Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: cMLm6mq5nQSRxgyTzB7zXDZ/4AKzA+7bbZS3bi6zQ18=
Subject key identifier: 7B:47:0A:07:1E:60:C1:01:B0:D2:43:4C:88:FF:2D:FA:D1:B2:99:12
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019D38663DC8E8500C86A327BBED6768112F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 0550
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: cE8EZsQbUGW+7WIDUtzn6ZDaoIEXKTkYx8tpbbJiQqI=)
2: hX56E-sl6aHlAsJVpCUmggT-itQ.roa (hash: zGrp5qWxfaDDtjYhp74VIMRhcorx1N2/XDFt+aUjFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3d:c8:e8:50:0c:86:a3:27:bb:ed:67:68:11:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=7b470a071e60c101b0d2434c88ff2dfad1b29912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:97:7b:7a:f9:53:d0:bf:5e:35:89:23:4a:
b6:ed:c4:88:78:be:8e:ab:c1:be:6c:df:fd:65:03:
42:ae:a8:a3:74:32:ad:22:f3:9b:5f:d5:fb:d8:82:
73:40:45:b0:4e:b4:42:3f:0d:fa:76:aa:d9:3a:b3:
13:9f:3d:36:a3:a9:4d:9c:76:79:42:93:06:c4:60:
5b:8a:33:00:98:f3:3d:d8:59:af:71:25:a4:23:45:
9e:3b:ec:7c:95:4f:0c:b1:21:ef:b2:ae:7c:b6:d6:
7f:d2:51:d5:93:15:10:5f:64:12:7d:a4:07:aa:eb:
52:09:b7:be:34:8d:be:c3:79:cd:0b:68:3f:a7:e5:
28:f5:5e:e8:51:3f:15:33:b1:b4:d7:67:cf:f0:c4:
b7:8c:12:76:92:ae:4e:11:d7:09:cd:45:e3:11:ed:
0c:82:b8:44:20:46:a4:67:49:54:07:8e:50:00:2f:
d7:d6:c9:fb:b1:7b:fc:b3:54:43:c0:96:c5:24:e8:
6f:7a:0b:7c:77:40:24:f5:55:21:ed:02:e8:b4:0d:
97:9f:25:31:90:ee:cb:c0:c0:5e:28:46:46:97:45:
9b:2b:37:46:94:25:a2:9b:30:0e:9f:57:46:8e:04:
64:b3:67:d1:44:09:1c:89:14:a1:91:11:cd:69:9e:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:0A:07:1E:60:C1:01:B0:D2:43:4C:88:FF:2D:FA:D1:B2:99:12
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:96:8f:ac:b3:58:6d:f1:71:a0:cd:4b:ce:b3:ff:16:26:
ab:da:81:92:98:2d:58:74:15:e4:da:4c:43:91:e4:bc:0c:1d:
4f:be:c8:5a:11:d8:46:ab:5e:c5:48:d2:94:b5:05:9b:6d:17:
ee:82:0c:6a:15:43:b9:1d:78:5e:c0:19:95:16:19:ab:59:78:
71:9f:a2:41:34:45:16:85:98:6e:a0:ea:0e:df:03:b0:6d:b6:
f0:89:86:e2:5b:8e:f3:f2:37:aa:d3:15:52:e0:f3:4a:dc:8a:
f9:dc:f6:ab:85:3a:fd:17:da:13:97:12:c4:4e:76:dd:d9:bc:
bf:58:76:72:4a:39:ee:b1:66:86:df:b9:30:7c:18:77:2d:a7:
2b:c2:24:e4:15:17:41:22:4e:f8:ba:c9:f7:03:f7:9d:50:4a:
72:31:18:d7:33:cb:cb:92:78:f8:99:1a:2e:2f:93:aa:d1:bd:
7c:4a:35:ec:6a:09:d6:4f:38:3d:20:fe:a6:48:3d:e0:4f:20:
2c:67:cd:f3:d7:06:19:fa:d5:fc:5f:fe:30:ff:5a:a5:a6:00:
1a:41:f2:88:58:57:71:4f:72:12:ed:e2:86:91:c7:46:2f:a3:
b2:93:0a:f5:2d:fb:b6:fc:47:fe:21:c5:ab:eb:bb:65:f3:85:
d4:8f:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:14 2026 by rpki-client