Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: 5GxCZDpar4W7urwn4durhcLRGKTwkscR+dRabRQGGKE=
Subject key identifier: 69:7A:F4:6B:2C:AE:2C:9E:16:FA:50:35:9E:1D:FE:32:05:D8:44:BA
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019E307250B7D9DA610A5BB264021B86BAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0B22
Signing time: Sat 16 May 2026 11:00:58 +0000
Manifest this update: Sat 16 May 2026 11:00:58 +0000
Manifest next update: Sun 17 May 2026 11:00:58 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: jLwx7NYfX7gNiEHvReAzI3pSZaEfvaX69Q65H2rVBDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:50:b7:d9:da:61:0a:5b:b2:64:02:1b:86:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: May 16 11:00:58 2026 GMT
Not After : May 17 11:00:58 2026 GMT
Subject: CN=697af46b2cae2c9e16fa50359e1dfe3205d844ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:24:73:a3:0d:49:52:9e:7a:d4:6d:8a:0b:
03:05:cf:91:b4:2e:bf:99:8a:a2:a5:2b:93:f2:53:
7c:8c:44:73:aa:05:c2:ca:f5:1e:93:db:6c:39:ec:
21:89:87:ab:27:7a:bc:29:a0:5e:95:b9:f8:e0:90:
cf:0b:4a:4a:52:d7:e3:9a:2e:ba:5e:d8:a8:e1:bf:
b1:c5:92:5d:6e:bb:b1:52:53:73:df:df:41:05:38:
ed:a9:9c:38:f7:8a:43:8f:2f:e6:b1:f7:c8:44:a5:
85:2f:30:71:65:b8:ee:b4:84:5b:3e:92:72:f4:f1:
33:f5:a3:2b:46:04:2b:c3:17:f1:d9:bb:e3:3a:6f:
29:82:ec:1a:83:db:30:94:85:65:e4:62:6e:83:50:
84:b0:df:d1:6d:17:1d:c7:aa:b3:bc:b1:67:9f:bc:
23:e6:f1:5d:7c:1a:c6:df:b2:12:e6:f9:aa:f7:ea:
61:51:28:db:ea:53:be:7c:42:67:2f:cc:49:64:ba:
9a:70:92:57:c9:1e:bd:dd:0b:d8:fa:4d:8f:36:7d:
1e:c5:7a:dd:47:6b:26:e2:c8:99:d3:69:63:39:a1:
50:34:75:2a:f4:08:30:b2:8d:2d:ea:33:3d:1c:40:
92:22:fa:6c:81:cc:02:2a:95:10:71:c2:f7:85:f7:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:F4:6B:2C:AE:2C:9E:16:FA:50:35:9E:1D:FE:32:05:D8:44:BA
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:14:35:8c:1e:97:ab:0b:d4:55:81:ae:a7:ee:40:45:9f:
7b:ba:14:6d:f6:38:f1:1f:05:dc:2c:cb:fd:9b:d5:13:ad:4b:
13:a2:9b:2f:ed:a7:81:60:cf:da:bf:68:0a:24:33:24:8d:3b:
93:6e:9b:7b:50:4a:ba:51:1c:db:af:1e:23:38:c0:7c:62:e0:
e2:13:0b:c2:e4:8a:d0:37:31:65:69:7e:e0:98:75:45:d5:9d:
1f:13:43:e9:e7:d3:a3:c7:de:d3:8b:90:40:1e:81:38:ef:79:
f6:67:cd:f8:f8:31:85:f0:8f:02:6c:05:ef:fe:3a:e8:ac:19:
97:bf:a7:bf:94:6a:27:6f:eb:00:db:e1:19:6a:17:f8:f6:bb:
39:00:4c:97:3c:3d:04:54:94:62:05:0f:26:43:11:26:55:c0:
00:fa:45:d1:c1:d9:fa:a5:e7:78:ad:75:2b:0d:88:4c:b2:73:
1f:d8:d0:91:8c:e9:2d:2f:ef:6d:3a:39:ae:f2:22:28:87:d5:
01:41:51:74:e3:2f:f7:ec:1c:aa:b6:0f:2c:29:2d:26:91:31:
f8:4d:0d:d2:6e:62:d8:6f:47:d1:21:b9:18:0e:70:d5:d9:91:
33:92:09:82:85:e3:14:cc:52:92:37:6e:e2:94:d3:08:75:a8:
ad:18:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:24 2026 by rpki-client