Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: nCYq387/5dW0vnzFGHnISJ+oWK3+wQYqT3V4nvXr1kw=
Subject key identifier: 34:29:C5:DA:44:CD:61:76:83:5F:BD:A9:22:42:01:A0:16:9F:0D:C2
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019D27DFBA210F19A13FFD4EF1194C39D658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: LSZ4YwXj1ZU8x+6+LDBQBJCOuvD8AVH9KetbFYb2DnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ba:21:0f:19:a1:3f:fd:4e:f1:19:4c:39:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=3429c5da44cd6176835fbda9224201a0169f0dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:ed:8f:c0:57:42:72:8b:e8:09:af:d2:11:
69:b4:4c:c6:eb:21:95:07:24:29:13:fe:36:ae:97:
4a:de:53:41:fa:fb:ef:39:f3:0e:f9:58:88:fb:08:
3d:17:52:79:93:17:c8:0b:b3:07:a5:d0:cb:df:1a:
f6:24:1a:92:28:d0:62:69:50:4d:0d:33:ed:53:1e:
5c:e5:61:89:3a:fa:1d:c7:15:bc:3f:6c:c8:07:6c:
bb:bf:e5:15:3e:ca:98:7e:6a:ac:6a:c2:93:48:3e:
c5:17:f5:5b:ae:3f:92:27:21:32:e4:85:3c:7a:03:
ab:8e:7e:18:19:be:6c:04:a3:98:4d:ea:5a:48:92:
96:77:03:9d:c5:41:c1:04:58:c3:80:d4:68:7f:2f:
51:8a:1a:77:1b:60:4d:2f:6e:de:e7:e6:ae:11:2d:
76:5c:45:b0:9d:cb:f9:17:59:03:4e:13:1e:0c:29:
17:01:62:61:3c:e0:b1:47:2b:42:e4:c5:2d:ac:c3:
ec:46:be:92:d1:54:a3:0b:0c:b0:33:ac:11:da:c1:
c1:d2:28:27:a7:9e:61:c6:7a:ab:ae:4f:fe:77:01:
d9:6f:14:76:f3:b5:db:4f:bf:00:9e:61:56:93:2c:
f4:a0:32:8b:0a:c5:d0:58:40:7d:97:f7:24:02:88:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:C5:DA:44:CD:61:76:83:5F:BD:A9:22:42:01:A0:16:9F:0D:C2
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:57:ba:b7:46:c3:17:14:7d:5a:de:29:fa:1e:0d:96:f1:d7:
98:2f:29:de:39:58:57:88:10:78:b2:22:2f:5d:41:24:f9:1b:
31:db:1c:e2:c8:0a:c1:fc:0e:e8:a6:7f:84:f6:6d:8c:c0:f1:
12:b8:f3:d9:b8:4c:96:c3:14:94:f0:3c:56:d9:b3:99:2f:46:
c8:f7:b9:94:38:66:f8:ce:04:ba:5b:06:76:b1:6b:14:57:bc:
63:2a:4f:16:f4:f7:62:e7:34:6f:38:82:6f:ea:a7:06:1f:11:
bc:9e:fd:30:da:ef:29:dd:fe:03:a3:9d:53:25:f9:25:56:17:
4a:ba:11:b9:26:09:e4:92:9d:cc:ab:08:3d:47:fc:09:ac:cc:
3c:b9:d0:c2:dd:ed:8e:08:15:b7:45:e0:c4:71:c9:eb:95:8a:
b6:91:91:c6:a5:47:6a:21:a1:b5:1a:1d:aa:e7:0d:29:26:4d:
8d:3e:2c:d7:d1:01:33:87:7b:e1:bf:65:45:22:a8:d3:9f:b7:
1d:e7:2c:bd:fa:98:56:e4:f0:fc:d8:54:d2:9e:2c:41:ec:9e:
3e:f3:bb:ef:ac:ed:d9:b2:03:ae:e7:1c:6a:93:af:15:76:9b:
a1:c6:cd:e7:f3:7f:4f:d6:0e:18:47:9b:6f:58:0c:e7:8d:33:
77:a0:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:26 2026 by rpki-client