Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: UpJO1AaC7RbTqJ7RsPn66eCU42NldIVCixngniCIs3c=
Subject key identifier: 47:E4:2B:7A:94:5D:FC:9B:26:D1:99:CE:33:98:FF:67:04:0A:E7:AD
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 019D299709DFEC18B79672F2B4D424C041D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 01DA
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: SV/t/BISAwvNjL4vZyYWaER/yOKyrHwmPOMaUACpnQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:09:df:ec:18:b7:96:72:f2:b4:d4:24:c0:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=47e42b7a945dfc9b26d199ce3398ff67040ae7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:dc:cb:fe:eb:c8:07:86:79:0e:33:3e:d6:
6a:33:ef:d1:2c:31:86:94:d8:45:2b:92:2b:52:4a:
6e:f5:47:af:b9:9b:ce:00:dc:3f:b5:0b:d8:15:73:
02:0a:7f:24:e6:c2:07:3a:28:23:e5:57:69:90:bb:
d5:fe:b5:90:a0:71:56:12:0f:07:60:19:76:6b:8f:
85:e9:7e:54:12:fa:21:d8:12:2c:94:59:00:3e:2b:
d3:f6:ef:68:03:12:a6:ea:dd:6b:91:2c:1c:ed:df:
71:2a:0d:0c:95:f9:87:4b:c1:88:8d:01:f8:fe:f1:
ef:e8:b0:5a:fd:c9:e8:df:50:45:c1:a3:93:48:46:
cd:7d:7a:5a:5a:2b:b7:08:c8:2f:d3:2d:5a:ce:34:
ef:85:f0:02:1c:5e:db:08:17:fd:1e:cf:cb:a1:a6:
29:75:70:54:92:c8:ff:fd:27:ac:8d:cc:98:f0:85:
23:a5:c6:44:c7:f0:91:71:48:b8:28:59:56:c3:07:
b5:13:34:d8:38:2d:46:5a:cb:c6:37:27:84:53:58:
c0:6d:c7:f1:a7:be:73:92:c8:db:40:bf:f4:24:ec:
b9:5b:dd:66:cc:23:ab:82:1e:18:bd:de:29:34:e3:
be:4d:12:b1:c2:e9:9e:ca:fe:87:71:e8:b6:d0:b6:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:2B:7A:94:5D:FC:9B:26:D1:99:CE:33:98:FF:67:04:0A:E7:AD
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:96:62:bc:ec:8a:03:97:f7:d3:12:1c:94:71:57:bb:f6:65:
bb:4b:d0:4e:50:06:4f:6f:05:94:b6:eb:c1:98:7d:ef:f0:70:
14:6a:bc:bc:3b:d3:64:4c:cb:66:75:a9:33:4b:a3:59:9f:c9:
a9:ce:bd:d0:60:c2:fe:8a:97:bf:44:dd:36:aa:e7:71:a0:51:
9f:49:18:c6:11:00:13:f9:3b:66:ad:82:0b:07:a6:1e:82:14:
b7:cf:f5:b1:67:ce:c9:ad:cc:e9:c6:c1:70:ac:14:c3:49:a2:
ee:42:10:2b:c8:32:20:f9:33:6b:9d:4b:f7:80:1d:fd:90:46:
1f:cb:5a:d4:62:4b:69:c8:e4:68:bf:22:3e:31:a1:81:a5:20:
76:70:a7:41:48:51:3d:06:96:49:70:c0:7f:bf:9f:56:90:e0:
a5:73:08:64:8e:6a:f4:fb:47:31:59:d4:b8:90:be:3a:c3:e9:
fe:62:b4:8c:0f:1c:38:05:c0:9a:0f:c3:12:47:7f:6b:3a:9e:
36:f5:8a:38:47:64:03:99:e0:b3:10:cd:36:e0:1c:6f:53:54:
fb:c3:e6:db:28:e6:d9:40:51:16:cb:27:10:69:7c:c9:8c:83:
f3:aa:36:71:6d:47:63:00:4d:e3:60:c7:b0:36:4e:15:48:b7:
47:53:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:37:10 2026 by rpki-client