Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: x5gk7z73PD+EcZam7nD+hxPYLagZKwWM1zO8/9Y7qtw=
Subject key identifier: 3C:FD:40:5C:38:1E:4B:83:71:85:7C:46:6F:7E:EB:48:97:B4:82:DA
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019E1F118307321B4371F41BB5C449117C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1904
Signing time: Wed 13 May 2026 02:01:41 +0000
Manifest this update: Wed 13 May 2026 02:01:41 +0000
Manifest next update: Thu 14 May 2026 02:01:41 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: JYpluDS4eppYJ6LtHRD7aVrprIsV+JaRA/6MmlOnSyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:83:07:32:1b:43:71:f4:1b:b5:c4:49:11:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: May 13 02:01:41 2026 GMT
Not After : May 14 02:01:41 2026 GMT
Subject: CN=3cfd405c381e4b8371857c466f7eeb4897b482da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:e5:d6:66:ba:12:aa:f9:12:d8:9e:14:8e:
1a:ed:1a:d8:9f:19:df:63:e8:18:45:d2:e3:ce:19:
47:91:19:46:02:34:a7:c9:b2:a2:4b:d9:15:a9:25:
67:76:58:65:73:8e:ab:60:f3:30:89:36:7a:ca:38:
cf:43:7e:e9:13:67:c0:67:f8:fc:1e:40:a4:b3:e1:
de:dc:bb:27:bb:9b:77:8b:1c:d7:84:f0:29:be:d1:
7c:c7:40:b6:ae:6c:33:5b:a1:d1:9b:fe:e5:b2:fd:
62:5b:85:97:c7:0a:54:da:25:61:a7:33:b3:0d:01:
63:9e:d9:0e:2f:f4:57:ac:47:8e:f4:83:cb:6b:46:
47:5b:27:f5:f3:08:95:03:6c:a2:35:7e:91:e5:60:
d4:27:cf:1a:f1:74:8d:f2:ff:be:d5:fc:e3:c1:63:
15:1a:2c:63:5c:14:4a:ae:35:26:aa:78:3a:8d:f6:
eb:68:3a:03:dd:5b:2a:7c:d5:9d:02:14:3d:52:4a:
10:29:9f:e2:5f:9c:b7:f4:ee:cb:47:d0:a8:74:49:
9b:90:78:e6:14:29:0e:9a:8b:f2:1d:21:a0:cb:ad:
c2:94:a8:fc:ba:8e:72:a9:5e:26:a8:71:6e:26:8b:
d2:fa:86:50:ed:d6:1b:f1:ab:89:e7:c1:2e:c0:17:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FD:40:5C:38:1E:4B:83:71:85:7C:46:6F:7E:EB:48:97:B4:82:DA
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:3c:94:c2:ca:f5:8f:97:89:2d:ef:4d:e9:d6:bd:57:42:
58:21:e0:e1:25:22:72:66:7b:51:55:30:d2:bf:a5:3b:b2:2b:
38:0f:63:85:20:e8:ee:61:c1:bf:6f:e5:ec:07:01:9b:06:9c:
30:ab:aa:24:61:a0:52:cd:75:bb:15:05:2f:58:89:1c:7f:65:
44:7e:d6:5f:35:d2:0b:32:e4:98:f2:41:d4:fb:65:cc:57:f3:
86:42:36:68:94:f5:d2:54:2f:79:70:0e:56:86:24:c1:c2:4a:
c9:05:88:44:74:5c:ef:aa:9d:50:fd:5a:72:dd:f8:b1:78:68:
14:81:34:c4:b7:0d:b2:42:f8:8b:6d:8e:60:21:49:66:9c:9b:
e4:6c:cb:88:57:c3:07:f6:e0:99:ce:c7:a1:9e:64:51:f4:37:
25:22:ec:24:8e:4a:f7:7c:eb:aa:ad:3a:cc:13:06:5b:e1:05:
b4:8f:b7:ee:8e:4e:b4:a5:9b:c5:49:47:cb:09:20:0e:c2:0e:
70:4e:ea:12:c6:8d:94:90:a5:b3:88:19:70:4f:2b:24:7c:fc:
96:ae:9e:b9:a0:29:69:82:40:ba:55:c5:7e:92:79:d6:cf:39:
12:2e:3a:f8:75:1a:7f:4e:b1:97:a6:1e:d7:1f:ea:ca:3b:19:
a2:c9:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:14 2026 by rpki-client