Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: tAjbsHgwXhlnMHGTmDP1yut8Q84cy1lh2P0dGyDdN30=
Subject key identifier: 31:A7:7E:1A:53:6E:0D:9E:29:32:3B:3B:C4:78:B4:9C:20:2D:3A:FE
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019F8F1039845610ED1D84B7C1380C2CA713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 131E
Signing time: Thu 23 Jul 2026 13:00:32 +0000
Manifest this update: Thu 23 Jul 2026 13:00:32 +0000
Manifest next update: Fri 24 Jul 2026 13:00:32 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: S7Gl1vdN8bvTRgKD2avJbmf4zAF+tbUX7yvi5Cs36fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:39:84:56:10:ed:1d:84:b7:c1:38:0c:2c:a7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Jul 23 13:00:32 2026 GMT
Not After : Jul 24 13:00:32 2026 GMT
Subject: CN=31a77e1a536e0d9e29323b3bc478b49c202d3afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:88:3d:1f:33:bd:39:a0:55:ad:b1:e0:4a:
6e:be:bd:7b:96:6e:93:64:54:d3:9e:5d:1f:e8:7b:
8e:e5:0a:32:6e:a0:f4:1e:ec:d8:14:26:be:0d:f9:
3d:e9:88:3f:b5:62:f6:45:c0:c0:1a:b6:b3:e0:1c:
82:53:44:57:03:6c:15:fc:7a:8d:75:b1:40:fa:5f:
7e:2f:17:be:25:c6:4d:31:31:9d:1d:d5:15:9e:e9:
0c:d6:7b:6a:c5:52:df:52:ed:ef:fc:ac:31:10:85:
8a:2c:99:5d:e6:50:83:6f:ea:0e:0d:34:04:71:1f:
72:66:a8:d7:0a:32:d6:14:42:66:a3:d7:b3:89:47:
d1:70:c4:9a:e3:00:e8:b6:b6:9a:42:24:5d:d2:f8:
5e:48:74:21:f6:ec:2d:61:47:f9:e7:b2:b5:4f:57:
27:52:22:a4:ca:a2:6e:50:59:9c:ee:f8:23:d0:a5:
b3:55:88:98:b3:e5:b3:cc:c5:94:27:ca:33:29:d9:
34:d9:26:60:5f:c7:44:cf:af:50:bf:c7:87:5a:b0:
86:75:0a:2a:1a:48:4a:6c:2d:fa:c2:f7:35:f3:94:
e9:e5:bc:e8:a0:d3:a3:2d:da:57:45:00:66:3d:15:
16:38:45:95:15:1c:e8:1d:dc:33:2b:35:16:04:c6:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:7E:1A:53:6E:0D:9E:29:32:3B:3B:C4:78:B4:9C:20:2D:3A:FE
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:e1:59:72:73:cc:7a:43:1a:8b:02:fd:47:12:fe:8c:00:
13:09:55:8e:f2:a3:64:cf:22:a4:35:35:f0:95:51:9f:fa:a9:
97:9e:61:c9:09:85:8a:d9:9c:47:4a:cf:b3:66:d3:99:b9:06:
25:9d:2d:9b:b6:dc:75:5f:f6:4a:fa:df:b1:6a:f9:12:5c:ad:
02:62:22:91:51:77:ee:27:86:c3:3d:8d:10:9e:2e:b1:f3:86:
b5:d4:17:7f:63:79:c3:1a:40:18:cb:ed:9e:88:76:98:c8:47:
ff:76:72:11:76:8d:10:7f:01:5a:58:c2:2c:ca:74:9f:ab:e1:
4f:2a:d4:84:03:c2:28:28:2a:d6:9b:c4:75:d6:54:fc:e3:0f:
67:46:6d:a1:36:2d:4d:b8:70:6e:81:77:1d:88:ae:34:19:45:
82:1e:79:5b:98:a6:cd:83:90:73:13:1c:e5:1c:8b:e9:d3:b1:
51:87:56:71:34:fd:90:f8:49:26:a9:dc:a1:d2:9c:56:81:4f:
84:df:80:8f:57:11:29:20:0b:d8:df:b6:28:37:4a:24:10:5d:
5b:3a:28:18:d4:c6:92:a1:1c:28:e2:f3:b4:e1:9c:da:8d:ba:
e8:75:bd:47:14:4c:a0:6a:0e:64:6a:cc:61:e3:1e:dd:ac:cc:
b2:d1:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:17 2026 by rpki-client