Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: biI773eUvzEEOuHhcHDVoE6vZuDfVOR4CIkDWCm9NgM=
Subject key identifier: FC:2A:88:5F:67:F6:0B:CF:E2:4E:F5:13:45:57:16:10:33:6A:6C:1D
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 01A0CAB46D5662F11DEA0DEC2746D98C0472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0C7B
Signing time: Tue 22 Sep 2026 20:00:17 +0000
Manifest this update: Tue 22 Sep 2026 20:00:17 +0000
Manifest next update: Wed 23 Sep 2026 20:00:17 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: ZbfKDX7ws+jz7EeprwLLGqcU3i80JbW6Fc52yPuXoN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:6d:56:62:f1:1d:ea:0d:ec:27:46:d9:8c:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Sep 22 20:00:17 2026 GMT
Not After : Sep 23 20:00:17 2026 GMT
Subject: CN=fc2a885f67f60bcfe24ef51345571610336a6c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:a7:2e:bc:e8:b7:37:7a:3c:f7:d8:e6:c6:
c7:1a:08:f6:c4:c3:5c:e4:1f:3a:4b:f1:8d:4f:03:
f6:fe:91:46:27:87:b5:dc:7c:2d:95:e6:aa:55:57:
6a:16:74:f2:d4:12:33:2d:66:33:cc:a5:20:b2:06:
98:df:35:a4:f6:a1:c6:2d:c4:37:90:4c:eb:36:b3:
d3:ca:61:f2:d4:a3:c8:bd:fa:f5:06:cd:65:5f:09:
b7:cc:56:29:d6:d1:a3:df:85:03:bc:2c:98:a7:ba:
5d:e3:c5:93:3b:50:a3:07:ff:24:10:71:8e:5a:38:
98:07:bf:12:6b:ab:c7:58:b2:ca:65:00:7c:18:31:
a0:29:40:4c:8e:70:f9:47:11:4f:2b:85:89:de:ba:
07:75:eb:2f:41:6d:44:c7:df:7d:54:57:63:74:46:
9c:b9:73:71:8c:ae:5c:a4:ea:38:12:7c:20:c4:7f:
fd:f9:60:cc:ae:1a:4d:82:d8:fe:f3:d8:94:63:61:
b2:3c:38:07:10:b7:28:72:8f:84:82:97:a0:eb:2e:
86:6e:60:da:00:ab:63:02:c9:91:a0:4e:14:ff:76:
8a:c3:78:7a:3f:f1:3a:e6:3d:55:78:28:0a:fa:ba:
c0:8b:d6:23:33:28:ec:95:c0:6d:5e:c4:fc:c3:b6:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:88:5F:67:F6:0B:CF:E2:4E:F5:13:45:57:16:10:33:6A:6C:1D
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:62:4f:6d:7b:e1:37:03:29:4e:8f:e2:88:41:67:52:43:
69:df:a0:a7:98:3f:bf:07:52:16:46:92:17:f7:08:b1:9d:17:
cf:5a:3b:d6:39:93:7a:29:7c:e9:59:3b:e1:d7:b5:2f:5e:c8:
ed:b2:5c:ba:cd:e4:5e:57:9e:9f:3b:02:72:01:58:f0:a2:19:
92:dc:43:90:9d:0f:9e:ff:a2:57:38:0f:93:76:1e:a8:ef:23:
e1:d0:54:dc:e0:0f:a7:d2:5e:be:bb:00:a8:e8:0a:3c:e6:94:
36:95:9a:9a:9f:27:cb:0b:d8:40:89:68:ce:1d:f4:83:c4:b9:
78:18:9f:bb:2a:6c:cd:f6:78:f3:1e:b6:c3:3b:55:8d:88:c8:
6b:e2:25:5a:fa:16:d8:9e:02:75:ce:1b:ec:6b:f6:a3:71:3d:
33:98:04:22:6f:ae:a7:64:44:73:7c:bd:67:00:ed:b6:3d:db:
4e:cd:25:fd:87:f6:8a:aa:a3:04:72:7c:5c:5a:12:1f:f7:de:
19:d8:69:fa:e2:57:45:17:4e:96:30:b2:54:c1:39:68:28:93:
7a:fd:67:11:8f:58:98:13:46:68:8d:ef:ca:b4:6c:f9:28:41:
2c:a4:37:1e:a0:6e:bd:ec:fb:f1:5e:00:e1:84:5f:db:f1:43:
72:54:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:06 2026 by rpki-client