Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: BJGlM0vH145n2//Nkf3bU9+2ryNkSOKMXt8ZbFqVzuE=
Subject key identifier: FF:C8:BB:41:58:56:E1:8B:08:33:74:51:0E:D0:8C:4A:99:8B:92:41
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019D371BD91D8C4BB40FC0BC8837BC67F96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:01:05 +0000
Manifest this update: Sun 29 Mar 2026 01:01:05 +0000
Manifest next update: Mon 30 Mar 2026 01:01:05 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: y5JAgA4j0d4VuNPZN5QtTw3p8vkK1CXNBH/XB/Q+C8E=)
2: r8PbpDzHXgfJiNwt0p1njiTGzqA.roa (hash: +SJYxb1bGepByhIB3drzHoM1u1Z/gMv0EMWpc82/7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d9:1d:8c:4b:b4:0f:c0:bc:88:37:bc:67:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Mar 29 01:01:05 2026 GMT
Not After : Mar 30 01:01:05 2026 GMT
Subject: CN=ffc8bb415856e18b083374510ed08c4a998b9241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:29:21:c8:9d:71:cf:8c:be:9f:96:f2:f7:
96:44:e7:34:1d:52:c1:80:48:1e:82:33:be:fb:4c:
7a:ac:1f:c2:66:94:5b:c4:bb:67:6a:24:45:ff:21:
a5:66:c5:de:46:7e:75:92:49:0f:a8:72:54:52:5f:
cd:3d:1e:f8:ce:04:ca:5b:1a:42:43:7a:3b:94:f9:
81:78:eb:40:02:84:59:dc:91:b0:47:69:b8:26:ef:
5f:93:11:88:31:5d:7b:7e:4e:2f:c9:cd:aa:11:3b:
42:1d:cf:80:d9:fd:ff:35:e5:5b:08:a4:81:65:ad:
d7:d1:a5:63:e3:24:e6:a6:de:dd:a4:7a:d3:15:25:
97:b2:cd:75:c2:8b:3f:71:48:ad:7a:35:19:30:f3:
da:48:58:86:40:8b:92:72:39:02:a1:b8:a8:2e:f5:
10:fd:6f:61:5e:b5:a3:ce:9f:b0:83:1f:60:22:c7:
c6:e3:d0:1b:fc:94:83:a1:67:90:7c:c3:38:c9:86:
ae:d7:47:df:eb:74:08:af:8f:44:12:69:be:71:6a:
47:c2:44:6f:95:ee:c2:17:05:54:af:65:53:93:bb:
05:45:59:22:05:40:e0:04:92:30:10:68:d3:63:af:
ad:bc:87:b5:a6:e0:23:a1:a3:ec:4d:d8:1a:7d:5f:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:BB:41:58:56:E1:8B:08:33:74:51:0E:D0:8C:4A:99:8B:92:41
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:eb:d0:f5:38:72:2e:61:2f:52:1b:cf:b2:df:54:ad:3a:36:
bf:e9:c4:86:86:6f:a1:a9:a6:e9:12:56:63:85:c7:ed:cb:3d:
fb:a2:97:60:88:41:2f:06:6c:c0:c5:ac:1f:ea:6c:bb:51:32:
49:57:ef:39:4a:fe:27:0b:fc:05:48:dc:a1:0d:09:af:c8:b9:
ab:95:e8:9d:42:9a:14:09:2d:14:84:35:fb:06:35:ec:b0:a5:
6c:4a:4e:bf:9c:27:6b:71:19:2b:04:c4:72:c7:e0:b7:75:8d:
4b:41:1d:26:58:0f:a0:b0:63:27:13:8d:e6:a5:4c:e7:f7:18:
b0:3c:6e:bb:24:6c:d0:8b:9b:2f:66:98:b1:fc:7e:dd:d2:60:
7a:fd:14:8b:f8:40:c3:16:84:a9:0e:48:96:08:11:bd:ca:e7:
ae:9e:0f:67:57:c7:2c:20:69:fe:c0:75:76:f1:33:22:dc:ae:
53:f1:7b:da:d9:1a:a9:dd:60:27:db:14:82:1c:41:87:72:99:
8d:80:d8:ba:fa:e1:da:e2:7b:38:0b:7c:f5:95:38:9e:ae:ed:
33:99:e3:39:07:cf:4f:55:2c:fc:30:7b:74:d1:df:0a:af:43:
6c:ee:ea:ad:b3:fa:97:13:62:68:53:2b:dc:63:1f:65:0a:80:
e5:c1:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:59 2026 by rpki-client