Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: lP6gou4JaeXECRLrbafcSmeLEMbDL+jYy0nzKLfjN58=
Subject key identifier: 81:82:9C:C6:8B:B0:8C:F8:3A:EE:08:10:F9:B4:B5:CA:A7:F4:19:A8
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019DA37904276C87ACC9C2419D9FC88333F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0AD9
Signing time: Sun 19 Apr 2026 02:01:50 +0000
Manifest this update: Sun 19 Apr 2026 02:01:50 +0000
Manifest next update: Mon 20 Apr 2026 02:01:50 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: i5+77f8fGF0DYc11TPF91QwqrVTsXYXFCflE1smxVxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:04:27:6c:87:ac:c9:c2:41:9d:9f:c8:83:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Apr 19 02:01:50 2026 GMT
Not After : Apr 20 02:01:50 2026 GMT
Subject: CN=81829cc68bb08cf83aee0810f9b4b5caa7f419a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:82:12:bc:b3:bc:5f:96:e6:5d:5a:20:0e:
d8:94:c4:0f:e6:4c:b6:c3:e7:86:2c:2a:b9:83:09:
ef:4e:e6:d9:70:1e:2e:fc:cd:25:40:3b:34:8b:19:
7d:21:79:40:cc:bb:e9:51:c5:b6:81:8d:c0:ce:0d:
b4:51:b7:dc:39:3b:0d:fd:f2:e4:aa:9c:b3:2c:b2:
87:49:e1:53:d8:35:f7:58:3e:cc:6c:61:ee:54:85:
b5:c1:e6:da:9f:a2:c3:aa:75:5d:6c:21:3e:5d:9d:
67:5c:27:93:83:f1:00:4d:01:d3:35:7d:7b:80:29:
6d:12:02:6a:2f:7c:56:48:ad:d4:d7:4f:6f:db:74:
53:cc:7c:43:d6:cb:0a:e5:84:e2:56:11:6d:ef:80:
a0:2e:76:23:5d:5c:bd:62:1e:34:70:fc:e8:4b:b2:
8f:44:9d:99:da:ef:ac:48:c2:92:62:c2:f6:5e:b4:
fc:94:9e:50:6e:13:86:03:f8:84:5b:a3:97:71:17:
13:2b:e9:8e:95:83:98:8e:f7:ad:94:53:17:68:13:
f8:87:6a:8f:87:e5:c4:e9:9f:73:67:ad:15:59:b1:
79:24:0c:8b:0b:23:db:a1:6e:75:fd:8c:e3:55:cb:
c4:f8:89:5b:f2:03:9c:fa:e6:41:a9:54:71:0e:8c:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:9C:C6:8B:B0:8C:F8:3A:EE:08:10:F9:B4:B5:CA:A7:F4:19:A8
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:92:d1:c7:b6:61:da:b6:d0:56:2d:4e:70:64:06:d6:48:85:
f1:fb:ae:e8:ad:af:03:9f:1c:3b:b0:48:0d:bc:ac:30:36:44:
07:50:23:95:5b:d7:2e:6d:47:ab:96:37:dd:bd:d2:3e:b9:de:
46:80:5c:90:18:ec:8a:6f:29:d6:9e:44:2a:79:25:eb:78:95:
60:5a:de:84:9d:79:4c:6a:47:ba:9c:75:01:f9:e2:e0:9e:a0:
fa:a5:79:ef:4a:60:4c:2e:07:b8:ac:a8:98:ae:ea:eb:61:94:
7a:97:5d:d8:5f:60:fa:44:aa:79:eb:ee:72:7c:0b:2e:f3:e2:
04:d3:f3:7f:9d:e8:c5:4a:c0:60:12:84:10:40:18:32:e7:f1:
02:19:62:06:c5:b0:10:93:df:c0:ec:df:5e:40:59:b2:4b:5d:
11:b8:e1:6e:4e:e6:6f:3e:80:c7:4f:dd:80:ec:84:f6:72:ad:
7d:e9:2e:25:eb:d2:d8:22:16:83:2c:52:a3:29:56:4f:a1:8c:
31:b6:1f:65:41:bc:05:58:8a:c5:98:51:ce:cf:99:1f:97:0d:
19:b3:5a:c1:7f:1c:aa:dd:fe:8a:c9:e1:33:94:97:14:6d:e1:
90:85:e9:48:4f:9e:27:b1:a5:33:1a:12:04:7c:6e:3d:2b:76:
89:6a:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:48 2026 by rpki-client