Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: yjTElXsGEhn9qKVyfJYc+RWcd26+AuTs6xKHFG3nduo=
Subject key identifier: 43:F7:42:2A:2D:03:1F:D0:4B:36:60:2E:9A:5F:A8:B1:B0:B0:01:6E
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019E1D2271F1A9D120E9FFDEBCA495CFC016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0B18
Signing time: Tue 12 May 2026 17:00:56 +0000
Manifest this update: Tue 12 May 2026 17:00:56 +0000
Manifest next update: Wed 13 May 2026 17:00:56 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: aVVIoLUJcRB6unyYRRqsC/ZyGvgmiu6OEPXQH8BMwKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:71:f1:a9:d1:20:e9:ff:de:bc:a4:95:cf:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: May 12 17:00:56 2026 GMT
Not After : May 13 17:00:56 2026 GMT
Subject: CN=43f7422a2d031fd04b36602e9a5fa8b1b0b0016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:31:af:6c:e9:26:8f:a0:af:50:b6:c0:71:
ea:38:23:77:a8:cf:c0:02:f8:23:ed:bb:f3:6a:97:
fb:60:db:77:8b:a8:db:c8:ae:1a:3b:b1:40:54:7b:
9c:26:2b:aa:6b:59:f7:f0:80:99:18:f0:5a:9a:46:
1a:0a:1e:82:4e:5a:93:dc:d0:f7:68:d2:69:69:42:
03:70:b3:58:d9:81:5b:b9:01:21:44:90:0e:a6:a1:
d0:54:5a:23:0a:e9:19:08:94:19:34:0f:a3:d0:c6:
dd:6e:97:4e:78:50:5c:8b:7b:12:a3:80:f3:6e:e2:
97:40:57:53:2d:4a:83:af:74:ae:d0:78:58:b9:de:
23:df:c4:fc:02:7e:61:75:f5:21:ae:26:88:21:a7:
06:c5:39:42:ce:d3:9a:7e:46:c1:28:61:52:30:d4:
cb:18:7f:54:c1:14:a3:e7:42:b8:1f:36:bf:b6:e5:
a4:7c:3d:79:32:a2:c2:ec:a9:25:65:fd:6c:b6:ff:
c9:77:be:52:63:16:ba:68:e6:97:c9:90:f0:6d:8a:
2f:04:a4:ed:7c:14:e3:52:b8:53:c0:e9:ca:e2:f6:
7c:c6:3d:fc:f4:c3:1a:ea:1d:68:10:f6:39:cb:1d:
52:ac:4a:99:4c:30:f5:df:9b:d8:8a:69:10:d9:12:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:42:2A:2D:03:1F:D0:4B:36:60:2E:9A:5F:A8:B1:B0:B0:01:6E
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:2f:86:19:cd:c1:89:64:b1:b0:04:3e:6a:ad:12:dc:2b:
5f:b4:0e:1e:6c:88:81:cb:87:1a:ad:49:11:3e:1c:e6:99:ba:
39:0f:31:95:07:54:f0:98:21:6f:49:52:31:25:ee:74:91:c6:
70:0a:c7:03:1b:d0:41:61:a0:b0:71:1c:4c:33:b4:3d:0a:8c:
41:ee:3c:12:97:7b:e4:36:74:d5:c2:2c:4c:db:eb:1f:e9:ff:
6b:f4:1e:58:d0:2e:10:a5:4b:9f:c7:89:b2:6d:ca:45:23:1a:
e0:71:ed:c9:9e:41:1b:3c:28:29:98:c7:64:65:49:2d:7e:8a:
18:69:85:ff:93:18:6d:d4:d5:75:0b:74:40:18:5e:e4:2b:72:
9a:04:e8:2c:da:8c:19:1e:21:ea:84:06:ad:3c:fe:90:ea:d1:
c5:9d:d5:7d:5e:fb:b7:88:ce:e0:de:e4:18:89:7d:47:4e:27:
da:aa:6e:39:05:47:7d:19:14:9c:b7:02:39:62:9b:9f:a1:1b:
52:b7:eb:58:43:80:43:b7:8c:43:22:04:c7:e9:b4:2d:3b:cb:
34:dc:3b:98:64:07:20:4d:ab:e3:02:3e:79:c3:64:1c:d8:f0:
8b:30:c4:d5:11:39:77:2c:dc:5e:3d:c4:58:b6:0d:86:d6:e5:
26:cc:24:b3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dInHxqdEg6f/evKSVz8AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjYwNTEyMTcwMDU2WhcNMjYwNTEzMTcwMDU2WjAzMTEwLwYDVQQD
Eyg0M2Y3NDIyYTJkMDMxZmQwNGIzNjYwMmU5YTVmYThiMWIwYjAwMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMxr2zpJo+gr1C2wHHqOCN3qM/A
Avgj7bvzapf7YNt3i6jbyK4aO7FAVHucJiuqa1n38ICZGPBamkYaCh6CTlqT3ND3
aNJpaUIDcLNY2YFbuQEhRJAOpqHQVFojCukZCJQZNA+j0MbdbpdOeFBci3sSo4Dz
buKXQFdTLUqDr3Su0HhYud4j38T8An5hdfUhriaIIacGxTlCztOafkbBKGFSMNTL
GH9UwRSj50K4Hza/tuWkfD15MqLC7KklZf1stv/Jd75SYxa6aOaXyZDwbYovBKTt
fBTjUrhTwOnK4vZ8xj389MMa6h1oEPY5yx1SrEqZTDD135vYimkQ2RKzfwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEP3QiotAx/QSzZgLppfqLGwsAFuMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm8v
hhnNwYlksbAEPmqtEtwrX7QOHmyIgcuHGq1JET4c5pm6OQ8xlQdU8Jghb0lSMSXu
dJHGcArHAxvQQWGgsHEcTDO0PQqMQe48Epd75DZ01cIsTNvrH+n/a/QeWNAuEKVL
n8eJsm3KRSMa4HHtyZ5BGzwoKZjHZGVJLX6KGGmF/5MYbdTVdQt0QBhe5CtymgTo
LNqMGR4h6oQGrTz+kOrRxZ3VfV77t4jO4N7kGIl9R04n2qpuOQVHfRkUnLcCOWKb
n6EbUrfrWEOAQ7eMQyIEx+m0LTvLNNw7mGQHIE2r4wI+ecNkHNjwizDE1RE5dyzc
Xj3EWLYNhtblJswksw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:04 2026 by rpki-client