Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: yocnW0QVT42AfHha/ab9vTN4tYmmaINc7NjJP/5p2Dk=
Subject key identifier: A3:22:74:38:E5:FD:45:3F:B5:E1:A5:C9:43:CC:82:F0:34:F5:99:0E
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 01A1DFF129C6A8BAC56391A9A24F19D05D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 1451
Signing time: Sun 15 Nov 2026 16:01:26 +0000
Manifest this update: Sun 15 Nov 2026 16:01:26 +0000
Manifest next update: Mon 16 Nov 2026 16:01:26 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: +ICCWVp0mg+Cn4uhNlXJkhsy1Noe0P9VdTIo78uTfLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:29:c6:a8:ba:c5:63:91:a9:a2:4f:19:d0:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Nov 15 16:01:26 2026 GMT
Not After : Nov 16 16:01:26 2026 GMT
Subject: CN=a3227438e5fd453fb5e1a5c943cc82f034f5990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:f4:7f:2c:1f:53:ec:60:77:6f:de:77:d3:
1c:08:c4:df:62:58:6d:25:7d:82:c5:9a:2c:b1:40:
d4:bf:b9:b6:2f:5f:4c:b2:06:3e:ee:49:4c:ba:d2:
43:fc:3b:d8:09:13:f0:44:a6:e3:09:9d:ed:88:93:
10:01:de:06:75:fe:b9:22:5d:ca:1f:8c:86:8b:da:
4f:ee:27:0d:85:6d:b9:40:c4:16:c2:3b:fc:9f:ea:
e9:f5:6d:6f:82:1a:4e:d6:39:05:61:b9:79:c3:ba:
b3:0b:62:d4:3b:48:99:83:b6:7f:46:3f:9d:ff:15:
2b:40:ff:22:96:16:e3:79:43:78:be:f4:5b:fc:4f:
90:c9:04:f2:8c:53:8d:70:b4:15:c0:9f:28:f2:ee:
c2:e3:76:d6:6e:0a:86:9e:2d:04:e8:66:4b:5e:40:
6d:d9:b9:dd:ae:99:25:c9:b1:26:5d:98:10:b0:85:
f8:1f:d9:92:1a:ee:4b:14:86:1d:0b:bc:0a:cb:73:
5c:f6:06:ef:e0:da:60:4e:48:b8:14:69:d4:e8:9d:
c6:0d:77:28:f7:b3:eb:a1:53:a1:37:2d:ee:cb:2d:
8b:54:51:99:2c:a9:a4:3f:22:05:89:c7:07:35:5c:
c2:fe:af:dc:d1:3e:c2:dc:01:dd:8e:24:b6:4d:2c:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:74:38:E5:FD:45:3F:B5:E1:A5:C9:43:CC:82:F0:34:F5:99:0E
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:30:aa:5e:e6:bc:58:78:3a:2b:dc:67:74:5c:fe:4a:d8:b5:
96:c4:78:e4:49:c0:7b:7f:12:d3:47:18:30:03:64:4b:8f:dd:
94:e6:35:87:68:66:4c:31:60:10:23:d9:88:9a:85:66:6a:ca:
4d:a5:44:bf:d2:a5:07:d4:ce:05:7c:ce:aa:9a:7f:69:4d:b3:
a6:7e:ab:70:f5:58:44:71:59:9e:f6:b5:cf:a4:b1:f4:10:86:
82:6f:d1:a4:04:0e:2f:bc:0e:c5:a4:74:28:2d:27:be:47:b4:
60:16:7c:13:8f:4c:c5:20:85:e6:90:52:1e:b0:a5:8a:76:45:
7b:48:c6:63:c3:57:61:70:c0:15:5e:5c:a8:c0:d3:49:30:58:
68:66:a3:b0:93:f7:08:a6:5e:6c:04:22:3b:05:68:e0:04:32:
c1:43:7a:a1:cb:cd:37:c7:70:ec:4b:34:fa:33:0a:ee:75:8a:
4b:b3:bd:92:02:c7:90:6b:83:96:0d:5e:e2:34:d6:97:5f:be:
ba:92:0d:5c:b8:c2:44:05:c1:cd:c5:e6:ff:65:1a:08:08:b2:
e5:c4:db:61:b5:0d:d0:93:73:de:ea:2c:0a:11:bf:16:00:5b:
18:12:ef:31:20:c1:6b:ad:d2:9b:00:e5:df:84:ba:45:1c:8d:
96:c2:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:55:47 2026 by rpki-client