
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: f5Ajclg+ZAShWwY5w7xDbfzijmviEdzQtjCcal7kXZw=
Subject key identifier: 78:8D:0F:DB:B9:D3:83:0D:AA:F1:35:75:B9:6E:AF:82:15:08:23:AC
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01A13CA5A8BFAC415672C17237F5167761D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0CB6
Signing time: Wed 14 Oct 2026 23:00:51 +0000
Manifest this update: Wed 14 Oct 2026 23:00:51 +0000
Manifest next update: Thu 15 Oct 2026 23:00:51 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: VF4i9GPVuMDeq+H6x4zJb+SV5cUYHB6bfh9xDuCndaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:a8:bf:ac:41:56:72:c1:72:37:f5:16:77:61:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Oct 14 23:00:51 2026 GMT
Not After : Oct 15 23:00:51 2026 GMT
Subject: CN=788d0fdbb9d3830daaf13575b96eaf82150823ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:3c:ff:26:f2:19:05:ea:28:65:40:64:b8:
2b:dc:fc:1b:c9:90:6a:1e:fc:da:b6:33:90:73:3f:
7e:7d:e4:14:a2:94:0a:68:13:c1:38:a0:71:d9:8e:
b6:cc:57:e2:b7:18:2f:aa:4a:a4:cc:f8:5f:e6:1f:
2a:d8:13:06:ee:c4:55:51:d1:df:5d:d8:d1:80:e4:
e9:d0:86:14:ab:4b:d8:d5:5a:af:e0:b0:a3:6f:c1:
82:ac:21:48:c4:af:9b:11:32:be:c0:b2:b4:de:7a:
8c:fe:f7:c2:ab:da:34:54:aa:98:6f:ae:0b:34:15:
a8:a1:78:af:e7:9d:2d:72:e0:ab:94:70:20:66:1b:
b7:42:07:27:6e:33:de:ca:87:d6:99:36:30:96:c4:
b6:a8:f7:b7:4a:a3:f7:89:05:cb:e1:df:df:4e:4d:
ab:8a:f0:4c:de:fc:6d:46:05:95:d6:59:5a:c9:c2:
85:8c:f5:40:df:4d:5d:43:e4:15:1b:9e:93:3c:36:
d7:93:9a:80:df:05:9a:73:13:be:64:af:69:6a:bb:
39:e2:8c:f3:1f:43:fa:38:a5:76:8b:ce:d2:97:b1:
a7:68:c9:4e:9d:ac:ab:fb:df:fb:9e:ab:5f:5d:18:
bc:5f:36:c9:ee:56:8d:d6:55:62:9c:76:16:48:fc:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:0F:DB:B9:D3:83:0D:AA:F1:35:75:B9:6E:AF:82:15:08:23:AC
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cf:75:03:0b:d5:77:06:af:a1:9c:02:94:4a:e6:2c:88:70:
4f:09:02:4b:28:9f:5e:1e:ad:26:74:60:52:de:c3:74:98:0e:
c6:c7:64:98:15:af:eb:d7:c5:dd:bb:c8:ae:a3:9f:76:17:36:
5a:1c:75:36:21:11:9a:d0:c7:af:7d:83:20:1b:6b:f2:bf:15:
bb:52:dd:70:30:64:a7:32:a5:43:32:38:cf:d8:83:9d:e0:6c:
53:31:99:46:c6:96:47:b9:80:37:6e:d6:32:5e:00:33:f9:fb:
b6:44:3c:24:a3:74:ef:2b:3b:f5:6f:59:db:cc:48:07:3b:bc:
a8:6a:88:91:cd:23:e4:79:6e:4f:50:d5:98:8a:89:3e:d7:8b:
b2:bf:b4:7e:d5:3e:a6:5b:9e:a9:e4:a2:6f:89:f8:a7:68:94:
19:e2:8e:82:9e:91:0c:58:5a:c0:62:a4:e1:6f:af:bc:5b:3c:
26:fc:0e:63:5c:a2:b5:92:7c:dc:2a:81:37:20:e8:d4:4e:e6:
96:c0:4a:cc:ab:5b:7a:ae:4d:46:c3:88:2b:6d:89:c1:15:25:
42:ce:d9:ed:34:40:75:f2:63:a4:cb:08:6f:c2:54:0f:b6:3a:
1b:7f:31:a1:18:cf:c2:93:58:d8:07:7a:39:6c:8c:6f:8d:76:
43:6e:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:22 2026 by rpki-client