Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: wE4vZw8aG8EL1SGHmaXDmKxd97gIycbsP5KWst8IwFE=
Subject key identifier: 02:8B:CA:BE:1F:3F:46:21:D0:9C:5C:0E:8F:11:7C:89:F0:BA:D7:9C
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 019F91A3BA0F3317DA78B10F271D68C9C9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 0319
Signing time: Fri 24 Jul 2026 01:00:54 +0000
Manifest this update: Fri 24 Jul 2026 01:00:54 +0000
Manifest next update: Sat 25 Jul 2026 01:00:54 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: dJXHoTt4r6h8AE0kNO+TcsGcwmVIeZDM+GWxxQA5184=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ba:0f:33:17:da:78:b1:0f:27:1d:68:c9:c9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Jul 24 01:00:54 2026 GMT
Not After : Jul 25 01:00:54 2026 GMT
Subject: CN=028bcabe1f3f4621d09c5c0e8f117c89f0bad79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:07:ea:7d:b9:d3:ef:07:9a:92:d0:b7:17:
c1:3d:d3:92:55:18:a6:2a:82:9e:ff:d6:2f:e5:fb:
5e:a3:d3:99:6e:78:0b:d0:a7:e5:41:f6:64:3e:84:
b6:a6:c8:53:f7:ab:5f:1e:35:9e:95:17:25:22:ef:
1e:1d:e4:e6:3b:9e:b5:6c:a8:26:b8:4c:be:02:b5:
79:98:a1:ac:0f:75:f1:94:90:74:2c:db:bc:4e:28:
03:38:04:53:74:f9:0d:cd:45:8b:5c:6c:24:8f:ab:
d9:4c:55:15:63:3a:d7:d9:03:4f:bc:db:95:9b:03:
49:ed:c2:11:b8:12:94:ad:c5:84:95:e5:c8:76:74:
91:8a:90:96:81:18:71:98:56:2b:cd:52:99:9c:7e:
35:04:46:cf:6c:4f:34:1c:d0:b0:6c:9d:c7:55:6e:
d4:ae:34:9f:28:83:0e:7d:93:19:5a:fd:62:a3:b0:
5f:41:c6:e4:00:df:0c:0a:11:cd:90:ce:70:a8:c1:
13:df:72:58:5d:86:1c:1d:a2:d5:42:7d:ac:d4:2a:
6a:f0:48:96:3d:8e:15:6c:fc:c7:d3:19:5b:a4:aa:
98:75:7c:e1:e8:74:3e:8d:a4:a0:c7:0f:65:bc:ea:
aa:f3:6f:50:a1:2a:00:f8:c9:ba:d7:c8:55:5a:ae:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:CA:BE:1F:3F:46:21:D0:9C:5C:0E:8F:11:7C:89:F0:BA:D7:9C
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0e:dc:68:f3:f7:e9:80:2f:fe:65:04:8a:72:5d:e6:21:d4:
a8:6a:57:4b:27:f5:1d:bb:c4:23:b3:27:07:42:38:d3:e0:10:
dc:1a:1a:d8:bc:8a:89:bb:b8:59:a7:21:77:0e:d3:b1:9b:71:
17:ee:c8:c0:55:f8:fe:be:80:68:a0:55:9e:10:74:22:84:bc:
dd:5b:e8:29:51:8a:33:e0:80:6c:a9:1a:cc:3b:f5:22:b6:14:
9d:59:df:28:53:3c:4d:6b:22:a3:68:10:df:9d:b4:cd:7c:70:
a8:c6:8f:b4:c6:c8:70:61:61:4a:51:88:b8:96:0c:4f:b3:cf:
2c:0b:70:82:6f:36:1c:35:15:c5:12:74:53:63:fc:e2:a1:ca:
f9:bf:72:96:4e:17:d9:a4:3a:84:70:96:4c:7e:0a:49:9e:61:
7c:26:a3:3d:58:fd:96:4c:39:42:ad:03:14:90:ed:cf:94:4e:
0b:70:ee:25:87:34:99:8f:f9:e1:6d:e8:40:76:3f:8d:bb:9b:
7f:46:22:0c:53:e4:df:d8:14:d9:11:b5:35:e8:ac:83:66:21:
49:61:27:47:31:42:54:43:3b:fe:ea:ce:6b:6b:7b:b3:98:36:
1b:9c:ea:89:94:2f:53:99:59:ed:e8:cb:7a:22:a3:22:4c:88:
25:cf:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:50 2026 by rpki-client