Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
File: 1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft (raw, json)
Hash identifier: /os6q5oKKcfK+oGEtoPdEQcaQ2ZJAB8oNgwJahhIEJg=
Subject key identifier: 9F:6A:7C:F1:68:E1:4C:93:98:C1:7F:F7:47:38:4B:CF:08:4A:16:2C
Authority key identifier: FA:56:99:A4:69:D1:E1:26:7A:1F:45:3E:E5:57:F2:AE:06:C7:04:BE
Certificate issuer: /CN=fa5699a469d1e1267a1f453ee557f2ae06c704be
Certificate serial: 01A0C4E97F1E58B85860A5F22B11E2CB1E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
Manifest number: 33
Signing time: Mon 21 Sep 2026 17:00:31 +0000
Manifest this update: Mon 21 Sep 2026 17:00:31 +0000
Manifest next update: Tue 22 Sep 2026 17:00:31 +0000
Files and hashes: 1: 1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl (hash: 35H124S1TjgdVTyLeZOrwTvksrDSOTXKtO/s5xCnzJ0=)
2: LjOYSpelxDlHd3t6UrDIjulOOe4.asa (hash: 2ZekJ3nfNZ+GWnUy1CTHKZLOw6KEQprbbPFFqE0lf6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:7f:1e:58:b8:58:60:a5:f2:2b:11:e2:cb:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5699a469d1e1267a1f453ee557f2ae06c704be
Validity
Not Before: Sep 21 17:00:31 2026 GMT
Not After : Sep 22 17:00:31 2026 GMT
Subject: CN=9f6a7cf168e14c9398c17ff747384bcf084a162c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:ed:1c:16:b5:af:2d:e1:62:9c:fc:ca:1e:
dd:7f:98:d2:42:6d:e9:c1:9f:09:f8:ac:c4:1d:f6:
3e:b9:08:3b:fb:33:f0:f3:fc:36:72:34:e3:ab:07:
2a:5c:39:f1:4b:94:46:f3:7d:03:95:05:35:aa:60:
a2:d5:f0:a1:68:07:fc:76:e7:14:0c:10:44:85:6a:
ef:a4:f7:a0:d0:a4:7e:3a:58:39:53:e2:db:d8:8d:
16:c7:63:c6:0d:91:97:72:ba:ca:cb:f7:18:ea:b2:
75:2d:10:7a:7c:e3:ce:c1:8b:ea:8c:48:f4:91:de:
7b:f9:74:17:a1:f5:d1:a1:6d:a7:a6:80:a5:82:33:
19:fa:ca:41:84:32:2b:31:b3:06:44:e0:28:f3:0d:
1f:d9:1b:fb:39:a8:fa:d6:60:64:57:33:16:71:8c:
63:2f:52:7b:b4:f4:4e:e9:f5:2d:57:a7:67:81:41:
4d:93:fc:86:69:b7:41:c1:8b:7f:47:ad:b5:fa:2c:
ce:26:1e:bf:8e:f3:85:6b:27:91:f4:c7:d9:24:73:
8c:4b:67:6e:10:48:cc:be:f7:86:09:6a:59:30:58:
fb:b7:d3:77:86:80:f6:5a:7b:9c:50:c8:40:a5:4f:
91:18:59:50:1e:df:17:3c:5c:e7:b4:b1:2c:2f:a0:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:7C:F1:68:E1:4C:93:98:C1:7F:F7:47:38:4B:CF:08:4A:16:2C
X509v3 Authority Key Identifier:
keyid:FA:56:99:A4:69:D1:E1:26:7A:1F:45:3E:E5:57:F2:AE:06:C7:04:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:01:cd:d0:49:54:7b:a7:c2:3e:fe:5e:96:e7:80:c7:9f:
9b:de:a2:e7:db:7c:23:5e:f0:45:bd:60:5d:c5:58:8f:cc:7b:
56:1a:7e:ff:dc:26:a4:bb:44:1f:a6:91:6f:bf:4c:e2:36:98:
5c:ef:6c:a9:12:5a:4d:c4:34:b1:24:e2:59:7f:7b:97:f7:f0:
33:34:19:d1:b4:15:75:30:55:2c:60:90:c0:2c:e4:cf:c1:90:
19:88:24:0d:ce:f1:e6:4b:ca:6c:97:a4:3f:22:21:68:06:ac:
15:39:c5:87:21:ba:fd:16:bf:ed:f0:ec:05:02:a3:b8:e4:a2:
e9:2b:c7:46:77:19:b1:35:a0:48:90:a3:86:cc:4f:0d:9b:ba:
24:4b:29:e2:39:48:07:af:fd:16:ed:6e:35:7c:94:68:66:d4:
1d:3c:3c:a1:2b:13:bb:db:ef:bf:fa:a1:2d:64:bc:3c:35:4d:
1b:68:e9:1f:3d:4d:61:5d:9d:9d:86:04:13:96:f4:32:44:ca:
19:27:8a:ba:8e:0f:99:c4:f0:6e:70:6f:2d:f4:28:19:d0:47:
3d:ec:ad:54:e2:59:cf:d1:37:43:09:ee:1f:68:a9:32:64:dd:
61:1b:7e:c0:8f:45:1a:6f:8a:13:25:c8:5a:1f:ae:82:8b:e6:
e4:5d:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:27:25 2026 by rpki-client