Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: 8tT/iK/cTF7C8TzHLfOS9vr3gtFoUsyxAsHa1sdmSNM=
Subject key identifier: BE:71:15:78:A1:8A:71:15:DD:C0:6E:2D:B2:DC:22:DC:03:4C:25:70
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019EBF5ADF7677C787B8E5E931AB2D8332F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 05:01:04 +0000
Manifest this update: Sat 13 Jun 2026 05:01:04 +0000
Manifest next update: Sun 14 Jun 2026 05:01:04 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: VCITsEhFeRGYYy5euhq/v0YJIed0OvnM84wmXchijps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:df:76:77:c7:87:b8:e5:e9:31:ab:2d:83:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jun 13 05:01:04 2026 GMT
Not After : Jun 14 05:01:04 2026 GMT
Subject: CN=be711578a18a7115ddc06e2db2dc22dc034c2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:9b:11:43:6d:53:1c:3d:c0:7b:51:59:4a:
5e:87:09:37:da:71:39:7f:ea:ef:47:bd:2c:18:36:
4c:29:fe:e6:8a:e8:d1:26:16:fc:65:19:ed:1e:15:
77:00:78:5d:9e:a7:40:c9:f8:ad:72:9d:30:5b:de:
3a:39:b9:83:94:ee:cf:8e:bd:e0:a5:22:eb:e8:f5:
e0:8f:40:90:a2:21:7f:3c:23:c8:5d:56:a0:34:cf:
73:5c:ed:71:c1:f9:9b:00:64:38:05:a4:7a:59:6b:
62:ee:3b:03:6a:f0:df:be:f4:1e:72:e7:39:34:da:
78:5b:54:72:19:b1:77:7a:59:1c:72:7c:e0:40:10:
b7:26:35:96:10:39:2e:48:d6:87:d4:01:68:2d:0e:
1f:7b:71:f9:ec:7c:b3:84:c3:ca:d5:a6:2a:a1:84:
13:68:d8:f7:c1:b6:a4:b8:f6:1d:7b:df:04:82:65:
74:00:e3:83:48:8a:f7:e3:e8:e6:e3:58:d2:b6:24:
01:05:11:5c:2c:2d:b4:91:3e:2f:03:55:b4:58:b8:
fe:cb:01:a2:b2:c4:44:0d:99:87:97:5b:49:a9:a8:
33:8a:39:72:b1:9f:79:6a:95:59:95:bf:6c:73:46:
15:a3:c2:39:da:b6:a1:4b:6b:de:ea:d7:19:91:c6:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:15:78:A1:8A:71:15:DD:C0:6E:2D:B2:DC:22:DC:03:4C:25:70
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:9d:51:9a:1a:e8:cc:f0:64:ea:74:8a:91:06:81:f9:15:
b7:bd:a4:be:bf:62:d2:a3:0f:65:ec:e6:7d:f2:cf:c7:c9:07:
48:2c:87:50:eb:d5:6d:0b:83:2c:bb:ff:8c:2d:61:c6:50:a4:
c6:93:63:4c:11:a3:36:9c:ea:52:af:27:f9:be:2d:fb:6e:c5:
e4:68:5d:ca:95:5b:ce:09:5f:fa:1c:4a:37:7d:c1:2f:be:e7:
8e:4f:81:11:4e:a5:e5:49:6d:f0:a4:95:f8:88:85:8c:e0:48:
fc:46:3e:b9:2e:e5:1e:df:ce:b8:31:d6:0a:6d:9d:55:0a:00:
50:44:ea:1c:81:0a:03:ea:b9:b7:1b:d9:d6:8e:f0:ed:7a:f4:
43:f5:dd:df:06:19:8b:8f:eb:9f:a1:fc:01:8f:d8:64:6e:c5:
03:4d:92:8b:5e:98:52:a2:6d:3e:f5:d3:aa:8b:93:af:de:81:
2d:58:a4:b1:ab:75:ec:6a:09:b3:0c:b3:59:eb:4c:52:5b:a9:
43:48:41:ab:08:e0:cd:8c:b4:f7:8d:40:a1:08:ec:0b:85:15:
c4:7c:31:d4:92:44:42:1a:a9:cc:3e:be:82:50:c8:34:04:4d:
a8:f1:d8:79:fa:75:88:68:c3:43:b1:36:bf:c4:89:92:2c:58:
3d:0c:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:17 2026 by rpki-client