Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: n7Suu6oyF0Zhq41paYdAC3/ph6burGYn2g/k0IRyNpo=
Subject key identifier: C5:55:C3:A9:9F:93:30:ED:61:FF:C8:45:16:12:B6:71:01:84:88:91
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019CAB6B7B5FCCCFA3299A8F72D40766AEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 119F
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: tcbBkHOVAVXY35C7nAaXFikd7J4eok2J5LMNrteNCHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7b:5f:cc:cf:a3:29:9a:8f:72:d4:07:66:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=c555c3a99f9330ed61ffc8451612b67101848891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:e1:56:fb:d3:01:d2:57:fb:a5:92:9f:f8:
59:19:dc:df:4a:ed:f4:ec:2a:33:d1:f8:b7:55:60:
a6:c5:7d:03:16:c0:f1:96:d9:ab:8f:14:ef:4f:5c:
cd:be:a7:03:04:49:b3:83:3c:18:0e:1a:5b:2a:92:
cd:be:f9:fe:67:e7:ef:97:ac:68:ea:74:14:5c:87:
43:51:34:9c:7d:72:c9:95:4e:63:d1:e2:1e:e1:bc:
4c:29:37:d7:5f:1c:49:bc:97:81:5d:c0:13:15:72:
e0:87:fe:16:ea:ea:61:61:74:d8:15:44:cf:a3:6f:
93:c1:4f:08:5a:6d:fe:4c:b6:5c:0c:c0:d5:7b:76:
63:89:1a:46:63:b2:f1:d0:11:78:d7:47:b7:5c:74:
53:54:2d:cd:04:db:0e:11:bf:2d:35:14:20:18:7e:
07:1c:01:d6:94:8b:02:57:2c:dc:77:3b:5a:6a:17:
ad:bf:a5:23:01:b7:0b:f2:49:ad:ea:50:04:cf:81:
15:ea:3f:30:f9:7f:c3:6a:3e:bc:be:42:7b:e5:04:
03:7b:01:5a:f3:e7:1b:c3:28:8a:95:3c:ae:f6:ab:
b2:a3:53:b5:98:03:9f:e4:39:6e:e5:12:27:b0:2b:
bf:2a:29:1a:90:d1:39:48:27:4c:b7:8d:f1:0f:67:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:C3:A9:9F:93:30:ED:61:FF:C8:45:16:12:B6:71:01:84:88:91
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:99:41:6f:e7:2f:59:c3:56:5f:39:d2:2b:a0:6b:5f:45:
19:92:56:13:78:3b:87:b5:6f:20:9a:b8:c1:7f:06:40:47:3b:
0b:6e:5b:1d:bd:d2:7c:2b:63:70:33:3c:7a:37:c9:c8:e2:12:
59:d5:0d:86:f4:2a:ca:80:03:b8:3f:c1:48:71:4a:99:45:91:
fa:9d:99:81:3e:d2:5f:88:b3:ca:57:c5:95:2a:0e:63:65:1d:
89:27:66:a2:4a:65:ed:bd:38:bc:2b:20:e3:ed:9a:64:0b:c4:
43:ea:27:a9:71:34:77:b8:7e:db:3b:41:27:23:98:14:b9:0c:
7a:61:af:44:ce:fd:a5:ce:a4:53:ea:55:5a:f6:6b:3e:7b:47:
e2:da:3a:21:db:bf:4c:1c:ae:e2:da:16:0b:a0:e0:1f:43:25:
d5:61:93:0a:3a:5e:80:ac:a0:5f:ea:38:8d:3a:fc:fb:8e:09:
74:00:1a:c4:9b:74:98:64:f1:74:49:43:fe:05:57:77:6d:b4:
e0:6c:1e:71:fc:c8:68:62:97:2e:6c:0a:a8:4c:bb:d8:ac:60:
c5:ba:ef:b6:b4:82:82:e6:f2:41:68:e2:9d:79:fd:a3:ee:97:
02:1c:ca:32:a3:ec:6c:f5:0e:07:1e:7a:ed:98:89:f9:9e:03:
58:d7:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:58 2026 by rpki-client