Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
File: 1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft (raw, json)
Hash identifier: 05OTgNxMm7pIrnEiHLAtKSZ5x9svCyLnsS0VG0OHeiw=
Subject key identifier: 07:1F:E0:DF:E6:FD:B9:D2:D5:7B:53:02:B6:03:A0:C9:35:C7:19:68
Authority key identifier: FA:56:99:A4:69:D1:E1:26:7A:1F:45:3E:E5:57:F2:AE:06:C7:04:BE
Certificate issuer: /CN=fa5699a469d1e1267a1f453ee557f2ae06c704be
Certificate serial: 01A0D45D5F6903E0E85A828A93A875ADC1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
Manifest number: 3B
Signing time: Thu 24 Sep 2026 17:01:24 +0000
Manifest this update: Thu 24 Sep 2026 17:01:24 +0000
Manifest next update: Fri 25 Sep 2026 17:01:24 +0000
Files and hashes: 1: 1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl (hash: GKBQ1UzkE9VV4XKWCtPvvwKdBC5UtYkzPZScnMh8Tys=)
2: LjOYSpelxDlHd3t6UrDIjulOOe4.asa (hash: 2ZekJ3nfNZ+GWnUy1CTHKZLOw6KEQprbbPFFqE0lf6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:5f:69:03:e0:e8:5a:82:8a:93:a8:75:ad:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5699a469d1e1267a1f453ee557f2ae06c704be
Validity
Not Before: Sep 24 17:01:24 2026 GMT
Not After : Sep 25 17:01:24 2026 GMT
Subject: CN=071fe0dfe6fdb9d2d57b5302b603a0c935c71968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:71:70:ff:e9:bb:d5:5c:0d:04:f7:aa:b0:
4c:19:2d:2b:26:f5:d9:07:7f:cd:2f:61:1b:31:6a:
de:f9:e4:a6:9a:5a:f1:60:44:7f:34:d4:08:bf:ea:
48:81:f6:d6:fb:c1:ed:34:b4:c9:99:f6:27:2d:0a:
f6:91:92:49:d1:f3:1e:0c:d1:90:90:6c:60:dc:ad:
a1:66:99:7b:0b:ef:62:bf:a7:2a:d9:3b:61:34:74:
14:b8:5b:bf:61:37:60:97:7e:67:73:0b:19:21:e7:
84:a4:5b:55:7d:c4:40:2f:dd:92:a7:fe:f5:9c:a5:
0c:5a:89:15:47:81:03:ec:58:10:4d:74:2c:b4:66:
26:25:94:25:31:de:b1:37:65:02:87:bb:a2:32:ff:
c7:27:02:d6:12:b3:9d:76:c5:44:86:43:eb:b9:7c:
36:25:2f:3f:47:8c:13:bb:a1:07:c1:39:79:70:9a:
11:07:a6:d8:8b:44:fd:e6:9a:37:e5:da:70:3e:62:
39:fa:72:02:0e:2d:86:c1:7f:c3:aa:2b:c0:5f:83:
c8:61:e8:bd:1f:74:d7:5b:3e:e8:68:a7:60:ef:90:
c4:4a:2e:09:b1:c8:b0:9e:ef:d8:05:7c:f1:02:5a:
51:6f:f9:26:e1:05:79:1d:8e:d4:c3:43:2c:c6:4e:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:E0:DF:E6:FD:B9:D2:D5:7B:53:02:B6:03:A0:C9:35:C7:19:68
X509v3 Authority Key Identifier:
keyid:FA:56:99:A4:69:D1:E1:26:7A:1F:45:3E:E5:57:F2:AE:06:C7:04:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b918e-9a00-49fa-993b-c57abe9556e2/1/1-laZpGnR4SZ6H0U-5VfyrgbHBL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:5d:b2:73:07:ca:44:ec:3c:32:18:85:33:08:10:7d:91:
42:68:ec:a3:cf:86:6b:ce:09:79:9b:7b:de:cf:10:1e:60:9f:
db:1a:6c:dc:60:1d:2f:2f:de:ac:ba:cf:30:0f:18:8c:25:22:
83:73:24:f8:92:e1:8a:66:d0:19:62:6b:c9:0e:41:35:c9:69:
b0:eb:0e:66:08:c0:67:d6:93:0d:a7:83:cf:79:cf:68:e2:a3:
0c:2d:ea:f0:7d:c9:60:d6:d3:f4:2e:9d:ea:e3:40:9a:fc:f1:
35:b6:e8:fc:42:f3:e9:3a:a5:c9:fa:50:e2:07:02:0d:13:25:
f5:c4:36:20:e3:36:d1:13:a0:6d:94:a9:48:a9:03:0a:69:b9:
13:d2:54:cb:ea:2f:96:43:ee:5e:76:94:a3:55:21:a8:7b:c7:
a9:26:4b:d3:a6:06:eb:d2:25:18:18:6e:5d:eb:f7:e0:a0:f9:
c2:1c:d8:90:df:24:a9:08:b8:fe:91:3d:05:1e:f2:7c:44:c8:
26:83:54:b5:c2:ab:db:fc:f8:59:dc:f0:da:f5:23:e5:f8:65:
f6:ab:48:6e:5b:3c:b0:4a:ce:9a:32:b4:8b:12:0d:44:37:7f:
3e:f6:6d:b3:dd:eb:ef:4c:56:e5:db:d0:1d:ef:9e:0c:12:26:
ce:15:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:15 2026 by rpki-client