Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: apN9e2+42Qh3hl2QQy57TGlRImpt6x/k5/9DAkJRLkY=
Subject key identifier: 45:D4:C4:FB:25:D7:06:48:64:EC:2F:0D:FA:10:1E:36:F1:90:6A:C2
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 01A0D45DBF8C90DFB55B734CE50156E132A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 17:01:48 +0000
Manifest this update: Thu 24 Sep 2026 17:01:48 +0000
Manifest next update: Fri 25 Sep 2026 17:01:48 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: p6YLhCYvKD4eYR16jx1OEdwhTHbxENLRBUU9M7FA6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:bf:8c:90:df:b5:5b:73:4c:e5:01:56:e1:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Sep 24 17:01:48 2026 GMT
Not After : Sep 25 17:01:48 2026 GMT
Subject: CN=45d4c4fb25d7064864ec2f0dfa101e36f1906ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:0b:8f:b7:c1:ca:3e:f4:c2:2a:81:40:44:
40:f6:33:26:cc:f9:10:8f:23:06:bf:ba:dd:5d:13:
ae:10:a5:4b:93:c2:b8:a9:1f:1a:49:5b:2f:21:5d:
24:96:18:01:43:db:60:7b:52:a8:1d:df:fa:36:3e:
22:a0:77:93:92:5e:80:f9:b2:35:b1:fe:08:c6:e3:
65:90:fb:4a:00:73:80:81:13:54:45:d9:cd:e7:31:
ef:19:51:85:72:fb:9f:23:c0:06:25:d9:db:17:cb:
99:24:ad:fb:9e:c8:85:f4:d8:b1:4a:1b:d5:75:f3:
f7:91:bf:db:f9:0c:a8:c2:b8:ba:72:82:b8:6c:65:
e8:61:ae:7f:ab:49:69:54:a2:9d:0b:76:62:71:4f:
95:11:2a:08:c5:88:bb:7b:f1:52:2a:85:95:e9:5f:
d8:78:e5:c8:3c:65:d3:9c:19:69:3a:8b:ee:5a:04:
ef:2c:64:df:8f:46:5e:40:db:98:4c:20:4a:e5:e5:
f4:8c:f2:e6:e3:bd:da:06:04:df:de:e9:d5:80:92:
0b:2b:ed:3c:54:98:d9:40:5a:e5:61:b6:9c:d3:c9:
21:9f:2d:b4:70:d0:4d:56:e4:11:72:87:41:50:fa:
e2:03:db:f4:8d:40:ad:f2:91:d5:4e:7c:84:e7:57:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:C4:FB:25:D7:06:48:64:EC:2F:0D:FA:10:1E:36:F1:90:6A:C2
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ae:cb:fa:1e:e4:52:9f:7c:72:fd:24:6d:49:06:06:d8:6d:
6c:88:d3:25:41:b8:d4:62:4f:b7:06:83:fd:25:bc:4b:b8:71:
db:32:f6:fd:99:54:57:f2:9a:16:68:46:ff:3c:68:0e:cb:2a:
d2:82:62:a5:8f:54:59:57:d0:6b:d7:3b:ff:2c:e5:ab:cd:8b:
b9:ad:54:3e:18:5c:a8:74:17:f2:c7:f5:60:47:da:a9:3a:de:
55:ea:53:c3:d6:3a:2d:79:c7:20:14:83:4a:04:55:58:b3:19:
a9:f0:93:08:a4:79:e7:0d:18:e3:b7:59:22:3e:6e:b2:a8:a1:
f3:71:7b:56:09:2b:e7:69:b0:41:24:fc:b2:8f:f5:8e:9a:5e:
e3:ca:11:01:09:7f:f8:01:c1:f5:11:9f:eb:c4:61:75:23:13:
0b:df:d3:ca:99:3c:d7:fd:eb:45:93:f4:9e:96:64:b6:f5:93:
16:be:09:39:f2:53:fb:a2:7c:b8:09:8a:01:4d:66:d6:d5:12:
08:2c:18:be:bd:cf:37:e4:89:9c:1c:b9:77:4b:f0:e8:87:6e:
dc:01:c6:f1:25:58:76:86:9c:ad:44:14:4b:6e:3e:b1:78:ca:
53:11:77:1e:f3:0e:f4:1d:0a:79:a8:24:c6:10:3e:4a:69:17:
63:e0:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:24:17 2026 by rpki-client