Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: FXafpqu3zbaT6gzY5SCSjCZVv0cBM37DPTtR6N8Sps0=
Subject key identifier: 26:F2:B9:BF:3E:A4:DD:FD:4B:E5:54:F4:D8:CB:38:F5:47:BA:20:33
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019D3752DE38F44C5BEDE19C4A2B805B9230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0AA1
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: E/S3rOEmEEg+S0XujMx38fpn4RSoBXn+y3Drdxee8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:de:38:f4:4c:5b:ed:e1:9c:4a:2b:80:5b:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=26f2b9bf3ea4ddfd4be554f4d8cb38f547ba2033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:89:e4:33:06:be:67:4f:18:01:b7:8b:17:
95:4e:f5:73:62:24:0e:bb:07:df:03:d2:05:7e:ae:
1a:29:da:cd:5e:6c:cd:26:f7:75:0b:f4:e9:ba:0d:
03:0e:0e:b9:d8:bc:1e:bd:7d:9d:5b:d6:08:85:22:
d5:ca:05:99:4f:17:5b:19:b6:6f:f1:35:65:e7:46:
11:66:63:b6:4b:89:57:41:fc:fe:12:42:52:54:d0:
52:0b:ed:dc:76:bd:b4:75:67:a1:22:09:38:2b:3f:
f8:46:34:3c:48:b7:9c:1e:c8:45:75:ff:00:aa:1b:
1d:79:4b:c1:45:f4:b0:cb:1f:16:b7:ee:de:aa:bc:
ec:b9:e8:23:ff:1a:f2:96:12:8b:da:a2:f8:f1:d2:
b2:89:16:63:b3:7f:a6:dc:f8:1a:4c:a2:ac:73:53:
cf:67:d4:d2:f9:68:4f:b0:59:6d:c1:3c:d0:0d:a7:
1f:b0:2e:d9:8f:7a:51:08:ca:81:27:45:9c:e3:b5:
a6:81:ed:84:f1:59:da:11:81:9c:2b:b6:3d:84:84:
d0:e1:1e:20:6f:4d:01:57:c1:22:5f:1e:1c:0b:93:
d1:f2:3a:5f:d1:80:9b:bb:77:29:a3:72:8f:f3:ce:
de:0f:b3:79:73:e0:7c:5e:be:35:69:89:80:35:cb:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F2:B9:BF:3E:A4:DD:FD:4B:E5:54:F4:D8:CB:38:F5:47:BA:20:33
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:15:77:ad:9e:85:97:f9:8d:d2:39:61:90:ef:d4:da:03:7f:
65:d8:e6:33:93:d3:41:ef:7b:fd:39:24:b4:9a:5d:17:08:0e:
1f:cf:92:c8:35:57:a7:04:08:76:22:92:8b:62:46:ad:23:8a:
c8:bb:27:7e:4c:0b:93:da:01:d2:ca:5c:6b:45:79:a3:78:fd:
3a:e6:d0:7a:39:4c:2d:9c:ee:c9:4c:d8:34:f4:98:db:a4:5b:
fc:fd:8e:14:fc:19:b8:27:28:56:0a:cc:87:dc:9f:57:5c:74:
ae:44:27:91:42:4f:07:17:18:ba:1e:6f:57:99:22:95:d7:4c:
a2:a1:54:64:51:39:4c:88:fe:b5:7b:c5:7e:40:0d:7b:ef:a8:
65:3d:a3:4c:81:63:03:13:f7:d1:53:5a:c6:b0:3a:63:a6:36:
02:d7:e7:9b:6b:1b:46:81:c6:a2:b2:72:0e:08:5b:57:b6:3b:
a5:42:f4:91:4f:af:0b:28:cf:44:e2:3a:05:d2:54:df:a2:97:
11:5a:2d:6d:d2:78:7e:12:8e:7b:1d:db:3c:30:0e:6d:c5:95:
bc:cf:a5:17:8c:c7:c2:c5:a5:cc:e1:b0:51:0a:2a:2b:97:0d:
4a:a9:21:a1:99:fd:3c:af:9d:71:3e:7b:8f:88:27:b4:92:79:
2a:e3:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:21 2026 by rpki-client