Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
File: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft (raw, json)
Hash identifier: g1cBQc+IPyO/nZpxHhMt4nMl64Za3zbEUeuCxlt3Sok=
Subject key identifier: 83:C3:DE:DC:4D:CC:67:4F:95:A4:5C:9E:C7:D9:3A:7B:96:6A:12:A8
Authority key identifier: FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
Certificate issuer: /CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Certificate serial: 01A0CD118161071ED24B392343BA9DC4AA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 07:01:11 +0000
Manifest this update: Wed 23 Sep 2026 07:01:11 +0000
Manifest next update: Thu 24 Sep 2026 07:01:11 +0000
Files and hashes: 1: 1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl (hash: jf0FWj6/ByMdy/3yrnSgCAmxxEPV99czTEIMfw+fRqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:81:61:07:1e:d2:4b:39:23:43:ba:9d:c4:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e97a5bad26ff1bdba859b2afdc38f1a5a8520
Validity
Not Before: Sep 23 07:01:11 2026 GMT
Not After : Sep 24 07:01:11 2026 GMT
Subject: CN=83c3dedc4dcc674f95a45c9ec7d93a7b966a12a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:64:81:a0:9f:05:b4:0c:43:24:e5:bb:6b:
7d:66:69:62:12:5e:63:1a:65:0f:06:5f:ec:f8:01:
49:54:e1:a7:19:d9:93:b6:5c:85:99:b5:7d:62:fc:
a9:18:f6:04:60:27:4b:c6:17:a3:e1:cb:77:7e:67:
b1:a4:4c:54:a1:ab:ca:80:8d:21:c6:10:f7:c2:3f:
a8:56:02:90:4b:c3:3b:d3:2a:00:0c:e6:3c:5d:44:
a0:d2:6f:1f:e2:49:87:52:14:81:23:1d:80:1d:ae:
14:63:04:23:9e:2f:a0:0b:1d:f5:44:1e:13:5b:55:
09:a6:54:fe:ea:85:d4:d7:bb:b0:b0:b2:98:71:18:
7b:82:13:46:62:2f:a5:ac:11:08:aa:da:f8:50:97:
14:bc:7a:83:a4:e2:73:62:46:5f:31:89:90:18:14:
0a:ee:b5:87:fd:3e:0a:df:a7:61:f8:bc:34:ca:67:
30:ad:df:86:b5:99:21:42:86:3c:7c:25:26:eb:30:
55:af:12:be:84:a5:f3:79:05:aa:01:d8:c2:9d:e8:
65:4d:76:bf:45:54:ee:5a:6a:12:70:80:b3:56:37:
2e:8d:d1:76:22:ff:4e:24:db:cd:c1:cb:50:10:75:
39:7b:24:bc:2d:e6:dd:cc:17:e8:02:9d:93:83:65:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:DE:DC:4D:CC:67:4F:95:A4:5C:9E:C7:D9:3A:7B:96:6A:12:A8
X509v3 Authority Key Identifier:
keyid:FA:4E:97:A5:BA:D2:6F:F1:BD:BA:85:9B:2A:FD:C3:8F:1A:5A:85:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k6XpbrSb_G9uoWbKv3DjxpahSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/1-k6XpbrSb_G9uoWbKv3DjxpahSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5a:77:11:c9:4e:2b:74:57:84:a8:db:f1:0e:2e:f4:c7:7b:
b6:56:65:2a:bf:1f:df:24:17:f2:3f:67:87:18:00:ae:89:b3:
65:fb:5c:0a:e4:ca:3f:06:99:4a:7d:00:a1:34:a7:88:a8:57:
b6:bd:46:2c:61:46:9b:fd:ad:9f:a8:92:b1:38:a9:21:92:dc:
06:cd:08:4e:0a:41:be:86:85:f9:8e:8d:2d:25:5f:33:9e:40:
7a:f8:aa:cd:e5:e8:f8:a7:56:11:5d:f6:1e:93:ad:d1:84:9a:
3d:e7:03:3a:3a:72:0e:0d:43:11:85:35:0c:2b:af:e2:69:b5:
8b:6d:25:84:13:b9:a6:20:9e:7d:77:4c:25:5c:5a:b5:71:ef:
e9:d7:63:71:43:64:a1:a0:1b:d4:05:c3:f1:af:6b:65:7c:ab:
cb:42:8a:c8:0a:73:20:ea:6f:51:dd:bd:22:ac:60:ad:e1:e0:
4f:5b:e1:e4:e1:10:44:e7:26:4e:34:37:a1:c0:cf:df:6e:cd:
48:2a:74:37:24:1b:7d:74:91:0c:e0:7d:e1:da:92:67:7e:1b:
3c:4b:32:8e:f9:38:be:a0:4e:50:c6:bc:7f:ba:4e:10:0a:2e:
b1:96:3b:81:a8:c0:b1:7a:53:17:7d:13:4a:6e:ea:c9:c4:5e:
f8:e6:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:16:45 2026 by rpki-client