Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: he6/f0iot5OAnMwRCj7OtZPZcPz7e3mlNvC8COxbOF0=
Subject key identifier: F9:67:B2:56:61:B5:05:F9:57:10:E3:74:4B:DF:6D:01:11:E0:54:28
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019CAC476AC2FF28DFFE698FBD379EB2D2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 02:01:27 +0000
Manifest this update: Mon 02 Mar 2026 02:01:27 +0000
Manifest next update: Tue 03 Mar 2026 02:01:27 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: R3a3ln/XqLFAjrDhyogjCh1rBVGDT7F+VXUDx0hGSqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6a:c2:ff:28:df:fe:69:8f:bd:37:9e:b2:d2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Mar 2 02:01:27 2026 GMT
Not After : Mar 3 02:01:27 2026 GMT
Subject: CN=f967b25661b505f95710e3744bdf6d0111e05428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:fb:a4:84:0f:8d:43:4e:8b:d0:aa:c3:bd:
a4:03:36:5d:3a:42:4b:60:c6:6d:c1:24:83:f6:ce:
11:f7:c9:cb:2a:6e:c2:58:f1:c7:7d:8b:e2:22:29:
92:8e:d0:71:75:3f:de:3b:6c:d2:e4:19:07:07:1e:
b7:dc:8a:d7:d1:c5:ab:29:24:82:66:45:96:a7:66:
3d:c9:80:dd:4f:ae:9b:74:e4:1b:cd:10:33:99:9a:
b4:0e:50:a3:da:37:7a:a8:7a:65:f9:f4:7e:03:1c:
a2:62:3b:5d:bc:d6:a2:f7:a5:d9:03:ce:cb:3c:ea:
b8:ad:fd:17:54:c7:9d:e8:46:c6:2d:9d:a0:5f:1e:
3d:e1:27:0c:8b:55:0a:1a:17:dd:0d:52:5a:98:db:
24:04:e9:25:87:41:3d:ca:14:db:e2:37:ea:f6:27:
21:99:47:86:55:28:81:d5:c4:ff:60:42:b4:00:c6:
59:be:a9:a0:b0:e1:db:a3:91:be:25:da:73:03:53:
c1:a2:be:70:98:a7:12:f5:2a:8f:d0:3d:4d:53:e1:
ba:d6:13:d0:24:45:a2:33:c1:23:dc:93:75:a5:36:
66:3c:f8:b9:f7:39:56:6d:bf:2e:51:d4:87:eb:00:
b4:b6:99:02:6f:90:82:46:d7:0a:3b:4e:45:01:8f:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:B2:56:61:B5:05:F9:57:10:E3:74:4B:DF:6D:01:11:E0:54:28
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:28:9c:a5:b9:65:4d:7f:d6:36:d9:27:a0:48:70:55:8c:5d:
bc:ee:69:82:32:78:80:9b:f2:c5:75:6b:81:51:10:14:e2:07:
78:b5:be:fb:dc:01:8c:19:18:c1:0f:dd:30:22:7c:16:5f:5c:
81:0f:c6:30:71:8c:6d:08:40:fb:4b:55:eb:33:43:3f:71:7a:
9c:48:7b:98:ec:87:70:cd:3f:f8:f6:0e:20:cb:5e:95:f0:76:
52:c6:e5:98:e7:f1:58:01:3e:52:9b:09:9b:88:a3:5a:d4:c7:
71:a5:d4:73:cb:91:d3:7d:d9:d6:4e:08:a7:be:1a:fb:4d:33:
1d:1b:a0:65:5c:e4:1e:eb:00:48:90:04:24:cf:b9:ef:04:00:
84:8a:a1:c9:26:f6:a7:77:88:cf:58:b6:60:54:64:37:9d:6c:
3d:1a:f5:22:4b:8d:73:3c:b4:5a:32:a7:31:6e:45:d2:e1:8e:
68:e0:f2:31:d7:a8:61:4b:03:4f:b1:ba:da:11:b2:53:72:57:
ce:57:30:91:c7:3c:05:83:88:c1:84:aa:2b:e3:88:e5:53:2c:
b2:f2:18:95:58:c0:63:3a:42:dc:db:9c:97:59:48:15:cd:52:
99:2a:ce:79:61:ea:df:20:45:58:67:26:81:1a:ff:1d:75:bf:
2e:1c:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:24 2026 by rpki-client