Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: 6zc+yPbwlTTW2msvS8Ge2QQPFk8UAkcMB+gqjPDhb60=
Subject key identifier: 4F:C9:92:FD:55:00:A9:AD:D2:DA:DD:B3:4C:D9:C3:82:5E:62:00:C0
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 019D38D2A13CCEC0FF7ACEF463C7E12B74A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: grkcDKR916Sj2h7Fd/7lk0LUKjd69A7LrV0BuQjEhDU=)
2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a1:3c:ce:c0:ff:7a:ce:f4:63:c7:e1:2b:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=4fc992fd5500a9add2daddb34cd9c3825e6200c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:7c:41:31:c4:27:28:54:e1:2f:88:f5:a1:
9e:6c:51:2e:3a:31:a8:69:80:a9:76:e8:b1:12:0c:
a5:35:69:1d:9c:da:b6:28:ca:df:77:99:ab:df:d3:
9e:5f:68:c2:10:e9:13:d0:ef:dd:66:9c:08:a2:44:
70:38:79:48:a2:f6:d4:dd:12:2f:cc:7a:bb:41:0f:
da:d2:28:5c:2d:6d:fa:42:22:79:4d:a4:b6:8c:9a:
4f:c9:ed:3b:e5:33:a8:bf:43:1a:63:1e:9d:c3:8e:
2a:30:86:2d:89:73:4d:f3:4b:44:b4:4e:97:b5:ac:
de:e5:1e:66:29:4b:03:72:bd:41:ff:29:5b:83:5f:
4d:dc:41:34:17:9e:91:51:83:e0:33:2a:60:d1:f2:
7f:05:da:f2:93:ae:f7:04:af:80:f5:10:9a:a1:10:
29:12:90:d0:93:9f:48:3d:83:85:0e:c8:08:b5:66:
80:84:d8:f9:35:bb:e3:63:6b:9a:4c:a1:d6:70:c0:
0e:aa:47:2c:b1:b0:e5:4a:7f:98:0f:a9:03:4f:81:
cc:9b:63:8e:15:72:87:60:0e:65:bc:da:69:fa:02:
a2:d9:df:f8:41:d3:80:cf:a3:fe:30:6a:89:68:81:
21:45:98:b1:86:b4:a2:37:d6:d7:9a:52:0a:23:f0:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:92:FD:55:00:A9:AD:D2:DA:DD:B3:4C:D9:C3:82:5E:62:00:C0
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:96:38:d0:6b:ae:74:1f:58:31:74:21:d4:c3:4b:76:a4:a7:
65:bc:82:6c:d4:0c:75:f0:93:ac:51:bf:5d:ed:f6:de:cd:76:
98:e8:64:ce:64:88:d9:f5:fc:ce:93:64:3e:44:60:9c:ca:07:
19:5c:77:11:9d:7c:ba:4e:41:c2:2e:31:c7:42:f7:e0:e4:ff:
fb:cd:0c:54:b8:20:4a:4e:e2:3e:d0:5e:19:81:23:ad:8c:80:
af:70:31:19:a8:b1:71:2a:dd:28:41:36:17:a3:c1:ff:25:2a:
c2:54:9e:f4:7c:1f:91:dc:41:62:e6:47:28:34:cd:98:92:4c:
a2:1a:f5:17:b9:86:90:a2:67:da:6e:bc:ba:82:36:9a:96:62:
d8:43:97:a3:db:5f:38:54:73:f7:c5:34:ce:d7:ce:e0:cf:2b:
f9:ea:28:64:06:0f:01:f9:2d:c5:80:ea:91:e8:3a:4f:ca:a9:
66:0e:13:ef:f3:25:01:bc:fc:2f:16:ac:53:ca:bc:2d:de:b8:
a7:df:a2:08:97:b7:d4:ef:a3:fa:56:16:18:11:47:0e:d5:c6:
32:b6:3c:f7:96:a7:c9:cf:a2:b6:41:72:f0:9f:0f:7a:63:87:
45:99:d5:bf:bf:25:0c:00:6b:83:f2:7d:83:60:bf:31:41:e6:
f5:2b:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:57 2026 by rpki-client