQB
79j+0OjJCUq4shpEwvNTfshhDrigeQP7WgEk3J/hmZiOZbQ5by82s9MdP+CY94Z2
qqaUA+4m2P1bueb5i28KQfxrvbe6I+2SYOliZ6VCCMr6jJd+TUlvFWaLYtJdjYtj
sp1RuIJfH3xnt05cUGVMR2Htils1ynk0Be7ysLrRuQAO0dC9+uTGJhEvYEC8TmNm
+ilapemNPNSVzN3iXBDtkInEFh7l+9UOOU2NEfDzD6l4JA4J7v6jSfacvBP4OAFo
ysAKerki6Mucwi3EdQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:07 2026 by rpki-client