Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: DPduzbhxz0pXySaGKSDj9VMHJxrD86vophML4/BAx4c=
Subject key identifier: 44:3C:C5:8A:58:C6:31:CA:36:37:43:97:EB:86:87:C9:81:28:2F:AF
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019FAA1A2B1AEC320B88FD2B924526A4E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 132C
Signing time: Tue 28 Jul 2026 19:01:09 +0000
Manifest this update: Tue 28 Jul 2026 19:01:09 +0000
Manifest next update: Wed 29 Jul 2026 19:01:09 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: OW1yP9RJmrEMWV7x2JfOvAzzpVm0c/CO9CLJIEYhr9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2b:1a:ec:32:0b:88:fd:2b:92:45:26:a4:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jul 28 19:01:09 2026 GMT
Not After : Jul 29 19:01:09 2026 GMT
Subject: CN=443cc58a58c631ca36374397eb8687c981282faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:20:72:f5:9a:f5:be:63:b5:04:70:9b:98:
6c:f8:a0:86:7b:cf:c5:4b:03:6b:bd:f3:75:0f:82:
2e:e3:c7:f5:98:65:d3:36:93:c0:64:d2:b0:3b:7c:
4d:1a:f6:38:1f:93:fb:72:36:c7:92:f4:98:16:e9:
83:e3:8c:8b:d6:4e:1d:73:3d:a2:92:9d:27:01:f7:
a3:d5:2c:73:b6:86:37:73:66:7e:5e:7d:aa:b0:c9:
7a:82:4e:7f:b7:d5:e5:36:f7:25:2d:a6:fe:d3:db:
0b:06:a6:b2:0e:fa:c9:46:da:1c:8c:17:15:77:0a:
7a:f9:13:3c:62:8d:7e:49:ac:47:af:5e:77:81:34:
07:a9:5f:5d:4f:69:38:1a:44:25:c1:45:21:ce:de:
47:92:9e:68:94:72:12:d6:c1:53:20:49:31:64:ac:
9e:a7:93:f5:d0:69:38:1a:6c:1b:9c:c8:bc:26:9d:
02:6c:f4:bd:81:39:51:0a:f0:66:a5:21:3d:a7:f0:
2d:bf:2f:b8:04:95:88:15:2a:56:51:55:9a:6a:9c:
80:1b:f1:b8:be:0a:27:59:a4:50:60:51:69:44:70:
96:0f:7e:88:42:50:50:28:fb:41:41:9c:47:97:7c:
73:d8:2c:16:0e:ce:43:25:86:63:f1:02:4d:13:c6:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:C5:8A:58:C6:31:CA:36:37:43:97:EB:86:87:C9:81:28:2F:AF
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:db:0a:58:e5:eb:98:b1:31:c0:7b:b1:fc:1b:1f:bb:8f:6a:
63:f0:db:3c:61:27:1c:cd:0f:e2:99:8a:b9:e6:a7:c1:7e:23:
84:62:b9:9e:d8:9c:48:ec:cb:f8:65:1e:a2:5a:19:f9:75:b6:
e2:cb:b2:7a:46:a2:66:2a:5a:a6:06:01:90:98:ca:88:bb:26:
63:f6:50:97:df:25:0c:c2:9f:a3:79:c8:0d:b0:1e:9f:aa:3d:
cd:4d:4d:94:7f:23:c9:c3:df:0c:f0:f2:e2:54:fa:04:3f:f3:
5f:56:1b:9c:f6:2d:21:b5:09:93:f0:0e:64:80:3e:7c:e7:ef:
20:50:b5:e1:7a:5a:3e:31:8a:36:24:45:29:e5:10:b7:47:2a:
5b:13:d6:50:d6:a9:c4:3c:ae:7d:e3:cf:2d:35:15:aa:0a:ef:
5e:ba:1b:94:d1:e8:7c:d3:e4:87:c8:ea:ff:08:84:38:59:71:
a0:11:09:fb:d3:de:e7:4d:68:ac:d9:16:88:fb:7e:2f:c5:bd:
04:27:41:f7:19:e6:92:1c:aa:70:90:5e:73:f3:4f:54:bc:e8:
5a:86:36:72:98:dd:3f:44:1a:26:10:e5:8d:64:18:e8:08:2f:
e2:f8:f4:c3:6f:c4:25:76:5f:d5:ab:ee:38:fc:98:cf:01:90:
80:db:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:09 2026 by rpki-client