Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: hwCPZQd//0FlC2s7jrw+z/e4Erg6futSbNS1sVqMQAE=
Subject key identifier: 0D:B6:CA:6D:A6:99:70:7A:F4:05:30:B1:76:DE:DE:52:A5:89:09:E0
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019CAE3598FFF138CECE6453953163EE9710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0A5A
Signing time: Mon 02 Mar 2026 11:01:13 +0000
Manifest this update: Mon 02 Mar 2026 11:01:13 +0000
Manifest next update: Tue 03 Mar 2026 11:01:13 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: pUyPFsEyGUDrSJsH5S4dEY5i9cisk7xSdjY7J7/uE8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:98:ff:f1:38:ce:ce:64:53:95:31:63:ee:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Mar 2 11:01:13 2026 GMT
Not After : Mar 3 11:01:13 2026 GMT
Subject: CN=0db6ca6da699707af40530b176dede52a58909e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:5f:97:91:14:23:bf:96:a2:ff:af:7e:f7:
af:cd:7f:87:6b:b9:c8:22:b2:25:7a:69:d0:2c:f3:
4f:43:ea:17:4f:78:dc:03:e9:33:7a:49:40:a5:f4:
36:69:80:a3:49:db:19:d3:71:67:7f:44:df:6a:eb:
c2:47:a1:df:4e:21:b2:6a:d5:41:2a:05:99:ed:44:
9c:78:fd:31:bd:85:52:ea:bf:42:d8:e3:19:2a:fd:
42:7c:82:71:76:79:9c:a8:96:15:4c:9f:66:d3:1b:
60:98:87:39:94:bb:a5:07:d2:60:3a:6b:45:c3:79:
55:09:11:60:18:51:cd:fe:2d:4d:97:4a:90:c5:3a:
49:49:ae:f2:5d:cc:fe:ff:6f:31:ae:8e:57:89:93:
ca:d2:3a:77:8f:7f:96:55:2f:08:e1:0c:cf:2f:7b:
e6:40:2a:eb:5b:25:41:dc:0c:f5:6e:ea:17:7e:0e:
35:04:6b:84:57:ab:61:9d:11:64:5b:04:89:18:84:
60:57:35:ad:14:b0:48:97:a2:8c:05:88:ec:3e:4c:
1d:36:b0:28:ae:50:f9:65:4a:46:03:c9:f1:68:ba:
1f:68:dd:81:6e:20:bd:8f:1d:ff:ca:98:4a:b0:ea:
1f:17:a8:e2:86:16:52:70:ed:dd:06:99:18:2e:64:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:CA:6D:A6:99:70:7A:F4:05:30:B1:76:DE:DE:52:A5:89:09:E0
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:21:b3:46:26:7a:e0:a8:69:76:bb:22:1f:64:83:1f:6c:
b2:25:1f:b9:03:b9:7b:bd:25:f9:38:50:17:85:99:38:11:0a:
22:46:6f:7b:12:ca:87:8d:2d:fb:a4:f3:c3:7d:4f:76:86:46:
e1:bd:da:d7:a0:1e:f4:d1:5d:e6:f4:d7:1e:24:fc:d6:f2:ed:
1a:35:19:87:01:ba:25:05:ba:1c:86:07:ed:f0:f4:91:7f:f6:
a2:bd:b8:f4:3a:72:42:96:1f:8e:4c:df:71:fc:d0:73:00:e9:
a4:6a:82:32:4e:0a:37:ac:b7:49:3b:0e:f1:9f:1d:5b:b0:ba:
8a:9b:75:67:69:4c:0e:8d:d0:ff:c6:a1:5b:b2:d7:7a:59:ac:
54:97:3e:41:f3:18:4c:49:e7:de:18:a0:aa:d1:ae:03:da:5b:
a4:9a:22:33:cf:ae:87:64:fe:f9:60:b6:a2:6c:4b:4a:1e:68:
a9:4e:08:40:77:7b:f5:44:c6:de:5f:28:2d:ed:d7:9d:0c:d4:
cb:0a:dc:cc:af:57:ca:16:99:24:5c:64:1b:d6:7c:02:05:b6:
13:82:48:d3:48:f2:c2:ba:8d:66:5a:a1:5e:69:37:61:d2:4f:
45:ef:e4:b0:67:ac:73:69:7b:73:5f:c3:50:9b:42:41:58:7f:
8d:0b:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:01 2026 by rpki-client