Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
File: 1-JnTgr62BW0U5qO8YYjlOS93LvU.mft (raw, json)
Hash identifier: vmV39cqVJx6nEqdB4L4kEV+TeNziSPZnAUAbEWLarT4=
Subject key identifier: 59:77:8A:94:58:D5:5C:29:87:87:3D:5D:A8:1F:EC:1A:C8:F4:C2:71
Authority key identifier: F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
Certificate issuer: /CN=f899d382beb6056d14e6a3bc6188e5392f772ef5
Certificate serial: 01A0D012A318049B523E93BEE4063A44BD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
Manifest number: 98
Signing time: Wed 23 Sep 2026 21:01:17 +0000
Manifest this update: Wed 23 Sep 2026 21:01:17 +0000
Manifest next update: Thu 24 Sep 2026 21:01:17 +0000
Files and hashes: 1: 1-JnTgr62BW0U5qO8YYjlOS93LvU.crl (hash: WDmFn1nWkBf+jpUmK44U36PnyrbFnuwgit5rVBbMyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a3:18:04:9b:52:3e:93:be:e4:06:3a:44:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899d382beb6056d14e6a3bc6188e5392f772ef5
Validity
Not Before: Sep 23 21:01:17 2026 GMT
Not After : Sep 24 21:01:17 2026 GMT
Subject: CN=59778a9458d55c2987873d5da81fec1ac8f4c271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:da:ed:a7:34:53:83:e9:e0:b5:c9:a8:6c:
38:93:48:ab:d9:49:cd:95:b6:9a:c4:8f:33:6a:32:
06:72:72:5d:a9:49:d1:8c:64:10:49:31:af:c4:c3:
1e:41:2b:6f:13:c4:bc:14:00:aa:25:90:ea:01:9a:
e1:a5:92:3e:82:ba:26:b1:f8:d4:21:fb:b6:99:6d:
ce:c4:81:e4:db:71:a5:90:1a:b8:6d:29:d3:c8:8c:
6a:6c:9f:2b:1c:ab:44:c7:d6:44:af:99:8f:47:f3:
5e:ad:10:5e:13:9f:d0:28:75:a5:6e:ee:ea:76:3f:
85:7b:6e:fc:1d:9e:f1:83:a3:21:de:88:35:50:83:
5b:8e:aa:b5:ba:6e:9e:ff:3f:79:a7:40:b0:d2:63:
77:c2:83:f5:af:90:3d:69:63:1a:9f:4c:c5:b9:66:
bf:af:4a:96:f7:c3:33:2e:8f:37:68:d0:9d:f4:7c:
2c:53:b1:5b:5a:a5:5f:cf:df:33:bd:02:2a:d5:59:
a7:65:87:e7:01:e2:6b:bd:d2:4f:99:e1:f0:71:f7:
f2:c3:5d:80:7a:71:0c:17:d8:5a:9e:14:f2:6e:3e:
df:b7:81:ed:90:e0:95:0e:35:32:e3:0d:69:9d:14:
7d:7f:48:3f:df:65:88:0b:a7:dc:f9:70:59:4f:0d:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:77:8A:94:58:D5:5C:29:87:87:3D:5D:A8:1F:EC:1A:C8:F4:C2:71
X509v3 Authority Key Identifier:
keyid:F8:99:D3:82:BE:B6:05:6D:14:E6:A3:BC:61:88:E5:39:2F:77:2E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JnTgr62BW0U5qO8YYjlOS93LvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e3b632-45e9-4093-8d06-5006f7d44c43/1/1-JnTgr62BW0U5qO8YYjlOS93LvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:a4:a1:69:68:b2:36:66:80:24:c5:da:72:c7:f8:fa:7d:
1b:8e:66:73:53:25:80:54:33:85:b4:7a:ad:20:84:24:87:85:
c1:56:9f:8b:19:77:3d:b8:ab:a1:e3:19:ba:11:47:25:2d:8e:
ab:f8:ed:b6:39:5f:24:76:c6:35:8e:a0:93:bc:2c:f1:07:d7:
41:e4:e8:12:c6:c0:25:40:f3:4e:75:73:6d:60:fa:75:a4:03:
7f:ac:62:a9:5a:c3:01:9d:4e:34:b5:5e:ca:51:88:4d:0e:db:
48:98:22:9a:68:35:b5:12:80:23:57:49:b8:0f:50:40:2b:ae:
1a:24:ff:01:15:97:1c:d2:72:c0:76:6d:b7:df:5b:17:84:40:
48:7b:6f:8f:0e:1e:17:05:0f:59:70:e9:20:c8:0b:28:fb:e0:
3c:39:b1:5b:dd:82:d6:a6:83:e0:90:30:15:ed:a6:de:6b:89:
89:b9:da:d9:9d:0c:6a:0d:d7:4c:17:ae:15:97:81:18:69:58:
26:51:20:c4:6e:36:02:69:d4:c7:59:dc:e8:c9:1a:18:0b:1d:
fc:dc:d9:40:f5:24:c3:f4:71:15:37:78:b3:b3:22:fd:22:07:
16:5f:c1:bb:39:57:3f:3c:27:a4:f0:f0:f2:1f:00:7f:94:c6:
01:8f:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:25:05 2026 by rpki-client