Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: sCEtdEOU97eWnEEnXPJ+Oky0ksG+2OcfYzPN32GQWMg=
Subject key identifier: C3:F0:C0:9A:6B:FB:9B:DD:37:14:33:9E:33:BC:53:FA:52:43:34:39
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019FAAF5FCFCA3B6268E2F8908D92E4C0533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 23:01:15 +0000
Manifest this update: Tue 28 Jul 2026 23:01:15 +0000
Manifest next update: Wed 29 Jul 2026 23:01:15 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: c+KS34s7mo4G8Rmp+BwU7vcrpyRF+yA7+2JQ9GCV19w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:fc:fc:a3:b6:26:8e:2f:89:08:d9:2e:4c:05:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jul 28 23:01:15 2026 GMT
Not After : Jul 29 23:01:15 2026 GMT
Subject: CN=c3f0c09a6bfb9bdd3714339e33bc53fa52433439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:a2:2b:31:cf:29:cc:56:f0:96:72:e8:ed:
a6:59:dc:af:bf:7f:4c:f4:b9:98:a5:72:1d:bd:dd:
65:81:4d:b3:4b:52:96:ed:75:98:cb:d8:13:cc:88:
32:0a:48:d1:66:36:d3:cf:66:95:d5:76:b2:9d:79:
85:88:4b:87:e6:fd:31:0c:4f:b7:f2:94:cc:5b:3a:
75:2e:62:47:ae:35:d0:94:ef:04:5d:1e:13:f3:bb:
59:16:a3:aa:78:71:6a:de:f0:45:e9:5a:13:86:e2:
dd:ec:bc:62:60:09:5f:1f:15:92:2b:fe:2b:5b:78:
da:9e:df:d0:48:46:60:1b:06:e5:fd:d9:2d:8c:42:
1c:98:d8:ba:02:59:22:33:0a:9e:67:79:b8:87:aa:
5d:a9:d9:19:c2:94:6b:dc:a1:fe:cd:04:a3:91:14:
50:e7:7d:73:bd:7a:30:1a:e3:22:34:2e:92:0b:48:
7b:90:54:01:b8:e9:3b:7b:01:64:d7:d4:07:27:f7:
14:51:a4:50:8d:4f:fc:59:f3:b0:37:e3:e5:0b:6d:
84:9e:32:54:65:73:dc:2a:a0:59:80:09:ff:0b:28:
c8:78:5b:18:b8:91:ba:4a:ae:6b:4a:89:7d:5c:f5:
1f:ac:43:4f:73:36:dc:1c:de:b2:05:ee:f7:1b:61:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:C0:9A:6B:FB:9B:DD:37:14:33:9E:33:BC:53:FA:52:43:34:39
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:1d:e9:41:06:c4:15:b5:d0:ea:33:45:8a:9d:10:bb:fb:
4d:f1:65:bd:e0:44:69:8f:30:77:7c:e8:ad:4b:55:b2:a8:15:
9c:0e:09:04:f7:df:23:03:df:99:51:fe:b6:2a:f8:45:f7:1c:
eb:b9:95:94:29:4b:4a:e4:7f:d7:ca:7a:5e:2f:a3:8d:90:ab:
66:45:18:0e:9d:92:e3:cb:6a:61:b8:4c:3e:ef:11:85:e2:0e:
52:31:33:28:9f:47:9c:2a:44:47:98:4d:0f:b6:77:fa:49:c0:
ed:c2:b2:88:49:3a:20:f1:16:ac:0f:9d:af:cb:24:fd:8e:e8:
2f:a1:c4:5a:8b:f0:b4:68:cc:0c:b8:06:66:0f:28:7c:34:fb:
73:08:05:8b:9c:cd:07:79:f5:5e:b0:c5:cb:a9:ee:cc:99:08:
22:a9:7b:c3:ca:45:c6:39:ce:08:18:4e:7d:05:6d:67:ac:df:
1c:07:c9:aa:d0:e4:b0:cc:f6:e1:01:4e:44:0c:94:07:83:ea:
3f:f1:28:ce:ca:5f:30:21:1a:ff:70:5e:01:95:3c:5d:70:ed:
d6:1c:a3:c8:98:25:9c:b2:1b:e7:51:e4:82:c1:88:59:46:38:
9f:68:fd:99:54:03:b9:0f:2b:f7:14:b3:cf:f1:02:f9:d6:76:
3d:1b:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:16 2026 by rpki-client