Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: bRc5BailYtKlN4qiS6fGbhw+l/WjhuMAqij37gHuQ3g=
Subject key identifier: 5F:12:46:DB:99:1A:CD:14:A4:B3:1A:D5:BA:B9:D4:3E:26:A9:D8:E3
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019E1C468BA2BB473AEBFC9750D2F664843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 125E
Signing time: Tue 12 May 2026 13:00:45 +0000
Manifest this update: Tue 12 May 2026 13:00:45 +0000
Manifest next update: Wed 13 May 2026 13:00:45 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: AOXtbzkTQ+1gQnBoVShLhGYThWKDE3oHRhNUiHxBvj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:8b:a2:bb:47:3a:eb:fc:97:50:d2:f6:64:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: May 12 13:00:45 2026 GMT
Not After : May 13 13:00:45 2026 GMT
Subject: CN=5f1246db991acd14a4b31ad5bab9d43e26a9d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:27:09:bb:26:8a:49:c1:cf:5f:4a:ed:75:32:
90:c0:c5:48:63:b1:28:7c:f2:2b:c4:e6:19:7b:75:
64:b7:cd:fb:78:95:24:af:f3:9e:b3:8f:55:a1:08:
93:05:b0:7e:4f:42:0b:7e:b8:e3:23:80:c2:fd:09:
91:d7:65:a3:d2:0c:fc:43:fd:94:28:0a:77:05:6a:
5e:58:be:27:4e:f4:70:4f:1b:dc:c3:70:8c:fd:f0:
4d:e0:30:32:3b:bc:17:8b:16:22:6a:ee:e0:07:58:
77:21:b1:05:23:58:16:ad:d7:e8:cd:c6:f1:c8:1f:
53:a7:5a:8d:f5:14:65:3d:92:c5:89:95:94:a7:a1:
89:f7:69:22:61:a8:fa:bc:2c:fa:54:80:be:d5:c1:
e6:13:fe:40:04:42:5a:97:9e:8b:19:25:71:d0:e5:
9f:56:8a:7b:02:03:f9:29:37:27:21:a5:5b:c4:88:
a4:e9:5c:b0:b8:d5:fc:7e:b7:4e:bc:24:53:18:77:
fd:90:3c:dc:ee:7a:b0:19:56:f3:68:1f:e7:88:e8:
38:4e:55:9e:bd:bd:c1:c7:98:4a:88:74:1d:73:61:
c2:66:3b:f2:2b:e3:5d:bf:e8:36:c4:ec:ee:c4:c7:
a8:99:55:52:ca:2b:d6:91:fe:66:40:f7:60:da:24:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:46:DB:99:1A:CD:14:A4:B3:1A:D5:BA:B9:D4:3E:26:A9:D8:E3
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:41:43:ef:41:0d:32:4a:ce:66:57:cb:92:75:f2:5b:0e:
a6:c2:c8:8d:92:af:e0:d7:9d:05:eb:84:5f:30:08:29:f4:f0:
96:e9:cc:30:ba:8f:de:b2:95:41:ad:84:c1:bc:8e:5c:42:1d:
bb:d6:67:9f:9f:73:2e:86:f8:ca:99:3c:fc:9a:6f:e0:4a:87:
c3:8e:42:7d:c8:da:97:11:a6:02:6d:8c:f1:14:49:d7:c8:97:
d3:8b:c5:27:ab:83:fa:d2:6a:90:3b:1b:a7:5f:c3:18:fb:15:
c4:bd:7a:3a:b3:b2:d4:1a:09:d9:07:63:df:4b:4c:8b:38:1b:
b4:f9:c8:37:e3:80:ac:08:be:32:db:88:63:5b:94:47:4d:00:
38:44:b4:5c:42:35:68:93:69:be:76:77:f9:10:0c:d4:01:5d:
dc:f6:74:46:d7:2b:8b:ea:95:0f:47:37:9d:54:15:67:74:83:
63:b8:7b:fe:ff:60:f0:8f:30:66:70:2d:56:06:c4:51:6c:aa:
5e:4d:64:c2:5b:e9:b8:0c:ba:cf:79:66:c7:9d:ae:51:b0:b0:
86:1f:e6:09:a4:f9:53:82:2e:f0:50:e1:2b:10:0a:77:f1:3e:
e2:44:d4:63:07:d1:e7:4e:55:0e:ba:96:4b:9f:27:a6:fb:e2:
48:62:fe:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:03 2026 by rpki-client