Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: Ubm4+gLHxVS/Ubvx7PC9Cjz4z+u7NklQpSGW7fsSVys=
Subject key identifier: 0A:13:31:02:AF:6E:37:CD:B1:15:56:02:8A:17:0D:68:D9:22:76:5F
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 019D3A1C8AC1A7B3E6831DE04DF8E840AAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 18B2
Signing time: Sun 29 Mar 2026 15:00:42 +0000
Manifest this update: Sun 29 Mar 2026 15:00:42 +0000
Manifest next update: Mon 30 Mar 2026 15:00:42 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: 1PgskYG+8UdqRuC1ETgrRVv/fnlO1BVz6ESFHLgiow4=)
2: sxqFF3SrvGoUsRQZD8fu4--ERqs.roa (hash: 1C32Y1sbpjWSQ+8VoxTVRdY7H3ef9AMyVxgJYOjwRdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:8a:c1:a7:b3:e6:83:1d:e0:4d:f8:e8:40:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Mar 29 15:00:42 2026 GMT
Not After : Mar 30 15:00:42 2026 GMT
Subject: CN=0a133102af6e37cdb11556028a170d68d922765f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:c1:53:dc:bf:09:11:7b:ba:7c:3a:c2:36:
85:6a:66:b6:2b:79:a3:72:3d:1f:de:fb:4d:0d:27:
b4:f9:71:62:5d:d0:6b:57:2a:3f:6e:bd:b4:36:9f:
1c:57:d3:4a:77:c5:4b:0b:18:16:97:66:5e:06:28:
58:26:77:c5:fb:a8:08:c1:1c:29:f8:4e:1d:ea:78:
f8:16:a0:fb:7d:66:54:70:62:40:fd:ab:58:5f:bf:
9d:11:3f:b2:89:0b:cf:fc:00:c4:47:12:58:b5:fa:
f9:bb:21:ed:da:64:b7:fb:d0:69:c3:d3:23:a2:95:
97:60:f4:7e:9e:41:16:85:cf:28:68:f1:c5:89:5a:
f2:8e:5e:6a:92:fd:db:0d:63:5d:02:8a:3b:fb:4e:
e5:e8:1f:9f:a1:bc:d0:cf:a1:11:0e:c3:c3:7a:d1:
14:9d:11:23:08:25:31:1c:ff:a8:eb:ae:ee:a0:7d:
bf:3f:47:9d:07:1e:1d:fe:68:88:73:c7:de:b6:fc:
75:c2:bc:fc:3b:16:c7:80:2b:35:25:47:c3:00:d7:
10:0c:06:56:3a:8b:8e:49:0a:a7:63:93:6d:4a:0a:
01:85:c2:87:90:fa:58:11:40:19:dc:80:4a:a5:b9:
7e:cd:ff:1d:5e:25:4b:76:b0:89:d8:96:ec:ad:da:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:31:02:AF:6E:37:CD:B1:15:56:02:8A:17:0D:68:D9:22:76:5F
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6b:0d:6a:5f:97:9b:ab:88:45:90:8a:ed:0c:d0:05:1a:b0:
35:eb:b1:78:de:f6:5d:8b:7a:5e:91:48:3f:22:2c:7a:14:1c:
c3:ee:9b:ea:ac:7e:ba:1a:a3:bd:13:f2:9d:9d:4d:93:84:1c:
84:32:ce:a8:0b:03:34:87:4e:1a:66:bb:bd:8d:65:c4:b9:0b:
1d:d6:17:b1:1d:66:87:26:d1:54:fc:2c:9e:1b:3d:77:25:84:
d9:bd:49:e7:04:56:bd:33:a6:f9:9d:a2:cf:08:f2:53:b9:19:
f6:d3:dc:5d:9b:98:b9:48:63:4f:cb:93:46:9c:5d:9c:14:8c:
bb:24:0d:9f:51:95:4f:c5:5d:bb:1e:57:f8:4f:ae:cc:44:eb:
77:57:64:3a:d2:8a:97:69:ad:ca:12:d9:1c:67:31:f0:94:00:
c0:b5:a1:60:eb:5e:ed:f9:b2:b9:09:1a:5d:27:19:ba:4f:07:
0e:82:04:06:59:eb:69:a6:31:2f:fe:67:16:1f:71:20:a9:87:
7c:c9:f9:72:ae:63:a9:10:9c:95:3a:83:7f:7c:8d:91:d9:07:
75:7f:fe:7a:1d:e3:eb:ba:02:78:fc:9b:12:c6:71:2c:19:1c:
1d:30:97:a3:71:47:cc:21:38:d0:c0:47:71:12:01:67:41:ca:
7b:36:fb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:02 2026 by rpki-client