Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: A5OMKeRdY1C9qxMYyL6LBBKxfjp4FR8Ya68Ok/qhJkw=
Subject key identifier: A4:90:C9:20:10:DC:78:FC:11:2C:C4:33:C2:2F:E2:1D:71:EE:C6:4E
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019FA9071F948F88481BFD67B313281F48B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0BE5
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: 7IDP7PuYMiq+7qoWfBwV1EVvdH28E44r6GOCymHKDfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:1f:94:8f:88:48:1b:fd:67:b3:13:28:1f:48:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=a490c92010dc78fc112cc433c22fe21d71eec64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:10:96:36:d0:e2:9d:0e:9d:35:d9:53:fb:
1c:8a:62:32:d9:72:e0:2e:b8:6c:6e:33:58:a7:3c:
aa:5b:09:98:73:ac:a1:22:e4:86:20:d4:e9:92:d4:
4a:0a:76:ca:5b:d4:70:49:90:2e:6c:2f:99:53:a8:
d2:c9:b9:51:90:14:f7:e4:2e:17:64:b9:c5:16:49:
aa:d0:e8:bb:6f:b5:bd:a7:75:e1:3e:d2:47:70:20:
74:d5:66:dc:c1:4f:7c:8b:37:04:c4:4c:8e:1e:1d:
fa:9e:f9:eb:bc:ca:5f:00:14:49:9e:2f:33:77:85:
f5:67:32:ca:f3:d9:84:3f:3a:ac:16:81:f7:8d:ae:
7f:44:a2:98:6d:53:9a:8a:f3:15:3e:a9:0e:5f:2c:
b1:d2:38:41:be:1e:9b:84:cb:87:8c:5a:35:b4:d4:
54:77:f0:de:92:65:5a:70:d3:44:d9:ae:8b:ad:0d:
10:16:0f:b7:7a:d1:42:50:55:c5:7b:38:0a:48:00:
63:98:7a:dc:89:e1:b2:d1:5f:b7:50:1f:7a:c5:e1:
fe:2e:6d:da:cf:4f:e9:bb:18:fb:e2:33:28:db:b4:
b9:f5:86:e8:ab:5c:28:4c:68:04:73:c0:a6:f1:ac:
d2:0e:5c:8a:a7:08:fd:4a:b6:96:ce:15:9a:39:e1:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:C9:20:10:DC:78:FC:11:2C:C4:33:C2:2F:E2:1D:71:EE:C6:4E
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:96:1f:7c:3a:17:f6:59:93:39:4f:7e:c8:30:b0:39:6f:79:
b8:e0:af:0d:db:7e:ac:e6:e7:a6:8a:ad:f4:09:0d:04:97:94:
9e:ad:56:fa:bb:b1:84:88:84:9a:35:5b:b2:b2:70:70:fc:92:
62:ee:81:09:e9:2f:a3:98:ae:e3:28:cc:83:b7:8e:bf:f4:65:
4f:11:06:12:70:77:89:60:93:88:bd:60:74:23:04:4f:0d:ed:
a7:a5:ce:9a:9b:e6:6e:c4:cb:1e:69:b8:93:44:de:2a:24:b3:
65:0f:a7:03:8d:bc:4a:af:d9:9b:9a:4f:61:00:af:55:5a:e3:
a3:96:b0:76:a8:c5:7c:36:69:9d:d5:0e:3e:09:9e:51:95:31:
b8:d7:67:3b:e9:2f:7f:07:63:18:78:4f:1f:1c:b5:40:1b:9c:
ce:d5:4a:d2:02:7d:a0:d3:36:7a:b0:21:1b:a5:8c:b0:7b:f4:
ef:57:c0:56:af:18:d2:73:10:55:56:93:05:f1:77:b3:a6:d2:
b7:1a:04:98:78:b3:d6:fd:97:19:2b:e4:40:15:9b:ce:51:30:
4d:64:84:b9:23:69:79:67:04:5b:7e:df:27:a1:13:8b:77:42:
72:1f:8c:86:5a:ca:d2:69:5f:5e:d1:b6:0c:92:39:b8:94:66:
c5:04:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:41 2026 by rpki-client