Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: AZ7Aksje5FavC97JEzXgNKqflkGk2M2XZJ6MMfM2z4k=
Subject key identifier: 00:22:AA:47:6B:04:21:F8:C4:2F:31:B7:EB:11:19:5C:4B:95:65:40
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 01A0CE5A4BB5ED4FCFD65227AFDE67A5BEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 03BD
Signing time: Wed 23 Sep 2026 13:00:18 +0000
Manifest this update: Wed 23 Sep 2026 13:00:18 +0000
Manifest next update: Thu 24 Sep 2026 13:00:18 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: WyGCgJDt4hw6XCjBS+iqwRrCt95pBNYrlZXh+vkrG2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:4b:b5:ed:4f:cf:d6:52:27:af:de:67:a5:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Sep 23 13:00:18 2026 GMT
Not After : Sep 24 13:00:18 2026 GMT
Subject: CN=0022aa476b0421f8c42f31b7eb11195c4b956540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:66:1e:1a:17:86:0e:2d:24:f7:cd:e2:04:
e4:05:c4:db:67:b2:c3:a6:37:36:e3:6d:84:5d:6b:
d7:b7:3d:14:82:76:70:1c:19:57:7e:ed:0d:f8:f4:
37:ea:89:35:72:30:40:35:6c:43:04:a0:da:d2:c2:
f0:f3:7f:23:ce:df:b1:14:78:2a:44:eb:5d:32:f6:
50:7c:c0:6e:6d:18:8a:70:95:40:51:f3:9d:57:b1:
e8:37:ea:07:d1:08:b6:ee:4b:ce:4b:a4:3e:86:a9:
82:5d:5e:64:29:cc:21:3f:0a:75:38:25:86:63:e1:
0a:c0:dd:95:9f:59:28:be:41:1c:84:64:09:9e:ff:
38:85:22:77:1a:2b:b8:e3:38:f8:bf:c1:63:11:98:
5e:02:21:17:03:d1:f2:5e:63:dd:3f:7d:10:6c:42:
1d:fd:f8:4e:6d:76:37:80:f8:6b:ed:80:41:0e:62:
da:36:04:f3:69:91:aa:35:97:51:b5:57:7a:19:b6:
7f:82:a2:fc:a0:8a:df:80:ac:4b:5f:5d:6b:c8:15:
cd:a5:9b:ee:d9:26:af:0b:20:fd:fa:2a:79:25:ec:
56:af:0f:fd:84:17:ca:80:5d:98:e9:0a:1e:91:17:
3a:62:42:8e:97:ae:cd:0a:27:12:8e:e7:36:20:f6:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:AA:47:6B:04:21:F8:C4:2F:31:B7:EB:11:19:5C:4B:95:65:40
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:e0:26:38:be:e1:ca:25:04:13:c3:a8:75:a8:a5:6e:32:
0b:39:c2:b6:82:dc:22:e6:88:22:5c:29:c9:81:1e:05:86:78:
3d:9d:7a:74:af:e2:b3:b0:ca:7f:22:c2:ce:27:98:35:2d:32:
0a:fe:be:b4:40:b0:00:cc:30:5e:7a:43:43:9b:cb:04:9f:29:
73:6a:02:76:96:0a:bc:37:42:24:e0:f9:f2:ad:f9:d5:ca:ad:
7e:c2:88:b3:16:5f:d1:c4:24:03:49:96:5a:35:34:e8:3f:93:
ac:41:76:60:88:32:0b:45:77:12:32:c1:e1:a2:04:3a:a7:d1:
c9:e2:98:14:54:59:2e:a8:d9:c3:2d:5d:48:fd:d0:34:e4:4f:
00:ee:12:03:c3:00:bc:9e:80:e0:86:41:f8:e2:08:57:db:c0:
e5:8d:e9:d8:e4:68:28:26:1c:8d:40:31:7b:42:49:93:42:bb:
c6:46:cd:3c:29:1a:32:4f:0c:6e:19:4c:25:5d:c9:6d:98:42:
0b:bb:cc:c6:32:61:2c:ce:31:3e:06:65:97:75:a3:f1:80:1a:
a7:3d:9b:96:5b:95:73:9c:0d:e6:c2:5b:77:4b:d1:a2:20:7e:
d7:c2:ee:ea:e9:11:41:bb:3e:ac:36:61:a3:fc:b0:d8:7a:8f:
77:f7:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:44:31 2026 by rpki-client