Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: PJDFz8xGXE6Mf32gnHtg0cPXGt9ZdQxuR4Iakx1GdWY=
Subject key identifier: 5C:FE:7D:AF:92:5B:22:5F:83:1E:DF:23:40:05:4B:F8:F9:25:EA:62
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019F8FEC2DA8A279E111BBCF1E11621D19FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 17:00:47 +0000
Manifest this update: Thu 23 Jul 2026 17:00:47 +0000
Manifest next update: Fri 24 Jul 2026 17:00:47 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 0dYsBvfJK7pqhZ8RwYmXdhY+6K89QgYNIhdx3FmRlb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:2d:a8:a2:79:e1:11:bb:cf:1e:11:62:1d:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jul 23 17:00:47 2026 GMT
Not After : Jul 24 17:00:47 2026 GMT
Subject: CN=5cfe7daf925b225f831edf2340054bf8f925ea62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:67:21:19:30:f4:22:b0:51:83:5b:3f:16:
12:c8:b9:39:3f:b8:fd:fe:85:63:05:e3:b7:87:5d:
53:ce:d6:bf:69:d4:6c:3c:27:64:28:e0:02:6b:c6:
58:37:4d:f1:11:b1:f2:5a:78:7d:2f:2e:87:24:83:
ea:02:75:3a:74:a4:ce:93:78:16:46:bc:25:0a:a9:
5f:d0:7c:66:eb:46:ba:79:ff:d9:d9:2f:37:df:f8:
21:4e:bd:27:1c:0a:53:20:61:2a:97:ac:b1:d6:db:
6d:24:25:c7:2e:38:81:1d:8c:cd:38:85:09:28:a3:
cf:d9:09:04:06:f9:85:9e:47:45:ff:7d:77:7b:ad:
ca:b8:c1:1b:0a:63:5a:41:8a:14:02:2d:00:c8:d3:
df:a6:23:66:e3:71:f6:f9:9d:c4:1a:64:a0:c3:fa:
22:df:19:ec:13:33:b6:64:57:5e:7f:f5:9c:d0:3b:
ed:71:55:7e:2e:c5:76:98:a2:32:32:f7:c0:72:bd:
37:d5:92:c7:49:2c:ca:ad:6a:45:1b:a7:e7:fe:0b:
d6:2a:91:fd:1c:5e:db:71:7c:f7:13:5b:b8:41:ef:
c6:6f:c4:82:a6:d9:2a:fc:ac:d9:e0:0a:98:b5:86:
bd:6a:e5:44:31:fe:e7:e6:2a:8f:86:96:e8:c1:58:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:7D:AF:92:5B:22:5F:83:1E:DF:23:40:05:4B:F8:F9:25:EA:62
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b1:d0:09:d1:cf:fd:62:47:85:0d:c4:68:db:1a:38:01:dd:
ec:94:a2:e0:fd:ca:50:6c:22:a6:d1:b0:5a:e4:40:f4:05:1c:
e6:e8:f7:a6:c9:66:71:05:9f:cd:8b:d0:4e:d1:f2:a3:53:d0:
49:d7:6f:8e:30:09:c2:a6:81:f6:f3:52:46:b7:46:12:5c:d5:
26:d1:36:5b:62:cc:24:f2:af:03:9b:8e:e8:dc:9f:99:18:e2:
0f:ea:7e:da:eb:ff:49:93:18:79:bd:58:81:90:2d:3d:d9:60:
82:dd:7b:68:aa:cf:45:75:43:46:ea:2b:72:20:54:6a:a8:f7:
67:26:63:f1:24:82:7c:b3:86:d9:bd:ba:94:0b:8a:94:5d:d4:
6a:8f:13:62:df:f9:b6:7e:97:1d:76:0d:9a:e4:bd:7f:21:24:
7a:1b:7d:65:8c:b3:60:7a:26:43:f5:a2:dc:8b:46:d9:bd:1e:
f9:5c:b2:88:db:10:ee:f3:4e:7b:f4:b7:dc:d3:24:94:ac:e6:
02:b0:3b:93:d1:62:78:86:71:b4:26:6a:53:75:05:0f:88:94:
bc:b1:5e:9b:aa:80:7d:0e:85:c3:fb:24:ea:b1:d0:a5:be:c4:
b2:c1:9c:4f:ed:78:67:b7:85:e3:7a:ba:6a:44:22:e8:ac:ee:
cd:af:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:24 2026 by rpki-client