Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: Aglp1BU1JF5sDyFdyiCrkUZsINruILCnDoHP8VrXI0I=
Subject key identifier: 92:E3:7F:34:A0:FB:09:A5:37:4E:E3:F4:4F:D2:66:11:E0:E2:81:6A
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019D99D04F89D300FDBEC04606DF7BA2DE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 1LmtAQZo4kMo0WFvnuwr5hlRcBi2UXdjwSkQ7nOPgLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4f:89:d3:00:fd:be:c0:46:06:df:7b:a2:de:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=92e37f34a0fb09a5374ee3f44fd26611e0e2816a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:61:e9:92:38:3c:90:4f:64:58:2d:b6:aa:
b3:72:ae:80:56:55:a3:55:6b:00:a9:35:8f:37:b9:
36:7c:4c:18:f5:6b:fd:4f:d5:93:79:3a:18:43:8a:
49:75:88:2b:b6:66:38:00:65:61:75:03:f0:16:a5:
08:66:68:38:29:d6:61:ea:1a:a1:fe:05:99:2a:5b:
b7:d5:15:56:17:fd:d7:49:4d:5b:b1:7a:94:38:72:
ce:e2:57:29:f4:78:14:40:46:7a:48:b3:88:2a:97:
da:b0:4a:58:dc:5b:3e:ac:82:0c:0b:05:8a:c3:19:
5e:ee:0f:77:e2:8c:41:10:e3:6b:5e:a6:3e:27:de:
19:4b:6e:ac:00:9f:31:96:10:50:df:3a:50:61:5a:
58:04:f3:e7:9e:c8:18:9b:58:46:9a:ab:21:97:62:
4e:33:05:8a:15:d0:7c:93:77:a6:f5:9a:ce:e4:b3:
96:23:8e:7a:3f:c5:63:6a:37:eb:1d:27:13:67:ec:
b8:2f:1d:e3:df:f6:26:d7:e4:40:34:5d:89:fb:18:
0d:71:df:b6:dc:79:09:62:61:53:30:50:7e:cc:d5:
4f:5b:70:20:73:5d:02:9b:90:a8:7b:f8:fa:85:ad:
6c:14:9a:78:7f:29:f5:7b:26:04:ed:65:5a:35:eb:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E3:7F:34:A0:FB:09:A5:37:4E:E3:F4:4F:D2:66:11:E0:E2:81:6A
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:60:54:5c:da:f6:2a:ce:97:b4:9d:32:03:e0:54:48:34:4c:
0a:4d:b1:b4:97:bb:97:10:31:bd:57:d0:c8:26:9e:e6:31:0a:
fb:1d:3c:04:33:48:ff:c2:eb:ab:14:96:a2:fa:85:09:14:db:
4e:b0:48:5a:58:71:dc:7a:51:0a:37:95:5a:a9:c5:7f:83:71:
08:02:a4:1c:24:6c:bd:8b:83:22:6a:a4:f3:91:de:e1:b5:b0:
41:62:e1:b7:93:e2:2d:64:08:69:f7:f3:c6:ca:16:92:d7:69:
89:a6:ea:e6:bf:53:40:66:7c:b1:5f:ee:3c:50:93:87:9a:1f:
b9:a9:d5:9b:34:0f:13:c8:72:63:e4:40:e7:78:9d:e1:b9:40:
90:b6:af:1c:0f:17:da:63:eb:2e:0d:25:f2:b4:f2:3a:ce:2e:
04:3c:62:4d:e4:4a:38:f7:8c:c2:f6:b4:82:40:a5:b2:b1:22:
c4:84:22:fe:6f:ff:2b:02:f6:cb:d4:34:25:46:20:95:65:3a:
b0:59:d2:b0:5a:20:18:b4:4e:48:d0:f6:c7:24:c4:60:87:43:
55:e8:7a:de:09:06:67:e5:f3:37:88:5c:bb:2a:43:25:1e:5b:
18:1f:68:6a:2a:03:db:13:ab:1c:b5:57:b7:ac:0e:47:e8:ed:
01:e8:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:59 2026 by rpki-client