Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: VV7JWH+/hDsEeM86flZMvLclPp0UTsuHSHL2tEwL4/g=
Subject key identifier: A1:21:A4:16:B0:FE:21:6B:A3:AF:00:66:3F:60:7A:A7:4A:32:63:EB
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019EBE7EE47F97354AEB641FD5C677555F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 12B2
Signing time: Sat 13 Jun 2026 01:00:47 +0000
Manifest this update: Sat 13 Jun 2026 01:00:47 +0000
Manifest next update: Sun 14 Jun 2026 01:00:47 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: e1jiQHu+I57ep/GVu6cbRwMhURx1+XlNxutzJLPTAek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:e4:7f:97:35:4a:eb:64:1f:d5:c6:77:55:5f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jun 13 01:00:47 2026 GMT
Not After : Jun 14 01:00:47 2026 GMT
Subject: CN=a121a416b0fe216ba3af00663f607aa74a3263eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:c8:15:51:9a:57:2b:f6:89:2a:69:70:80:
32:e9:f9:8e:75:8c:bc:3b:06:3e:fa:e9:b4:9c:2a:
cd:c1:eb:31:4b:e6:8a:b0:b8:6c:e6:2e:3e:20:c2:
42:93:73:bd:2d:9e:f1:c4:1a:89:4d:8e:7c:63:d7:
a0:04:03:05:13:02:e5:49:f6:74:59:9c:9b:4c:da:
3e:98:d7:43:15:5a:b4:01:39:1e:af:49:50:8a:36:
e1:3b:b0:40:ae:40:15:74:c9:60:a4:63:77:bf:62:
31:5c:ed:13:71:2d:b1:ed:c6:66:40:11:b9:aa:86:
25:83:29:a4:c5:f7:8a:3b:c8:a6:64:f8:bd:45:92:
7e:46:62:df:cb:ba:a8:7a:e6:e3:2f:c1:6e:c2:c2:
c3:16:b7:28:55:a1:de:ef:a4:24:fa:44:b5:5b:02:
c4:35:55:c6:1e:77:c5:59:4b:95:bd:c0:6d:9d:2f:
fe:96:ab:80:c6:f6:c4:89:fa:ea:de:83:3e:4e:31:
6d:89:1d:0a:2e:00:a1:2b:5f:e1:71:16:37:5b:ca:
9b:4f:f2:c2:3e:da:4e:a3:94:06:9a:89:da:e7:23:
97:de:b8:e5:52:13:e4:5a:7e:25:fb:14:e9:51:57:
99:99:fe:21:4a:f1:7e:a8:00:ab:b3:ed:fb:35:43:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:A4:16:B0:FE:21:6B:A3:AF:00:66:3F:60:7A:A7:4A:32:63:EB
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f7:c7:b4:e1:51:af:0b:5f:cf:59:78:5b:49:d2:fb:bd:f8:
d1:0e:ac:fb:0e:82:59:ff:15:82:c9:86:b2:5d:59:36:f1:1a:
17:d0:de:93:ee:11:74:0b:5d:5a:b9:00:3a:aa:f3:d3:ae:a9:
d4:77:33:22:02:8c:d6:38:cd:ff:88:92:fe:2d:5b:5e:00:9f:
73:19:aa:72:32:12:5f:c0:e2:94:6e:d9:f6:6d:24:6c:a0:7a:
fd:1c:d6:2d:03:71:89:55:36:14:65:9f:aa:21:d4:3f:eb:e3:
a9:d5:32:24:e6:1f:51:d8:a1:df:77:9e:10:83:67:e9:76:27:
0f:9d:10:1b:b7:8e:ed:19:8b:8c:7e:33:8b:a2:8c:d2:48:d3:
9c:b1:7b:33:40:d9:26:f8:a1:25:a5:e7:d7:0d:0b:3e:d5:e0:
fe:a2:4a:82:ea:ff:43:46:1d:5c:26:92:a2:9d:e1:20:8c:f6:
ce:0a:66:50:e2:e3:9f:3e:e3:89:fd:24:e0:30:1f:a9:d8:e5:
bb:09:7c:ce:e4:e2:c1:ec:1e:88:60:ef:a5:3f:34:aa:9c:7a:
2e:0b:8c:c3:c6:54:99:f9:cf:5d:fc:ad:0c:98:54:fb:12:c6:
4b:b3:6b:9f:f9:ba:89:77:5a:4a:ed:b5:f0:e9:03:4e:aa:c4:
d2:42:a6:35
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+fuR/lzVK62Qf1cZ3VV8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjYwNjEzMDEwMDQ3WhcNMjYwNjE0MDEwMDQ3WjAzMTEwLwYDVQQD
EyhhMTIxYTQxNmIwZmUyMTZiYTNhZjAwNjYzZjYwN2FhNzRhMzI2M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/XIFVGaVyv2iSppcIAy6fmOdYy8
OwY++um0nCrNwesxS+aKsLhs5i4+IMJCk3O9LZ7xxBqJTY58Y9egBAMFEwLlSfZ0
WZybTNo+mNdDFVq0ATker0lQijbhO7BArkAVdMlgpGN3v2IxXO0TcS2x7cZmQBG5
qoYlgymkxfeKO8imZPi9RZJ+RmLfy7qoeubjL8FuwsLDFrcoVaHe76Qk+kS1WwLE
NVXGHnfFWUuVvcBtnS/+lquAxvbEifrq3oM+TjFtiR0KLgChK1/hcRY3W8qbT/LC
PtpOo5QGmona5yOX3rjlUhPkWn4l+xTpUVeZmf4hSvF+qACrs+37NUPhuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKEhpBaw/iFro68AZj9geqdKMmPrMB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvfH
tOFRrwtfz1l4W0nS+7340Q6s+w6CWf8VgsmGsl1ZNvEaF9Dek+4RdAtdWrkAOqrz
066p1HczIgKM1jjN/4iS/i1bXgCfcxmqcjISX8DilG7Z9m0kbKB6/RzWLQNxiVU2
FGWfqiHUP+vjqdUyJOYfUdih33eeEINn6XYnD50QG7eO7RmLjH4zi6KM0kjTnLF7
M0DZJvihJaXn1w0LPtXg/qJKgur/Q0YdXCaSop3hIIz2zgpmUOLjnz7jif0k4DAf
qdjluwl8zuTiweweiGDvpT80qpx6LguMw8ZUmfnPXfytDJhU+xLGS7Nrn/m6iXda
Su218OkDTqrE0kKmNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:14 2026 by rpki-client