Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: POvU2ZsDsQqZXe8VYgcfFg+uTXfqK6uFK5DQ6grPmQQ=
Subject key identifier: 88:04:2F:DB:7F:36:B5:4D:CA:C1:CF:EA:51:ED:86:BD:6B:BF:80:1E
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01A0C10CFA5C94C92B6E5F7897A2A00513AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0C76
Signing time: Sun 20 Sep 2026 23:00:48 +0000
Manifest this update: Sun 20 Sep 2026 23:00:48 +0000
Manifest next update: Mon 21 Sep 2026 23:00:48 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: qjZ3xS8Ue86BjOPRPekMzEqDk2RT0Q+U8vKQwd8Hz8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:fa:5c:94:c9:2b:6e:5f:78:97:a2:a0:05:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Sep 20 23:00:48 2026 GMT
Not After : Sep 21 23:00:48 2026 GMT
Subject: CN=88042fdb7f36b54dcac1cfea51ed86bd6bbf801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:27:b9:ef:62:11:6e:8d:b9:2a:35:1f:f1:
df:c6:d4:31:ef:33:1a:08:5f:d8:a5:87:72:b0:56:
d3:1b:98:6e:0a:14:0c:e5:47:61:5c:08:a0:f0:f6:
4e:03:7a:48:7a:b7:30:31:d3:e9:7a:7c:99:c9:cb:
ca:48:09:34:c5:6c:05:18:0a:55:72:10:10:f2:21:
b3:cd:91:9a:c8:d0:a3:49:db:e5:f0:07:56:80:88:
f1:f1:13:2b:80:94:85:9c:8a:d4:ff:97:f3:c2:03:
1d:f5:96:31:32:ba:57:c1:85:e2:47:4e:21:8f:31:
1a:3c:7f:e4:9e:c1:7c:8d:a2:b7:4f:56:96:2e:c3:
ab:68:a7:a6:29:48:84:78:e3:59:ba:31:9a:96:94:
82:10:97:fe:94:34:2c:4e:29:71:a6:e3:49:11:a9:
97:77:79:e6:50:11:88:b2:15:21:92:30:7c:c4:77:
f9:8b:28:76:ef:1d:20:b0:39:21:0f:b9:6b:03:e1:
dd:7d:2e:fa:a0:8f:c3:9d:30:1e:a0:9d:91:61:c4:
d5:ba:30:ea:f6:74:2b:03:39:3f:dc:27:8b:fd:24:
e4:ba:37:97:8d:55:a3:8c:55:71:b2:47:9e:62:4f:
87:51:fd:45:61:fe:2c:8d:09:e5:0e:73:45:65:e5:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:2F:DB:7F:36:B5:4D:CA:C1:CF:EA:51:ED:86:BD:6B:BF:80:1E
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:a9:be:53:1e:ce:d9:20:8a:1b:e0:98:4d:ca:81:a7:28:
a2:72:ae:7d:f4:60:d9:74:32:aa:5b:72:72:ba:c8:c0:16:cb:
b1:ee:c9:cb:d5:20:44:dc:6f:51:90:08:5d:a9:26:46:2e:05:
ed:97:2c:39:8d:bf:8a:36:87:0b:f9:67:9a:61:cd:e1:79:2b:
6e:67:73:18:6f:10:d5:99:3c:86:1e:65:03:e1:bc:67:29:7e:
ab:cd:a9:b9:11:71:f2:8f:e3:92:1d:c6:49:84:ba:cd:af:5c:
99:6d:bd:ce:4f:92:0f:44:af:d8:e4:f6:ee:5f:8d:bf:9c:dc:
93:70:30:fe:62:68:f7:0e:cc:82:87:c5:b9:79:2b:6b:5e:2a:
89:b1:7f:4d:e7:79:b8:25:ab:bf:73:17:50:2f:88:6a:67:59:
51:75:42:a9:16:5a:d5:a8:31:b7:e8:64:91:8c:26:86:b0:b5:
83:12:d4:83:b9:62:e9:cd:9c:fd:a7:f5:7d:ad:a5:1d:41:a6:
c0:ad:0f:4b:bc:15:dd:9b:f5:32:05:f1:eb:ca:17:c3:2f:9f:
c0:32:b3:6c:fa:15:0a:fb:36:4d:f9:f1:bd:85:68:23:c4:59:
0c:4b:38:af:0e:0d:ee:7f:96:d6:c3:16:a1:a7:6c:2d:09:e3:
e6:a6:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:53 2026 by rpki-client