Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: gjRAInAzRPWOczPEZ4etotv244g1lFgtGaudyjZiUqA=
Subject key identifier: AA:1A:6C:3E:A8:91:7E:37:DE:D1:37:BB:67:F9:B6:10:A6:01:B0:06
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019D98F532546712A1AB9769B1B1DD789312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 121A
Signing time: Fri 17 Apr 2026 01:01:39 +0000
Manifest this update: Fri 17 Apr 2026 01:01:39 +0000
Manifest next update: Sat 18 Apr 2026 01:01:39 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 5zkIPwqpZW5mEk+nMU9fsol8jXzVwSf/1K2UM6UF9GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:32:54:67:12:a1:ab:97:69:b1:b1:dd:78:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Apr 17 01:01:39 2026 GMT
Not After : Apr 18 01:01:39 2026 GMT
Subject: CN=aa1a6c3ea8917e37ded137bb67f9b610a601b006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:6a:21:c6:1b:f9:5c:76:e7:7d:e6:df:2f:
56:4e:37:48:51:d5:ea:66:e7:38:f1:1a:68:49:2a:
b0:e8:22:24:04:3f:7c:b1:28:b8:9b:39:11:df:6f:
1c:bb:f3:76:b4:48:2d:73:5d:50:45:c3:70:66:1a:
0f:0d:9e:71:93:d4:ba:30:fe:c2:f5:b1:ba:0d:6a:
66:b6:d1:f0:f5:88:c5:1f:82:68:79:46:f5:22:6b:
7a:f3:33:17:e0:36:cb:56:c0:d8:5a:e5:5e:e3:cd:
ce:d5:da:2a:e4:9d:b7:c3:ba:5c:65:60:d0:60:03:
9e:df:be:e1:df:71:a2:c4:97:39:00:55:cc:5c:c7:
70:bb:ee:1c:49:f1:50:55:92:73:67:63:89:21:c1:
6f:c2:c4:de:31:e1:e2:13:c6:e9:f6:b8:2d:bf:70:
46:21:da:db:f7:98:e6:eb:65:05:b1:fd:88:46:ad:
6a:c1:21:32:e9:9c:60:f4:12:29:2a:bf:01:0a:47:
2a:84:87:55:fe:7c:d5:79:2a:d6:f2:b3:e8:e1:2e:
37:20:c0:d5:94:2b:f0:1d:01:7e:f1:f1:c1:d2:6f:
fc:e4:69:e4:b1:58:84:c2:c5:09:f3:40:cd:8b:e9:
86:f9:8c:8a:1b:69:d1:7a:08:a9:3b:c8:b0:a6:01:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:6C:3E:A8:91:7E:37:DE:D1:37:BB:67:F9:B6:10:A6:01:B0:06
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:d5:ce:96:1b:bd:d3:0e:1f:1e:86:e7:6f:83:7b:68:50:
bb:ee:81:b6:53:10:99:0f:ba:9c:74:bc:6e:22:37:a4:67:a8:
6d:f8:78:76:23:87:a6:49:27:f4:40:cf:b3:85:1b:f2:9c:50:
d1:fa:22:e5:29:9e:93:6e:bd:a9:00:2d:37:29:2b:b3:08:62:
4c:4c:11:6e:2b:86:e1:6b:98:5c:70:35:11:5c:82:1f:23:fb:
fc:7f:80:4d:44:68:3c:13:4f:64:62:5e:92:a9:5a:42:56:14:
93:55:ae:69:dd:2c:12:eb:88:75:79:f4:1d:07:3b:28:5f:1d:
88:6a:63:bb:88:c4:32:ff:2a:86:fa:9b:7c:44:f7:9d:07:fb:
c8:32:c3:00:ab:78:1b:30:e7:70:80:a1:7f:2c:0c:cb:55:26:
18:7f:d9:c4:52:00:12:9d:56:a4:77:fb:b8:6b:33:e8:2b:eb:
70:9c:72:5b:61:ba:6e:bc:1f:9a:3b:8f:fd:f7:1f:43:75:5b:
d2:72:6b:3f:b1:02:97:2c:30:06:12:9e:9c:3d:a2:e0:12:c9:
22:c6:37:d7:44:fd:18:d9:f6:c9:8f:53:b2:6f:6b:42:d6:52:
31:6f:c2:1b:8b:1e:12:8a:26:60:7d:c1:d6:0c:00:99:24:32:
64:ef:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:29 2026 by rpki-client