Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: j3H/xgaFg24/wU2sb8y3ubkpAqeu0jVqdsH2Ahn7P3I=
Subject key identifier: 9B:B9:07:FF:73:06:C7:65:67:7E:79:8E:CF:75:4A:A7:36:52:B4:34
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 01A0C7EB1153EE45EBC3F17AB5D0C6188BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 13C0
Signing time: Tue 22 Sep 2026 07:01:06 +0000
Manifest this update: Tue 22 Sep 2026 07:01:06 +0000
Manifest next update: Wed 23 Sep 2026 07:01:06 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 2BZ9j5c2avLPti0Km4A33By+fssLrW2dDQh51Knw+Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:11:53:ee:45:eb:c3:f1:7a:b5:d0:c6:18:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Sep 22 07:01:06 2026 GMT
Not After : Sep 23 07:01:06 2026 GMT
Subject: CN=9bb907ff7306c765677e798ecf754aa73652b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:15:3a:23:b7:6d:a9:55:3b:4c:4f:be:44:
0c:10:8f:86:dc:2e:af:3a:bd:88:9d:cc:3a:61:5c:
a9:20:29:84:5f:35:4b:2b:07:1e:4c:d3:7c:cc:a1:
13:94:cb:b8:45:b4:1f:49:ea:65:df:c2:82:4f:ec:
64:0b:25:3d:f0:f8:d9:11:c4:9b:c3:0a:f6:b1:8d:
9b:b9:df:c2:d0:cb:28:78:7b:12:93:44:0a:4d:6c:
b3:e4:e8:85:35:25:04:76:cc:c1:f7:7d:c0:3c:dc:
08:1b:9c:20:26:38:53:61:06:61:c5:e0:a7:41:ff:
77:59:4a:3d:43:9e:65:6f:c7:ad:90:1a:24:f8:68:
f3:bb:92:f8:f4:d0:e2:2c:8d:d0:f5:03:60:dd:35:
81:88:d3:21:db:47:51:b2:2c:10:fe:16:65:10:71:
87:ef:7f:98:cf:82:f6:4b:60:3f:1b:56:19:7f:8f:
7e:a8:ec:bb:f4:13:cc:4a:88:ae:04:f1:df:51:bd:
93:57:77:c7:d2:4f:7c:94:0c:24:d3:20:bf:05:8a:
50:33:24:5f:70:e0:c8:55:0d:00:35:28:3b:18:b0:
9f:53:13:c3:12:eb:01:35:8d:45:69:e1:3b:a0:f7:
af:ca:3f:59:b6:1d:37:3a:7d:25:11:ff:a2:f6:02:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:07:FF:73:06:C7:65:67:7E:79:8E:CF:75:4A:A7:36:52:B4:34
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a1:6f:de:01:1a:0b:93:bf:5d:01:51:ba:3a:24:0b:e6:42:
e0:15:9e:de:9f:a8:48:38:59:39:31:5d:04:91:c8:f5:bd:73:
b0:6e:fe:03:8a:a4:ab:f8:14:0a:89:59:8b:20:21:da:9a:3f:
a7:cd:55:ad:3d:0a:f6:c4:d9:e6:e7:73:a2:2f:11:30:d6:78:
71:37:6a:ff:24:03:d5:aa:14:09:b2:51:8d:05:2d:24:a1:a4:
b9:da:7f:23:1a:01:d6:d8:4c:9f:57:67:1b:4b:76:55:bd:6b:
02:dc:22:bc:bd:87:4b:26:eb:aa:40:bf:8e:84:8e:d0:72:0a:
ad:69:c8:bd:fc:55:a5:fb:9d:cf:1d:c7:db:34:6e:af:fb:33:
37:05:22:30:b3:e4:0f:a7:d6:b3:d0:9a:cb:ac:88:0c:ed:b0:
0e:b7:83:06:eb:5d:22:f3:4d:64:26:0e:0b:24:6f:2f:5e:35:
01:c2:bf:5f:6e:b4:35:de:fd:f3:4a:88:07:79:9d:7f:13:93:
04:36:b4:18:ef:42:bb:7a:9a:93:64:76:a8:78:08:65:2f:43:
77:04:fb:55:65:2b:23:55:94:27:f6:0c:16:df:70:7d:82:89:
c1:e3:a4:04:ee:10:1d:2c:bb:0d:34:ee:8c:a5:ed:82:12:ab:
6e:12:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:02:52 2026 by rpki-client