Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: OdqfIJcOalm8pQSIKC8ewbR8UJYRcrtxtwXFaEdNFyI=
Subject key identifier: 01:37:95:0E:CA:20:D8:7F:82:69:92:08:AA:94:40:04:73:7D:CD:53
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019D2AE071AEF407A3B21BB94B996175F583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 11E1
Signing time: Thu 26 Mar 2026 16:00:45 +0000
Manifest this update: Thu 26 Mar 2026 16:00:45 +0000
Manifest next update: Fri 27 Mar 2026 16:00:45 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: bKk5wW6m97O7jxGJxQyQJQB4ScrEEHUx/OxBscQzcfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:71:ae:f4:07:a3:b2:1b:b9:4b:99:61:75:f5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Mar 26 16:00:45 2026 GMT
Not After : Mar 27 16:00:45 2026 GMT
Subject: CN=0137950eca20d87f82699208aa944004737dcd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:04:55:31:5f:f2:bf:5c:12:bd:e7:95:77:
a7:b5:20:c3:7b:e9:91:48:8a:44:aa:71:b0:7f:18:
da:9a:dd:89:0a:f8:f0:ab:f6:92:6f:97:be:f6:ae:
97:e1:59:57:b7:e2:dc:4a:41:4d:5b:5e:7f:66:42:
fb:13:06:45:1c:60:f2:fc:cd:f9:32:31:77:19:bc:
49:ab:54:01:3c:a7:66:24:c0:5e:96:9a:f6:ca:4f:
bd:57:0f:0d:93:11:99:09:2c:37:02:e4:b5:ab:60:
cf:82:38:08:75:19:2e:49:01:3d:09:7c:fb:95:87:
19:4c:09:93:5c:85:af:7f:ae:0c:36:7d:da:c1:2a:
53:f9:81:93:e0:16:98:b6:15:fa:ba:cd:c3:21:af:
0c:49:62:81:be:c0:81:ff:61:0a:3a:bd:1f:e8:95:
5f:87:24:d8:10:21:bd:2b:5d:e8:9d:b6:cc:ac:1a:
42:31:58:7b:be:54:a2:98:18:0b:83:47:98:d5:82:
18:bb:e6:2a:cf:71:07:36:1b:b0:fa:08:44:79:75:
bf:45:d0:cb:36:d1:ba:b0:70:bb:90:2e:f9:f8:aa:
e5:84:81:f9:1c:ea:f4:51:04:73:b2:ac:37:4e:4a:
9f:c3:2d:40:a8:4e:94:08:ef:92:10:c4:17:04:20:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:95:0E:CA:20:D8:7F:82:69:92:08:AA:94:40:04:73:7D:CD:53
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e3:f9:30:49:47:3c:de:ee:0e:7d:7d:ee:aa:d2:57:13:6c:
ea:f7:0c:0a:ae:73:83:23:ae:63:20:ab:e4:ac:aa:1b:93:05:
68:dc:3d:8c:8a:d6:7e:db:7c:8b:04:24:a6:0d:c8:a3:88:37:
bd:6d:ff:9b:eb:a1:39:25:6c:72:ab:37:2d:12:6f:4d:75:74:
96:a9:dd:fd:da:bc:5c:2f:39:c8:fe:23:69:82:68:c0:93:9b:
c0:da:28:0b:41:cc:ab:a4:68:e8:23:17:bf:bf:2e:40:65:46:
73:f2:a5:7c:6f:07:73:3f:be:7d:9f:1b:b2:0d:b3:8e:82:76:
f1:aa:3d:fd:3f:b5:d1:f1:6b:41:34:45:09:75:3d:d6:b6:48:
1f:50:55:f0:f9:96:b7:eb:aa:3e:32:51:64:1a:14:38:4b:73:
f7:0d:66:e0:19:ed:1a:a0:b3:30:6f:60:df:a9:96:6f:28:2e:
49:05:da:da:36:28:ae:a1:39:ac:2f:3b:0e:3d:4b:f1:ca:5d:
a5:ce:db:3c:cb:5e:38:64:9a:66:45:6e:a8:45:e1:2c:5f:9a:
8d:25:cb:ec:2b:75:25:89:af:60:b1:92:ae:f6:dd:72:dc:df:
87:3f:57:ec:d9:3b:d8:bd:ef:c2:d7:b0:9c:fe:18:ed:49:23:
21:1b:2f:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0q4HGu9Aejshu5S5lhdfWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjYwMzI2MTYwMDQ1WhcNMjYwMzI3MTYwMDQ1WjAzMTEwLwYDVQQD
EygwMTM3OTUwZWNhMjBkODdmODI2OTkyMDhhYTk0NDAwNDczN2RjZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcEVTFf8r9cEr3nlXentSDDe+mR
SIpEqnGwfxjamt2JCvjwq/aSb5e+9q6X4VlXt+LcSkFNW15/ZkL7EwZFHGDy/M35
MjF3GbxJq1QBPKdmJMBelpr2yk+9Vw8NkxGZCSw3AuS1q2DPgjgIdRkuSQE9CXz7
lYcZTAmTXIWvf64MNn3awSpT+YGT4BaYthX6us3DIa8MSWKBvsCB/2EKOr0f6JVf
hyTYECG9K13onbbMrBpCMVh7vlSimBgLg0eY1YIYu+Yqz3EHNhuw+ghEeXW/RdDL
NtG6sHC7kC75+KrlhIH5HOr0UQRzsqw3Tkqfwy1AqE6UCO+SEMQXBCC5hwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAE3lQ7KINh/gmmSCKqUQARzfc1TMB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOP5
MElHPN7uDn197qrSVxNs6vcMCq5zgyOuYyCr5KyqG5MFaNw9jIrWftt8iwQkpg3I
o4g3vW3/m+uhOSVscqs3LRJvTXV0lqnd/dq8XC85yP4jaYJowJObwNooC0HMq6Ro
6CMXv78uQGVGc/KlfG8Hcz++fZ8bsg2zjoJ28ao9/T+10fFrQTRFCXU91rZIH1BV
8PmWt+uqPjJRZBoUOEtz9w1m4BntGqCzMG9g36mWbyguSQXa2jYorqE5rC87Dj1L
8cpdpc7bPMteOGSaZkVuqEXhLF+ajSXL7Ct1JYmvYLGSrvbdctzfhz9X7Nk72L3v
wtewnP4Y7UkjIRsvlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:48 2026 by rpki-client