Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: /rf4FAjAEGu1r/dB/RDhgv8lp8oUIvQoJvGyZzJG3ks=
Subject key identifier: E2:F1:A5:CC:59:CD:95:E6:D3:47:40:22:68:11:08:C0:D9:52:A3:A4
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019D38D2EA931D1475B9BD2CCF485FD7D621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: CivfyjgZP/IjFcF94lpqIx7VHrdFCkzzX6v3PS6vIvo=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:93:1d:14:75:b9:bd:2c:cf:48:5f:d7:d6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=e2f1a5cc59cd95e6d3474022681108c0d952a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:12:96:a9:a2:e4:5c:17:d6:e8:2a:45:77:
27:af:a3:f1:33:38:88:9e:09:28:13:c9:68:1e:ca:
a2:16:0f:41:e7:0f:df:1e:fd:8c:3a:39:91:66:bc:
9c:ba:48:00:15:af:e3:67:11:46:80:a0:0a:64:24:
92:a0:25:22:c3:77:f9:12:fe:c4:c8:f1:f1:26:14:
40:13:ab:44:43:81:76:32:2d:4f:25:92:09:40:84:
48:98:58:4f:e1:3e:33:44:25:fc:e0:4b:50:93:b1:
3f:39:2b:c0:83:9c:dd:a4:20:e5:bd:51:64:f2:8d:
78:7e:17:c9:a9:34:c3:37:80:df:e8:c4:9f:a7:35:
34:f3:85:ba:39:c6:42:b1:ce:02:af:1d:51:6e:d4:
cf:ba:9b:53:23:21:4f:6c:50:e3:5c:a1:ee:9d:43:
6d:0a:72:9f:aa:63:98:7a:0f:1e:1d:96:72:77:7c:
fe:db:ce:a7:03:97:fb:c4:c8:2a:3c:52:d6:c9:c8:
43:b1:24:0d:cb:d9:dd:38:7d:57:60:0c:c9:ed:02:
74:44:fc:7a:1f:7f:37:ff:96:27:92:dc:de:43:5c:
fe:74:7b:44:05:02:17:61:fe:24:3c:5b:e3:cf:b2:
42:3c:c7:22:41:24:21:7c:a4:61:57:18:f3:0c:ea:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:A5:CC:59:CD:95:E6:D3:47:40:22:68:11:08:C0:D9:52:A3:A4
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:f3:cd:58:86:31:be:3e:0a:43:88:c3:c5:8d:0c:f4:8f:
03:cb:34:3c:b0:4f:c9:f7:ce:f3:1c:d1:8d:bd:4a:2d:60:4d:
7d:9f:0c:ba:06:dd:5b:76:48:1f:4d:83:40:22:06:41:0e:d0:
e6:fa:58:00:39:c3:91:36:91:7b:27:a6:9b:c8:5a:42:b8:4d:
0d:85:15:18:c3:4b:e3:f2:11:61:fc:e5:87:09:a6:03:55:40:
40:f5:d4:2f:14:ac:76:91:32:1d:73:c2:09:cc:38:98:de:4d:
86:28:09:8b:e8:ef:4e:c2:92:17:dc:53:fe:92:44:ed:b3:29:
25:8c:bd:18:5e:33:44:58:ff:dd:34:01:1f:2e:65:a3:f8:82:
58:aa:94:e2:d5:56:4d:33:ff:f1:a7:b0:5c:d3:bd:9d:8a:5b:
42:a0:bb:10:63:67:0c:56:e2:84:65:4f:cb:12:c2:bc:5b:49:
f5:1f:e8:bd:ef:9f:e9:33:df:1d:e9:1a:8f:d6:f3:60:93:e5:
d0:b0:c9:d1:a3:9b:88:bc:53:67:49:a9:3c:63:76:8f:11:ee:
35:0f:95:6b:9a:e3:71:cb:d7:09:8a:d3:e5:b9:ee:51:93:aa:
e6:b8:2a:32:e4:f6:bb:c4:84:23:d8:a0:93:28:e9:7f:58:6d:
e7:f7:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:45 2026 by rpki-client