Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: DCSeBkNdEk6RYiJjDVHkyB1t5Ruc+KUkYQht8Kj6AbQ=
Subject key identifier: 4A:9A:09:19:CD:99:00:52:C9:D2:CC:FA:96:94:72:AE:20:E1:24:19
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019D31502D6ED7FFCBA779A7C49929832351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 95
Signing time: Fri 27 Mar 2026 22:00:31 +0000
Manifest this update: Fri 27 Mar 2026 22:00:31 +0000
Manifest next update: Sat 28 Mar 2026 22:00:31 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: UypiUACS1pBco8A6bLVJhyeFVI+ezajA6RNQb1M+z74=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:50:2d:6e:d7:ff:cb:a7:79:a7:c4:99:29:83:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: Mar 27 22:00:31 2026 GMT
Not After : Mar 28 22:00:31 2026 GMT
Subject: CN=4a9a0919cd990052c9d2ccfa969472ae20e12419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:f2:4e:42:86:f9:83:62:4a:89:7b:a1:65:
bd:c6:64:9e:1c:23:9c:78:53:bc:1c:3f:1f:97:2d:
3b:88:f5:0d:a8:fb:d0:85:cf:49:7e:0d:74:51:3a:
70:0b:ec:bd:16:d7:7f:3e:5c:43:8f:be:7c:72:c9:
0f:81:7a:20:fa:4f:ce:d9:23:fd:fe:3d:d9:95:4d:
2e:72:99:69:42:b9:d8:14:3e:40:9f:63:c7:7b:bc:
22:e8:c7:66:5c:30:b6:85:8b:4b:8b:c7:be:16:0c:
2e:9d:da:f7:eb:ae:c8:9c:45:2b:69:41:78:f1:3b:
a2:12:00:69:b5:21:fc:4b:86:b4:2a:f2:a6:ab:42:
fc:e8:a4:18:12:2d:68:e2:4f:c0:8b:27:f2:53:55:
b3:7c:a4:e6:f2:8c:86:d8:94:ee:9d:67:4a:12:a1:
26:40:04:41:d2:5e:91:b7:c1:cc:c8:31:77:4f:cc:
68:89:0c:cb:49:b9:d7:8e:72:05:83:7e:2e:e7:9a:
48:7c:0e:13:d3:61:86:e4:6d:82:03:96:47:dd:d3:
17:58:5a:5c:29:04:d3:f9:3c:8b:39:12:33:08:be:
ee:6e:28:e7:7c:14:44:32:e6:cd:2f:2e:69:46:de:
59:47:fc:57:f8:21:d6:4e:16:b4:a7:4d:fa:52:4e:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:09:19:CD:99:00:52:C9:D2:CC:FA:96:94:72:AE:20:E1:24:19
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:8c:7d:71:69:e8:86:2b:37:5a:f6:a9:91:26:15:0c:48:
3b:05:6b:13:53:c3:c7:27:3c:c2:20:eb:c4:03:f4:69:8f:81:
a9:e0:5d:9a:d6:f0:b6:43:75:16:81:eb:77:8c:93:02:8c:ef:
9a:ad:3d:59:f5:af:39:a0:a7:99:55:73:f3:8c:8d:2f:ea:3d:
9e:9e:79:91:4e:e6:2f:3a:00:0e:82:62:3b:f7:c5:ca:5c:e8:
46:ae:6a:e8:cb:16:8b:2d:90:c6:ef:8f:8e:db:64:02:3f:bd:
b7:08:24:4c:59:d7:99:2d:ed:d1:bb:2f:a9:22:7e:2d:1b:a2:
25:fc:db:8e:87:df:bc:7d:7b:2e:05:76:ce:1a:92:95:02:df:
64:39:27:22:4d:ab:d0:11:b7:89:81:76:08:8f:6d:ef:e0:10:
5b:af:72:e4:01:0f:33:1d:e6:00:6c:4a:66:c7:98:9f:5e:de:
ab:4f:58:4b:eb:a9:d5:ac:b0:bd:02:ce:ba:be:fe:fd:d2:74:
24:22:0c:63:95:13:1d:88:50:9c:27:66:07:35:fa:ca:26:10:
04:14:26:dd:80:e1:70:c6:a3:f1:e7:db:c4:25:80:c9:a9:97:
ba:a5:67:d0:9f:a7:76:58:8d:c9:f1:d5:6d:4b:ef:ac:1d:6a:
db:a0:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 07:01:54 2026 by rpki-client